It seems to me that this comment is just regarding an earlier vulnerability and doesn't comment on PHP2Shell?