Two CVSS 9.2 PHP remote code execution flaws are being exploited. WordPress updates can't fix them - here is the…
