The PHP flaw that skipped WordPress entirely: what happened, and what to check on your site
Two critical PHP flaws, nicknamed php2shell, let attackers run code on a web server before WordPress even loads. Here is what happened, which PHP versions are fixed, and how to check your own site.
Read the article: The PHP flaw that skipped WordPress entirely: what happened, and what to check on your site