Comment by likpok

Wiz (subsidiary of google) claims to have a working exploit: https://www.wiz.io/blog/php2shell-php-rce. Calif has as well: https://calif.io/php2shell/. Calif even posted a video demonstrating the exploit (subsequently removed)