"Obstacles to Weaponizing PHP2Shell Likely Constrain Immediate Widespread Exploitation":

https://www.crowdstrike.com/en-us/blog/obstacles-to-weaponizing-php2shell-likely-constrain-exploitation/