PHP2Shell vulnerabilities allow unauthenticated remote code execution in PHP, prompting emergency patches, mass attacks and global website shutdowns.