On October 20th, someone posted the details of two critical PHP bugs on Hacker News, two days before a scheduled fix. The bugs, called PHP2Shell, don't need an account on your site, a vulnerable plugin, or a bug in your own code, just a form request like a file upload. About 69% […]