Are Plato Apps vulnerable to PHP2Shell or similar exploits?
Plato has been receiving urgent variations on this query after AI penetration testing found vulnerabilities in multiple PHP Versions.
This is always a risk as AI capabilities increase and solutions that used to be considered secure, turn out to have vulnerabilities.
This is one of the reasons why Plato applications are compiled Windows binaries with no external dependencies- apart from Microsoft's signed VC++ runtimes in the app launch folder. PHP is not used.
For those who do use PHP, the PHP Foundation team has responded quickly to this exploit, already releasing patches for currently supported PHP Versions that are also available in latest packages for Ubuntu and similar.