PHP2Shell: Patch Immediately or Take Your Website Offline? The Security Dilemma Every PHP Developer Should Discuss
A critical PHP vulnerability has been disclosed. It could allow an unauthenticated attacker to execute code on your server. The vendor releases a security patch, but the patch is new, and you cannot know with absolute certainty whether it introduces other bugs.