{"id":54271,"date":"2026-10-21T23:36:00","date_gmt":"2026-10-21T21:36:00","guid":{"rendered":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/"},"modified":"2026-10-21T23:37:30","modified_gmt":"2026-10-21T21:37:30","slug":"php2shell-patch-urgenti-falle-php-wordpress","status":"publish","type":"post","link":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/","title":{"rendered":"PHP2Shell: patch urgenti per due falle critiche, a rischio anche i siti WordPress"},"content":{"rendered":"\n\n<style>\n  :root {\n    --red: #CC1B1B;\n    --red-light: rgba(204,27,27,0.08);\n    --red-mid: #e84040;\n    --accent-soft-bg: rgba(204,27,27,0.07);\n    --accent-soft-border: rgba(204,27,27,0.18);\n    --text: #1a1a1a;\n    --text-muted: #666;\n    --card: #ffffff;\n    --border: #ebebeb;\n    --page-bg: #ffffff;\n    --surface-soft: #fafafa;\n    --surface-contrast: #f0f0f0;\n    --line-soft: #f5f5f5;\n    --soft-label: #bbb;\n    --muted-label: #999;\n    --copy: #333;\n    --font-head: 'Bebas Neue', sans-serif;\n    --font-body: 'DM Sans', sans-serif;\n    --heading-spacing: 0.04em;\n    --heading-weight: 400;\n    --spec-header-spacing: 0.08em;\n    --quickfacts-shadow: 0 10px 24px rgba(15,23,42,0.06);\n  }\n  .fbp5-wrap,.fbp5-wrap * { box-sizing:border-box; margin:0; padding:0; }\n  .fbp5-wrap { font-family:var(--font-body); color:var(--text); line-height:1.7; max-width:860px; margin:0 auto; padding:0 24px 80px; display:flex; flex-direction:column; gap:52px; }\n  .fbp5-wrap[data-rh-site-profile=\"klav\"] { padding:24px 24px 80px; background:var(--page-bg); border-radius:24px; }\n  .fbp5-intro { padding-top:36px; border-top:3px solid var(--red); }\n  .fbp5-intro p { font-size:17px; color:var(--copy); line-height:1.85; margin-bottom:18px; }\n  .fbp5-intro strong { color:var(--text); font-weight:700; }\n  .rh-phonebox { background:var(--card); border:2.5px solid var(--red); border-radius:16px; overflow:hidden; margin:4px 0 0; }\n  .rh-phonebox-topbar,.rh-phonebox-bottombar { height:4px; background:linear-gradient(90deg,var(--red),var(--red-mid),var(--red)); }\n  .rh-phonebox-header { padding:24px 28px; background:var(--surface-soft); border-bottom:1px solid var(--border); display:flex; align-items:flex-start; gap:24px; }\n  .rh-phonebox-hero { width:200px; height:267px; flex-shrink:0; overflow:hidden; border-radius:12px; background:var(--surface-contrast); display:flex; align-items:center; justify-content:center; }\n  .rh-phonebox-hero img { width:100%; height:100%; object-fit:cover; display:block; }\n  .rh-phonebox-header-main { flex:1; display:flex; flex-direction:column; gap:12px; min-width:0; }\n  .rh-phonebox-tag { display:inline-flex; align-items:center; gap:8px; width:fit-content; font-size:11px; font-weight:700; letter-spacing:0.1em; text-transform:uppercase; color:var(--red); background:var(--accent-soft-bg); border:1px solid var(--accent-soft-border); border-radius:100px; padding:4px 12px; }\n  .rh-phonebox-tag-icon, .rh-phonebox-hl-icon, .rh-phonebox-section-icon { font-family:\"Apple Color Emoji\",\"Segoe UI Emoji\",\"Noto Color Emoji\",\"Segoe UI Symbol\",sans-serif; }\n  .rh-phonebox-tag-icon { font-size:12px; line-height:1; }\n  .rh-phonebox-title { font-family:var(--font-head); font-size:clamp(24px,3.5vw,38px); line-height:1; color:var(--text); letter-spacing:0.02em; margin:0; }\n  .rh-phonebox-title span { color:var(--red); }\n  .rh-phonebox-title em { font-style:normal; font-size:0.6em; color:var(--soft-label); font-family:var(--font-body); font-weight:300; letter-spacing:0.01em; }\n  .rh-phonebox-sub { font-size:14px; color:var(--muted-label); font-weight:300; margin:0; }\n  .rh-phonebox-highlights { display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:10px; }\n  .rh-phonebox-hl { background:#fff; border:1.5px solid var(--border); border-radius:10px; padding:12px 14px; display:flex; flex-direction:column; gap:6px; }\n  .rh-phonebox-hl-top { display:flex; align-items:flex-start; gap:8px; }\n  .rh-phonebox-hl-icon { font-size:15px; line-height:1; }\n  .rh-phonebox-hl-value { font-family:var(--font-head); font-size:22px; line-height:1; color:var(--text); letter-spacing:0.02em; }\n  .rh-phonebox-hl-value span { font-family:var(--font-body); font-size:12px; font-weight:600; color:var(--red); }\n  .rh-phonebox-hl-label { font-size:11px; line-height:1.3; color:var(--soft-label); }\n  .rh-phonebox-colors { padding:12px 28px; background:var(--surface-soft); border-bottom:1px solid var(--border); display:flex; align-items:center; gap:8px; flex-wrap:wrap; }\n  .rh-phonebox-colors-label { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--soft-label); }\n  .rh-phonebox-color-chip { display:inline-flex; align-items:center; gap:6px; background:#fff; border:1.5px solid var(--border); border-radius:100px; padding:4px 12px 4px 6px; font-size:13px; color:var(--text); }\n  .rh-phonebox-color-dot { width:12px; height:12px; border-radius:50%; border:1px solid rgba(0,0,0,0.1); display:inline-block; flex-shrink:0; }\n  .rh-phonebox-section { border-bottom:1px solid var(--line-soft); display:grid; grid-template-columns:180px minmax(0,1fr); }\n  .rh-phonebox-section:last-of-type { border-bottom:none; }\n  .rh-phonebox-section-label { padding:18px 20px 18px 28px; background:var(--surface-soft); border-right:1px solid var(--border); display:flex; align-items:flex-start; gap:8px; }\n  .rh-phonebox-section-icon { font-size:16px; line-height:1; flex-shrink:0; margin-top:1px; }\n  .rh-phonebox-section-name { font-size:12px; font-weight:700; letter-spacing:0.05em; text-transform:uppercase; color:var(--muted-label); line-height:1.4; }\n  .rh-phonebox-section-values { padding:18px 28px 18px 22px; }\n  .rh-phonebox-row { margin-bottom:12px; }\n  .rh-phonebox-row:last-child { margin-bottom:0; }\n  .rh-phonebox-row-key { font-size:12px; font-weight:700; letter-spacing:0.06em; text-transform:uppercase; color:var(--red); display:block; margin-bottom:3px; }\n  .rh-phonebox-row-val { font-size:15px; line-height:1.6; color:var(--copy); }\n  .rh-phonebox-row-val strong { font-weight:600; color:var(--text); }\n  .rh-affbox { margin-top:-20px; }\n  .rh-affbox-wrap { width:100%; background:#fff; border:2px solid var(--border); border-radius:16px; overflow:hidden; }\n  .rh-affbox-grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); }\n  .rh-affbox-col { padding:22px 24px; }\n  .rh-affbox-col:not(:last-child) { border-right:1px solid var(--line-soft); }\n  .rh-affbox-model { font-family:var(--font-head); font-size:22px; color:var(--text); letter-spacing:0.02em; margin-bottom:4px; line-height:1; }\n  .rh-affbox-model span { color:var(--red); }\n  .rh-affbox-from { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--soft-label); margin-bottom:2px; }\n  .rh-affbox-amount { font-family:var(--font-head); font-size:36px; color:var(--red); letter-spacing:0.02em; line-height:1; margin-bottom:14px; }\n  .rh-affbox-ctas { display:flex; flex-direction:column; gap:8px; margin-bottom:14px; }\n  .rh-affbox-cta { display:inline-flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:100px; padding:11px 22px; font-size:14px; font-weight:600; white-space:nowrap; }\n  .rh-affbox-cta.secondary { background:var(--text); }\n  .rh-affbox-cta svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-affbox-coupon { display:flex; align-items:center; justify-content:space-between; gap:12px; border:1px dashed var(--accent-soft-border); background:var(--accent-soft-bg); border-radius:12px; padding:10px 12px; margin:0 0 12px; }\n  .rh-affbox-coupon-label { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-affbox-coupon-code { font-family:var(--font-head); font-size:22px; line-height:1; color:var(--text); letter-spacing:0.03em; }\n  .rh-affbox-promo { font-size:12px; color:var(--text-muted); line-height:1.5; border-top:1px solid var(--line-soft); padding-top:12px; margin-top:2px; }\n  .rh-affbox-promo strong { color:var(--red); font-weight:600; }\n  .rh-affbox-disclaimer { margin-top:10px; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-downloadjump { margin:-28px 0 0; display:flex; align-items:center; justify-content:space-between; gap:14px; background:#fff; border:1px solid var(--accent-soft-border); border-radius:16px; padding:13px 15px; box-shadow:var(--quickfacts-shadow); }\n  .rh-downloadjump strong { display:block; font-size:12px; font-weight:900; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); line-height:1.2; }\n  .rh-downloadjump span { display:block; margin-top:3px; font-size:13px; color:var(--text-muted); line-height:1.35; }\n  .rh-downloadjump a { display:inline-flex; align-items:center; justify-content:center; flex-shrink:0; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:9px 14px; font-size:13px; font-weight:800; }\n  .rh-downloadbox { margin:4px 0 0; }\n  .rh-downloadbox-wrap { background:linear-gradient(135deg,var(--accent-soft-bg),#fff); border:1px solid var(--accent-soft-border); border-radius:18px; padding:20px; box-shadow:var(--quickfacts-shadow); }\n  .rh-downloadbox-head { display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:14px; }\n  .rh-downloadbox-kicker { font-size:11px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:6px; }\n  .rh-downloadbox-title { font-family:var(--font-head); font-size:clamp(24px,3.4vw,34px); line-height:1; color:var(--text); letter-spacing:var(--heading-spacing); margin:0; }\n  .rh-downloadbox-count { flex-shrink:0; border:1px solid var(--accent-soft-border); background:#fff; color:var(--red); border-radius:999px; padding:6px 10px; font-size:11px; font-weight:800; text-transform:uppercase; }\n  .rh-downloadbox-links { display:flex; flex-wrap:wrap; gap:10px; }\n  .rh-downloadbox-link { display:inline-flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:14px; font-weight:700; }\n  .rh-downloadbox-link svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-downloadbox-note { margin:14px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-offerbox { margin:4px 0 0; }\n  .rh-offerbox-wrap { background:linear-gradient(135deg,var(--accent-soft-bg),#fff); border:1px solid var(--accent-soft-border); border-radius:18px; padding:20px; box-shadow:var(--quickfacts-shadow); }\n  .rh-offerbox-head { display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:14px; }\n  .rh-offerbox-kicker { font-size:11px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:6px; }\n  .rh-offerbox-title { font-family:var(--font-head); font-size:clamp(24px,3.4vw,34px); line-height:1; color:var(--text); letter-spacing:var(--heading-spacing); margin:0; }\n  .rh-offerbox-count { flex-shrink:0; border:1px solid var(--accent-soft-border); background:#fff; color:var(--red); border-radius:999px; padding:6px 10px; font-size:11px; font-weight:800; text-transform:uppercase; }\n  .rh-offerbox-links { display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:10px; }\n  .rh-offerbox-link { display:flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:14px; font-weight:800; text-align:center; }\n  .rh-offerbox-link small { opacity:.82; font-size:11px; font-weight:700; }\n  .rh-offerbox-link svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-offerbox-note { margin:14px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-offer-inline { margin:0; }\n  .rh-offer-inline-wrap { display:flex; align-items:center; justify-content:space-between; gap:16px; background:var(--surface-soft); border:1px solid var(--accent-soft-border); border-left:4px solid var(--red); border-radius:16px; padding:16px 18px; box-shadow:var(--quickfacts-shadow); }\n  .rh-offer-inline-kicker { font-size:10px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:4px; }\n  .rh-offer-inline-title { font-size:15px; line-height:1.35; color:var(--text); font-weight:800; }\n  .rh-offer-inline-store { margin-top:3px; font-size:12px; color:var(--text-muted); font-weight:700; }\n  .rh-offer-inline-cta { display:inline-flex; align-items:center; justify-content:center; gap:8px; flex-shrink:0; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:13px; font-weight:800; white-space:nowrap; }\n  .rh-offer-inline-cta svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-offer-inline-note { margin:9px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-external-embed { margin:4px 0 0; }\n  .rh-external-embed-wrap { width:100%; background:#fff; border:1px solid var(--border); border-radius:16px; overflow:hidden; box-shadow:var(--quickfacts-shadow); }\n  .rh-external-embed-head { display:flex; align-items:center; justify-content:space-between; gap:12px; padding:14px 18px; background:var(--surface-soft); border-bottom:1px solid var(--border); }\n  .rh-external-embed-kicker { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-external-embed-source { font-size:12px; color:var(--soft-label); }\n  .rh-external-embed-frame { position:relative; aspect-ratio:16 \/ 9; overflow:hidden; background:#000; min-height:0; }\n  .rh-external-embed-frame iframe, .rh-external-embed-frame > iframe { position:absolute !important; inset:0; width:100% !important; height:100% !important; min-height:0 !important; max-height:none !important; max-width:none !important; border:0; display:block; }\n  .rh-external-embed-body { padding:18px 20px; display:grid; gap:12px; }\n  .rh-external-embed-title { font-family:var(--font-head); font-size:24px; line-height:1; color:var(--text); letter-spacing:0.02em; }\n  .rh-external-embed-copy { font-size:14px; color:var(--text-muted); line-height:1.6; }\n  .rh-external-embed-link { display:inline-flex; align-items:center; gap:8px; width:fit-content; color:var(--red) !important; text-decoration:none !important; font-weight:700; }\n  .rh-external-embed-link svg { width:13px; height:13px; flex-shrink:0; }\n  .fbp5-section { display:flex; flex-direction:column; gap:0; }\n  .fbp5-section-label { display:inline-flex; align-items:center; gap:7px; font-size:11px; font-weight:700; letter-spacing:0.14em; text-transform:uppercase; color:var(--red); margin-bottom:10px; }\n  .fbp5-section-label::before { content:''; display:block; width:18px; height:2px; background:var(--red); }\n  .fbp5-section h2 { font-family:var(--font-head); font-size:clamp(27px,4vw,39px); letter-spacing:var(--heading-spacing); font-weight:var(--heading-weight); color:var(--text); line-height:1.05; margin-bottom:20px; }\n  .fbp5-section h2 span { color:var(--red); }\n  .fbp5-section p { font-size:17px; color:var(--copy); line-height:1.78; margin-bottom:14px; }\n  .fbp5-bullet-list { margin:18px 0 6px 20px; padding:0; display:flex; flex-direction:column; gap:10px; }\n  .fbp5-bullet-list li { font-size:16px; line-height:1.7; color:#1f2937; }\n  .fbp5-bullet-list li::marker { color:var(--red); }\n  .rh-quickfacts-grid { margin:18px 0 0; display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:12px; }\n  .rh-quickfacts-card { background:#fff; border:1px solid var(--border); border-radius:16px; padding:14px 16px; box-shadow:var(--quickfacts-shadow); display:flex; flex-direction:column; gap:6px; }\n  .rh-quickfacts-label { font-size:12px; font-weight:800; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-quickfacts-value { font-size:15px; line-height:1.6; color:#1f2937; }\n  .fbp5-highlight { background:var(--red-light); border-left:4px solid var(--red); border-radius:0 10px 10px 0; padding:15px 19px; margin:18px 0 0; font-size:16px; color:var(--copy); line-height:1.65; }\n  .fbp5-info { background:var(--surface-soft); border:1px solid var(--border); border-radius:10px; padding:15px 19px; margin:18px 0 0; font-size:15px; color:var(--text-muted); line-height:1.65; }\n  .fbp5-scheda { background:var(--card); border:1px solid var(--border); border-radius:14px; overflow:hidden; margin:20px 0 0; }\n  .fbp5-scheda-header { background:var(--red); color:#fff; padding:14px 20px; font-family:var(--font-head); font-size:20px; font-weight:var(--heading-weight); letter-spacing:var(--spec-header-spacing); }\n  .fbp5-scheda-row { display:flex; border-bottom:1px solid var(--border); }\n  .fbp5-scheda-row:last-child { border-bottom:none; }\n  .fbp5-scheda-key { width:42%; padding:11px 16px; font-size:13px; font-weight:700; color:var(--text-muted); text-transform:uppercase; letter-spacing:0.06em; background:var(--surface-soft); flex-shrink:0; }\n  .fbp5-scheda-val { padding:11px 16px; font-size:14px; color:var(--text); font-weight:500; line-height:1.5; }\n  @media(max-width:600px) {\n    .fbp5-wrap { padding:0 14px 60px; gap:40px; }\n    .fbp5-section h2 { font-size:32px; }\n    .fbp5-scheda-row { flex-direction:column; }\n    .fbp5-scheda-key { width:100%; }\n    .rh-phonebox-header { padding:18px 16px; flex-direction:column; align-items:center; }\n    .rh-phonebox-hero { width:150px; height:200px; }\n    .rh-phonebox-highlights { grid-template-columns:repeat(2,minmax(0,1fr)); }\n    .rh-phonebox-colors { padding:16px; }\n    .rh-phonebox-section { grid-template-columns:1fr; }\n    .rh-phonebox-section-label { padding:14px 20px; border-right:none; border-bottom:1px solid var(--border); }\n    .rh-phonebox-section-values { padding:14px 20px; }\n    .rh-affbox-grid { grid-template-columns:1fr; }\n    .rh-affbox-col:not(:last-child) { border-right:none; border-bottom:1px solid var(--line-soft); }\n    .rh-affbox-cta { width:100%; }\n    .rh-downloadjump { align-items:flex-start; flex-direction:column; margin:-22px 0 0; }\n    .rh-downloadjump a { width:100%; }\n    .rh-downloadbox-head { flex-direction:column; }\n    .rh-downloadbox-link { width:100%; }\n    .rh-offerbox-head { flex-direction:column; }\n    .rh-offerbox-links { grid-template-columns:1fr; }\n    .rh-offer-inline-wrap { flex-direction:column; align-items:flex-start; }\n    .rh-offer-inline-cta { width:100%; }\n  }\n\n  \/* RH_FBP5_CARDS_CSS_V1 *\/\n  .fbp5-related-grid { display:grid; grid-template-columns:repeat(3,1fr); gap:14px; }\n  .fbp5-telegram-grid { grid-template-columns:repeat(2,1fr); }\n  .fbp5-related-card { display:block; overflow:hidden; border:1px solid var(--border,#ebebeb); border-radius:8px; background:var(--card,#fff); color:inherit !important; text-decoration:none !important; transition:transform .18s ease, box-shadow .18s ease, border-color .18s ease; }\n  .fbp5-related-card:hover { transform:translateY(-2px); border-color:rgba(204,27,27,.35); box-shadow:0 16px 36px rgba(18,18,18,.10); }\n  .fbp5-related-card img { display:block; width:100%; aspect-ratio:16\/9; object-fit:cover; background:var(--surface-soft,#fafafa); }\n  .fbp5-related-thumb-placeholder { width:100%; aspect-ratio:16\/9; display:flex; align-items:center; justify-content:center; background:linear-gradient(135deg,rgba(204,27,27,.10),rgba(204,27,27,.03)); color:var(--red,#CC1B1B); font-family:var(--font-head,'Bebas Neue',sans-serif); font-size:28px; letter-spacing:.04em; }\n  .fbp5-related-body { padding:12px; }\n  .fbp5-related-body span { display:block; margin:0 0 6px; color:var(--red,#CC1B1B); font-size:11px; font-weight:900; letter-spacing:.08em; text-transform:uppercase; }\n  .fbp5-related-body strong { display:block; font-size:15px; line-height:1.25; color:var(--text,#1a1a1a); }\n  .fbp5-related-body small { display:block; margin:7px 0 0; color:var(--text-muted,#666); font-size:13px; line-height:1.35; }\n  @media(max-width:720px) {\n    .fbp5-telegram-grid { grid-template-columns:1fr; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) { grid-template-columns:1fr; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-card { display:grid; grid-template-columns:112px minmax(0,1fr); align-items:stretch; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-card img,\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-thumb-placeholder { height:100%; min-height:92px; aspect-ratio:auto; }\n  }\n<\/style>\n<article class=\"fbp5-wrap rh-json-article\" data-rh-article-type=\"news\" data-rh-site-profile=\"china-smart-buy\">\n<div class=\"fbp5-intro\"><p><strong>PHP ha pubblicato aggiornamenti urgenti per due vulnerabilit\u00e0 critiche<\/strong> che possono consentire a un attaccante senza credenziali di eseguire codice sul server. Il caso, chiamato <strong>PHP2Shell<\/strong> dai ricercatori Wiz, riguarda il motore del linguaggio usato anche da WordPress, Drupal e Joomla: non \u00e8 semplicemente un plugin difettoso da disattivare.<\/p><\/div><figure class=\"wp-block-image size-large\" style=\"margin:18px 0;display:block;clear:both;width:100%;position:relative;z-index:1\"><a href=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-1.webp\" target=\"_blank\" rel=\"noopener\" style=\"display:block;width:100%;position:relative;z-index:2;pointer-events:auto;cursor:zoom-in\" data-lightbox=\"csb-php-20261021\"><img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-1.webp\" alt=\"Schema Wiz Research del rischio di esecuzione remota di codice attraverso PHP\" loading=\"lazy\" style=\"display:block;max-width:100%;height:auto;margin:0 auto;pointer-events:auto\"><\/a><figcaption>Schema originale Wiz Research: il rischio riguarda il motore PHP sotto applicazioni come WordPress, Drupal e Joomla. \u00b7 Crediti: Wiz Research<\/figcaption><\/figure>\n<section class=\"fbp5-section\"><h2>Il problema \u00e8 sul server, non nel browser<\/h2>\n<p>Le falle sono identificate come <strong>CVE-2026-109618 e CVE-2026-109619<\/strong>. La prima riguarda la gestione dell\u2019esaurimento della memoria; la seconda dati interni che possono restare referenziati dopo che la memoria di una richiesta \u00e8 stata liberata. In determinate condizioni, una richiesta successiva pu\u00f2 sfruttare quello stato non valido.<\/p>\n<p>Il team PHP considera a rischio le installazioni che servono richieste web, comprese PHP-FPM, Apache con mod_php, php-cgi, FrankenPHP e LiteSpeed. Il rischio non \u00e8 per\u00f2 identico in ogni configurazione: per mod_php \u00e8 stato dimostrato un attacco che parte prima dell\u2019esecuzione del codice dell\u2019applicazione. Altri percorsi dipendono da configurazione e comportamento del software ospitato.<\/p>\n\n<\/section><figure class=\"wp-block-image size-large\" style=\"margin:18px 0;display:block;clear:both;width:100%;position:relative;z-index:1\"><a href=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-2.webp\" target=\"_blank\" rel=\"noopener\" style=\"display:block;width:100%;position:relative;z-index:2;pointer-events:auto;cursor:zoom-in\" data-lightbox=\"csb-php-20261021\"><img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-2.webp\" alt=\"Schema Wiz Research della possibile divulgazione della memoria del server PHP\" loading=\"lazy\" style=\"display:block;max-width:100%;height:auto;margin:0 auto;pointer-events:auto\"><\/a><figcaption>Schema originale Wiz Research sulla possibile esposizione di dati presenti nella memoria del server. \u00b7 Crediti: Wiz Research<\/figcaption><\/figure>\n<section class=\"fbp5-section\"><h2>Le quattro versioni corrette da verificare<\/h2>\n<p>Le release stabili indicate nell\u2019avviso ufficiale sono <strong>PHP 8.5.12, 8.4.27, 8.3.36 e 8.2.35<\/strong>. La raccomandazione \u00e8 aggiornare tempestivamente al pacchetto corretto per il proprio ramo. Le distribuzioni Linux e i fornitori di supporto esteso possono distribuire correzioni proprie: il numero di versione, da solo, non sostituisce la verifica del bollettino del fornitore.<\/p>\n<p>PHP 8.1 e le versioni precedenti non ricevono pi\u00f9 il normale supporto upstream. Il progetto segnala interventi straordinari e possibili backport, ma non sono un motivo per considerare automaticamente protetta una vecchia installazione.<\/p>\n\n<\/section>\n<section class=\"fbp5-section\"><h2>Cosa cambia per chi gestisce un sito WordPress<\/h2>\n<p><strong>Aggiornare WordPress non equivale ad aggiornare PHP.<\/strong> Chi utilizza un hosting gestito deve verificare con il provider che il runtime effettivamente in uso sia corretto; chi amministra direttamente il server deve seguire le indicazioni del progetto e della propria distribuzione. Per il visitatore ordinario non c\u2019\u00e8 invece una patch del browser da installare per risolvere questa falla sul sito altrui.<\/p>\n<p>I due advisory distinguono mitigazioni parziali e soluzione completa: <strong>le modifiche di configurazione non sostituiscono la patch<\/strong>. \u00c8 quindi importante non improvvisare interventi copiando una singola impostazione senza considerare il resto del sistema. La gravit\u00e0 della vulnerabilit\u00e0, inoltre, non dimostra che ogni sito basato su PHP sia gi\u00e0 stato compromesso.<\/p>\n<p>Riferimenti tecnici: <a href=\"https:\/\/github.com\/php\/php-src\/security\/advisories\/GHSA-w8hw-w9fx-j79w\" target=\"_blank\" rel=\"noopener\">advisory sulla gestione della memoria<\/a>, <a href=\"https:\/\/github.com\/php\/php-src\/security\/advisories\/GHSA-6wmf-4rv5-p3rp\" target=\"_blank\" rel=\"noopener\">advisory sullo stato globale<\/a> e <a href=\"https:\/\/www.wiz.io\/blog\/php2shell-php-rce\" target=\"_blank\" rel=\"noopener\">analisi originale Wiz Research<\/a>, da cui provengono le illustrazioni.<\/p><\/section>\n\n<section class=\"fbp5-section\" data-rh-related-section=\"1\">\n      <div class=\"fbp5-section-label\">Articoli correlati<\/div>\n      <h2>Altre notizie <span>da leggere<\/span><\/h2>\n      <div class=\"fbp5-related-grid\"><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/anthropic-worm-ai-dispositivi-iot-test-replicazione\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/anthropic-replication-cover-768x430.webp\" alt=\"Anthropic studia i worm AI sui dispositivi IoT: cosa dimostrano i test\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>News<\/span>\n        <strong>Anthropic studia i worm AI sui dispositivi IoT: cosa dimostrano i test<\/strong>\n        \n      <\/div>\n    <\/a><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/openai-gpt-6-astra-capacita-critica-cybersicurezza\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/09\/openai-gpt-27c34c6a-97e7-4bcd-a33f-a66f-8u0cqtkoa0-768x432.webp\" alt=\"OpenAI presenta GPT-6 Astra: raggiunta la soglia critica nella cybersicurezza\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>News<\/span>\n        <strong>OpenAI presenta GPT-6 Astra: raggiunta la soglia critica nella cybersicurezza<\/strong>\n        \n      <\/div>\n    <\/a><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/openai-rapporto-attacco-hugging-face-sandbox-ai\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/08\/openai-pubblica-il-rapporto-sull-attacco-a-hugging-face-8ad2304d-c61b-4004-9483-e1a5-44vehv1889-768x432.webp\" alt=\"OpenAI pubblica il rapporto sull\u2019attacco a Hugging Face\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>News<\/span>\n        <strong>OpenAI pubblica il rapporto sull\u2019attacco a Hugging Face<\/strong>\n        \n      <\/div>\n    <\/a><\/div>\n    <\/section><div class=\"rh-attribution-pills\" style=\"display:flex;gap:10px;flex-wrap:wrap;justify-content:flex-start;margin:16px 0 0\"><a href=\"https:\/\/www.php.net\/archive\/2026.php\" target=\"_blank\" rel=\"noopener\" title=\"Fonte: PHP\" aria-label=\"Fonte: PHP\" style=\"display:inline-flex;align-items:center;gap:8px;padding:10px 16px;border-radius:16px;background:linear-gradient(135deg,#eff6ff,#dbeafe);color:#1d4ed8;text-decoration:none;font-size:11px;font-weight:900;letter-spacing:.08em;text-transform:uppercase;border:1px solid rgba(59,130,246,.20);box-shadow:0 8px 22px rgba(37,99,235,.08)\">Fonte: PHP<\/a><\/div><\/article>\n","protected":false},"excerpt":{"rendered":"<p>Due falle nel motore PHP possono consentire attacchi senza credenziali. Disponibili quattro release corrette: cosa verificare sull\u2019hosting e perch\u00e9 aggiornare WordPress non basta.<\/p>\n","protected":false},"author":10,"featured_media":54244,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_yoast_wpseo_focuskw_text_input":"PHP2Shell","footnotes":""},"categories":[480],"tags":[2013,1846],"class_list":["post-54271","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-php","tag-sicurezza"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>PHP2Shell: falle critiche in PHP, patch e rischi per WordPress<\/title>\n<meta name=\"description\" content=\"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP2Shell: falle critiche in PHP, patch e rischi per WordPress\" \/>\n<meta property=\"og:description\" content=\"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"ChinaSmartBuy\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/facebook.com\/chinasmartbuy\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-21T21:36:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T21:37:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"890\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Pierluigi Vitale\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pierluigi Vitale\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/\"},\"author\":{\"name\":\"Pierluigi Vitale\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/person\\\/d1b2f5d465e9c5f5a3e1316ad64b74c4\"},\"headline\":\"PHP2Shell: patch urgenti per due falle critiche, a rischio anche i siti WordPress\",\"datePublished\":\"2026-10-21T21:36:00+00:00\",\"dateModified\":\"2026-10-21T21:37:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/\"},\"wordCount\":477,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/csb-20261021-php-cover.webp\",\"keywords\":[\"PHP\",\"sicurezza\"],\"articleSection\":[\"News\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/\",\"name\":\"PHP2Shell: falle critiche in PHP, patch e rischi per WordPress\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/csb-20261021-php-cover.webp\",\"datePublished\":\"2026-10-21T21:36:00+00:00\",\"dateModified\":\"2026-10-21T21:37:30+00:00\",\"description\":\"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/csb-20261021-php-cover.webp\",\"contentUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/csb-20261021-php-cover.webp\",\"width\":1600,\"height\":890,\"caption\":\"Illustrazione ufficiale PHP2Shell pubblicata dai ricercatori Wiz\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/php2shell-patch-urgenti-falle-php-wordpress\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PHP2Shell: patch urgenti per due falle critiche, a rischio anche i siti WordPress\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\",\"name\":\"ChinaSmartBuy\",\"description\":\"NEWS \u00b7 GUIDE \u00b7 OFFERTE\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\",\"name\":\"ChinaSmartBuy\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/06\\\/logo-chinasmartbuy-e1560864925407.png\",\"contentUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/06\\\/logo-chinasmartbuy-e1560864925407.png\",\"width\":100,\"height\":100,\"caption\":\"ChinaSmartBuy\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"http:\\\/\\\/facebook.com\\\/chinasmartbuy\",\"https:\\\/\\\/t.me\\\/chinasmartbuy\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/person\\\/d1b2f5d465e9c5f5a3e1316ad64b74c4\",\"name\":\"Pierluigi Vitale\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"caption\":\"Pierluigi Vitale\"},\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/author\\\/pierluigivitale\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PHP2Shell: falle critiche in PHP, patch e rischi per WordPress","description":"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/","og_locale":"it_IT","og_type":"article","og_title":"PHP2Shell: falle critiche in PHP, patch e rischi per WordPress","og_description":"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.","og_url":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/","og_site_name":"ChinaSmartBuy","article_publisher":"http:\/\/facebook.com\/chinasmartbuy","article_published_time":"2026-10-21T21:36:00+00:00","article_modified_time":"2026-10-21T21:37:30+00:00","og_image":[{"width":1600,"height":890,"url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp","type":"image\/webp"}],"author":"Pierluigi Vitale","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Pierluigi Vitale","Tempo di lettura stimato":"2 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#article","isPartOf":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/"},"author":{"name":"Pierluigi Vitale","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/person\/d1b2f5d465e9c5f5a3e1316ad64b74c4"},"headline":"PHP2Shell: patch urgenti per due falle critiche, a rischio anche i siti WordPress","datePublished":"2026-10-21T21:36:00+00:00","dateModified":"2026-10-21T21:37:30+00:00","mainEntityOfPage":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/"},"wordCount":477,"commentCount":0,"publisher":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp","keywords":["PHP","sicurezza"],"articleSection":["News"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/","url":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/","name":"PHP2Shell: falle critiche in PHP, patch e rischi per WordPress","isPartOf":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#primaryimage"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp","datePublished":"2026-10-21T21:36:00+00:00","dateModified":"2026-10-21T21:37:30+00:00","description":"PHP2Shell colpisce il motore PHP: due falle critiche e quattro versioni corrette. Cosa devono verificare hosting e amministratori dei siti WordPress.","breadcrumb":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#primaryimage","url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp","contentUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/10\/csb-20261021-php-cover.webp","width":1600,"height":890,"caption":"Illustrazione ufficiale PHP2Shell pubblicata dai ricercatori Wiz"},{"@type":"BreadcrumbList","@id":"https:\/\/www.chinasmartbuy.com\/blog\/php2shell-patch-urgenti-falle-php-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.chinasmartbuy.com\/blog\/"},{"@type":"ListItem","position":2,"name":"PHP2Shell: patch urgenti per due falle critiche, a rischio anche i siti WordPress"}]},{"@type":"WebSite","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#website","url":"https:\/\/www.chinasmartbuy.com\/blog\/","name":"ChinaSmartBuy","description":"NEWS \u00b7 GUIDE \u00b7 OFFERTE","publisher":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.chinasmartbuy.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization","name":"ChinaSmartBuy","url":"https:\/\/www.chinasmartbuy.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2019\/06\/logo-chinasmartbuy-e1560864925407.png","contentUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2019\/06\/logo-chinasmartbuy-e1560864925407.png","width":100,"height":100,"caption":"ChinaSmartBuy"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/facebook.com\/chinasmartbuy","https:\/\/t.me\/chinasmartbuy"]},{"@type":"Person","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/person\/d1b2f5d465e9c5f5a3e1316ad64b74c4","name":"Pierluigi Vitale","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","caption":"Pierluigi Vitale"},"url":"https:\/\/www.chinasmartbuy.com\/blog\/author\/pierluigivitale\/"}]}},"_links":{"self":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/54271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/comments?post=54271"}],"version-history":[{"count":3,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/54271\/revisions"}],"predecessor-version":[{"id":54281,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/54271\/revisions\/54281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/media\/54244"}],"wp:attachment":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/media?parent=54271"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/categories?post=54271"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/tags?post=54271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}