Comment by ebcode

But you wrote: "There are now multiple posts from vuln research teams all of whom have working RCE POCs against unmodified PHP applications." ? Are those "multiple posts" top secret?