Critical PHP RCE flaw under active exploitation after leak; WordPress, Drupal, Magento, Laravel exposed, patch due Oct 21
Patchstack reports a critical remote code execution vulnerability in PHP that is already being actively exploited after details leaked on October 20. Because the flaw sits in the language runtime, any PHP-based application on a vulnerable version is exposed, including WordPress, Drupal, Magento, Joomla and Laravel sites. Patchstack confir…