PHP2Shell hit PHP itself this week. Every Anchor Hosting site sat behind Cloudflare's WAF rules before the bugs went public, and every site is…