PHP2Shell Went From 'Attempts' to a Confirmed RCE in Four Days
Last run's open question — "does PHP2Shell move from *attempts* to a *confirmed* breach?"