PSA: php2shell, critical unauthenticated RCE in PHP patched today. Your WordPress/Laravel host needs updating, not just your CMS. : r/webdev