ThreatVectr
Tag

#PHP

4 stories taggedPHP.

Illustration: a dim server room aisle at night, rows of rack units with blue and amber status LEDs
Vulnerabilities

PHP2Shell patches land for two bugs that hand attackers the web server

The language itself, not the apps on top of it, carries the flaws. Four releases now ship fixes.

4 min read
Forum administrator dashboard showing active exploit code being shared publicly, vulnerability scanning results displayed with critical severity markers for unp
Vulnerabilities

WordPress 7.1.2 Patches a Critical Flaw That Attackers Started Exploiting the Same Day It Shipped

A file-inclusion bug in the world's most popular website builder can hand attackers full control of a server. The patch and the first real attacks arrived within hours of each other.

4 min read
Forum administrator dashboard showing active exploit code being shared publicly, vulnerability scanning results displayed with critical severity markers for unp
Vulnerabilities

Anyone Can Now Attack Unpatched vBulletin Forums Thanks to Public Exploit Code

Working exploit code for a critical vBulletin flaw is out in the open, and it lets a stranger run commands on the server without logging in.

3 min read
A code repository interface showing PHP packages in GitHub, with hidden scanning and reconnaissance scripts automatically executing in the background, cPanel co
Threat Intelligence

Hijacked GitHub Repos Turned Into Attack Machines Hunting cPanel Servers

Researchers found booby-trapped PHP packages using GitHub's own automation to scan the internet for web hosting control panels.

4 min read
© 2026 Threat Vectr