PHP2Shell flaws confirmed exploited in the wild: patch PHP and review exposure
Two critical PHP remote code execution flaws, tracked as PHP2Shell, have been exploited successfully in the wild, according to a honeypot capture. PHP patches have been available since 21 October.

