⚠️ Vulnerability alert: php2shell Unpatched sites running PHP 5.4 or later are at risk of remote code execution, data exposure, and crashes. If your site’s web traffic is proxied through Cloudflare, we deployed protections before official public disclosure. Check the blog post to see which mitigations are enabled by default. Even with these mitigations in place, update PHP as soon as possible to fix the underlying vulnerabilities.

Cloudflare@Cloudflare3d ago

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. https://cfl.re/488w8dc