PHP2Shell: Patching My Plesk Server on the Day It Dropped
A critical, unauthenticated PHP remote code execution flaw dropped on 21 October 2026. Here’s how I patched my Plesk server within the hour, what tripped me up, and why the real danger turned out to be the old PHP versions I’d forgotten about.