PHP has released emergency security updates to address two critical vulnerabilities that can allow attackers to execute code remotely without authentication. Known as PHP2Shell, the flaws require action from hosting providers and server administrators, including those responsible for WordPress websites.