Menu

1 / 2

Cloudflare saw millions of php2shell attacks, and its new WAF defense is free for everyone

Reading 0:00
15s threshold

Published Oct 22, 2026, 12:15 PM EDT

Sara Heritage is a tech and gaming journalist, who's currently making her way up to Master Ball rank in Pokemon Champions. Bylines in IGN, GAMINGbible, The Gamer and more. You can usually find her tinkering with tech, or restoring old consoles, always with one of her 3 cats nearby. Come and talk with her over on Twitter @SHeritageJourno.

Sign in to your MakeUseOf account

This week, the cybersecurity landscape has faced one of the most significant security crises in modern times: php2shell. Since the language is used by about 70% of websites – carrying out dynamic page generation, managing the backend application logic, and dealing with database interactions on platforms such as WordPress, Drupal, and custom Laravel installations – hackers are able to run their own code on vulnerable servers by sending specially crafted requests, without needing to log in.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.