Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.