---
title: "Discussion on \"PHP patched two 9.2 flaws in its core. A fully updated WordPress is still exposed.\" | Hashnode"
description: "Discussion on \"PHP patched two 9.2 flaws in its core. A fully updated WordPress is still exposed.\". PHP2Shell's two CVSS 9.2 flaws allow unauthenticated RCE, reaching back to PHP 5.4. Only 8.5.12, 8.4.27, 8.3.36 or 8.2.35 fully fixes it."
url: "https://hashnode.com/posts/php-patched-two-9-2-flaws-in-its-core-a-fully-updated-wordpress-is-still-exposed/6ad9710784bd902810a30031"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [PHP patched two 9.2 flaws in its core. A fully updated WordPress is still exposed.](https://developer.tenten.co/php-patched-two-9-2-flaws-in-its-core-a-fully-updated-wordpress-is-still-exposed?utm_source=hashnode&utm_medium=feed)

PHP2Shell's two CVSS 9.2 flaws allow unauthenticated RCE, reaching back to PHP 5.4. Only 8.5.12, 8.4.27, 8.3.36 or 8.2.35 fully fixes it.

Oct 22 · 7 min read · developer.tenten.co  
Read the article

-   [#php](https://hashnode.com/tag/php)
-   [#web-development](https://hashnode.com/tag/web-development)
-   [#security](https://hashnode.com/tag/security)

## Written by

[Ewan Mak](https://hashnode.com/@tentenco)

@tentenco · SF

  
[View profile](https://hashnode.com/@tentenco)

Tenten build engaging user experiences for startups and corporates by connecting the dots between users’ needs and the business model.

Crafting seamless user experiences with a passion for headless CMS, Vercel deployments, and Cloudflare optimization. I'm a Full Stack Developer with expertise in building modern web applications that are blazing fast, secure, and scalable. Let's connect and discuss how I can help you elevate your next project!

## Responses

Markdown supported · ⌘↵ to post

No responses yet.