PHP2Shell Is Now Exploited in the Wild: What to Do Today By Joseph Werle No Comments on PHP2Shell Is Now Exploited in the Wild: What to Do Today 4 Min Read Two critical PHP RCE flaws, tracked as PHP2Shell, now have a confirmed successful exploit in the wild. Here is what the reports say, what they don't, and what I would do about it right now.