They found the PHP vulnerability that has upended the world, or so it seems.