If your web host just warned you about PHP2Shell (CVE-2026-109618), do not panic.
You can close the vulnerability in 60 seconds with one config line without taking your site down:
session.upload_progress.enabled = Off
The #1 question we're hearing: "Will this break my WordPress media library or WooCommerce store?"
No.
