PHP warns it plans to release 2 emergency patches imminently

Key points

• PHP maintainers plan to release fixes for two vulnerabilities, each rated 9.2 out of 10 in severity, in a little over 12 hours. The programming language powers websites and web applications widely.
• The maintainers said they may release the patches earlier if details become public or evidence of active exploitation appears. The move follows the leak of purported details, which have not been confirmed, describing an exploit tool called PHP2Shell.
• Security firm watchTowr said it has confirmed the vulnerabilities are real and that they affect PHP versions from PHP 5 onward.