{"id":85107,"date":"2026-10-26T08:55:44","date_gmt":"2026-10-26T07:55:44","guid":{"rendered":"https:\/\/kinsta.com\/fr\/?p=85107&#038;preview=true&#038;preview_id=85107"},"modified":"2026-10-27T08:29:57","modified_gmt":"2026-10-27T07:29:57","slug":"kinsta-php2shell-wordpress","status":"publish","type":"post","link":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/","title":{"rendered":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress"},"content":{"rendered":"<p>Le 21 octobre 2026, deux vuln\u00e9rabilit\u00e9s critiques de PHP, connues sous le nom collectif de <a href=\"https:\/\/en.wikipedia.org\/wiki\/PHP2Shell\">\u00ab PHP2Shell \u00bb<\/a>, ont \u00e9t\u00e9 rendues publiques. Ces vuln\u00e9rabilit\u00e9s pourraient permettre \u00e0 des attaquants d\u2019ex\u00e9cuter du code malveillant sur les serveurs concern\u00e9s sans authentification. L\u2019\u00e9quipe de d\u00e9veloppement de PHP a <a href=\"https:\/\/www.php.net\/archive\/2026.php#2026-10-21-5\">publi\u00e9 le jour m\u00eame des mises \u00e0 jour de s\u00e9curit\u00e9 d\u2019urgence<\/a> pour y rem\u00e9dier.<\/p>\n<p><strong>Si votre site WordPress est h\u00e9berg\u00e9 chez Kinsta, il est prot\u00e9g\u00e9 contre PHP2Shell.<\/strong> Nos \u00e9quipes d\u2019ing\u00e9nierie et de s\u00e9curit\u00e9 ont d\u00e9ploy\u00e9 les mises \u00e0 jour de s\u00e9curit\u00e9 PHP n\u00e9cessaires sur l\u2019ensemble de notre plateforme d\u2019h\u00e9bergement, y compris les environnements de production et de <a href=\"https:\/\/kinsta.com\/fr\/docs\/hebergement-wordpress\/environnement-staging\/\">staging<\/a>. Nous n\u2019avons constat\u00e9 aucune trace d\u2019intrusion li\u00e9e \u00e0 ces vuln\u00e9rabilit\u00e9s.<\/p>\n<aside role=\"note\" class=\"wp-block-kinsta-notice is-style-info\">\n            <h3>Info<\/h3>\n        <p>Nous avons officiellement class\u00e9 l\u2019incident comme r\u00e9solu le 22 octobre 2026, et les clients n\u2019ont pas besoin d\u2019installer de correctifs ni d\u2019apporter de modifications \u00e0 leurs sites.<\/p>\n<\/aside>\n\n<p>Voici ce que vous devez savoir sur PHP2Shell, la mani\u00e8re dont nous avons g\u00e9r\u00e9 ces vuln\u00e9rabilit\u00e9s et comment v\u00e9rifier les r\u00e9glages PHP de votre site.<\/p>\n<div><\/div><kinsta-auto-toc heading=\"Table of Contents\" list-style=\"arrow\" selector=\"h2\" count-number=\"-1\"><\/kinsta-auto-toc>\n<h2>Qu\u2019est-ce que PHP2Shell ?<\/h2>\n<p>PHP2Shell d\u00e9signe deux vuln\u00e9rabilit\u00e9s PHP, identifi\u00e9es sous les r\u00e9f\u00e9rences <a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-109618\">CVE-2026-109618<\/a> et <a href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2026-109619\">CVE-2026-109619<\/a>. Toutes deux ont re\u00e7u une note de gravit\u00e9 critique de 9,2 selon le <a href=\"https:\/\/www.first.org\/cvss\/\">syst\u00e8me CVSS 4.0<\/a>.<\/p>\n<p>Ces vuln\u00e9rabilit\u00e9s affectent la mani\u00e8re dont PHP g\u00e8re la m\u00e9moire lors du traitement des requ\u00eates. Si elles \u00e9taient exploit\u00e9es, un pirate pourrait ex\u00e9cuter du code malveillant sur un serveur, compromettant potentiellement les sites web et les donn\u00e9es qui y sont h\u00e9berg\u00e9s.<\/p>\n<p>WordPress fonctionnant sous PHP, ces vuln\u00e9rabilit\u00e9s repr\u00e9sentaient \u00e9galement un risque pour les sites WordPress utilisant les versions de PHP concern\u00e9es.<\/p>\n<p>Contrairement aux vuln\u00e9rabilit\u00e9s d\u00e9tect\u00e9es dans une extension, un th\u00e8me ou le c\u0153ur de WordPress, PHP2Shell affecte le moteur d\u2019ex\u00e9cution PHP lui-m\u00eame. Cela signifie que la mise \u00e0 jour de WordPress ou de ses extensions ne permettrait pas de r\u00e9soudre le probl\u00e8me. Il fallait appliquer un correctif au logiciel PHP du serveur.<\/p>\n<p>L\u2019\u00e9quipe PHP a publi\u00e9 des correctifs pour les versions 8.2, 8.3, 8.4 et 8.5 de PHP le 21 octobre. Les versions plus anciennes de PHP ont b\u00e9n\u00e9fici\u00e9 de correctifs de s\u00e9curit\u00e9 fournis par des responsables de maintenance tiers.<\/p>\n<p>Pour les clients de Kinsta, nous avons g\u00e9r\u00e9 ces mises \u00e0 jour au niveau de l\u2019h\u00e9bergement plut\u00f4t que d\u2019exiger des modifications au niveau des installations WordPress individuelles.<\/p>\n<h2>Comment Kinsta a r\u00e9agi \u00e0 PHP2Shell<\/h2>\n<p>Nos \u00e9quipes d\u2019ing\u00e9nierie et de s\u00e9curit\u00e9 ont commenc\u00e9 \u00e0 se pr\u00e9parer \u00e0 PHP2Shell avant m\u00eame que les correctifs de s\u00e9curit\u00e9 officiels ne soient disponibles. Notre r\u00e9ponse a consist\u00e9 \u00e0 ajouter des protections pour r\u00e9duire le risque d\u2019exploitation, puis \u00e0 d\u00e9ployer les versions corrig\u00e9es de PHP d\u00e8s leur publication.<\/p>\n<h3>Blocage des tentatives d\u2019exploitation avec Cloudflare<\/h3>\n<p>L\u2019une de nos premi\u00e8res priorit\u00e9s \u00e9tait de prot\u00e9ger les sites web pendant que nous pr\u00e9parions les correctifs PHP. Kinsta utilise <a href=\"https:\/\/kinsta.com\/fr\/integration-cloudflare\/\">le pare-feu d\u2019applications web (WAF) de Cloudflare<\/a> pour aider \u00e0 identifier et \u00e0 bloquer les requ\u00eates malveillantes avant qu\u2019elles n\u2019atteignent les sites web h\u00e9berg\u00e9s sur notre plateforme.<\/p>\n<p>Avant la divulgation de PHP2Shell, <a href=\"https:\/\/blog.cloudflare.com\/php-vulnerabilities-waf-protection\/\">Cloudflare avait d\u00e9ploy\u00e9 de nouvelles protections de pare-feu<\/a> con\u00e7ues pour d\u00e9tecter les tentatives d\u2019exploitation de ces vuln\u00e9rabilit\u00e9s. Notre \u00e9quipe a activ\u00e9 les protections appropri\u00e9es sur l\u2019ensemble de notre infrastructure d\u2019h\u00e9bergement.<\/p>\n<p>De ce fait, nos pare-feu en p\u00e9riph\u00e9rie bloquaient d\u00e9j\u00e0 les tentatives d\u2019exploitation de PHP2Shell pendant que nous attendions les correctifs PHP et tout au long de leur d\u00e9ploiement.<\/p>\n<p>Nous avons \u00e9galement appliqu\u00e9 des modifications suppl\u00e9mentaires \u00e0 la configuration PHP sur l\u2019ensemble de nos environnements d\u2019h\u00e9bergement afin de r\u00e9duire l\u2019exposition potentielle. Tout au long de cet incident, nous sommes rest\u00e9s en contact \u00e9troit avec notre partenaire de <a href=\"https:\/\/kinsta.com\/fr\/docs\/hebergement-wordpress\/outils-mykinsta\/protection-vulnerabilites-wordpress\/\">protection contre les vuln\u00e9rabilit\u00e9s<\/a>, <a href=\"https:\/\/patchstack.com\/\">Patchstack<\/a>, en partageant des informations sur les menaces et les sch\u00e9mas d\u2019attaque que nous avons observ\u00e9s.<\/p>\n<p>Ces mesures ont permis de prot\u00e9ger les sites web pendant que nous pr\u00e9parions les mises \u00e0 jour, mais elles ne rempla\u00e7aient pas l\u2019application des correctifs \u00e0 PHP lui-m\u00eame.<\/p>\n<h3>Application des mises \u00e0 jour de s\u00e9curit\u00e9 PHP<\/h3>\n<p>D\u00e8s que l\u2019\u00e9quipe PHP a publi\u00e9 les correctifs, notre \u00e9quipe d\u2019ing\u00e9nieurs a commenc\u00e9 \u00e0 valider et \u00e0 d\u00e9ployer les paquets PHP corrig\u00e9s sur l\u2019ensemble de la plateforme.<\/p>\n<p>Nous avons d\u00e9ploy\u00e9 les mises \u00e0 jour de s\u00e9curit\u00e9 pour PHP 7.4 \u00e0 PHP 8.5, y compris les correctifs pour les versions plus anciennes fournis par Freexian, notre fournisseur de paquets PHP.<\/p>\n<p>Comme nous g\u00e9rons PHP au niveau de la plateforme, les clients n\u2019ont pas eu besoin d\u2019installer les correctifs ni de modifier manuellement leurs versions de PHP. Notre \u00e9quipe s\u2019est charg\u00e9e des mises \u00e0 jour sur l\u2019ensemble de l\u2019infrastructure d\u2019h\u00e9bergement tout en maintenant en place les protections suppl\u00e9mentaires de Cloudflare.<\/p>\n<p>Le 22 octobre 2026, \u00e0 08 h 26 UTC, nous avons indiqu\u00e9 que l\u2019incident \u00e9tait r\u00e9solu sur notre page publique de statut, confirmant que tous les sites \u00e9taient prot\u00e9g\u00e9s et que les mises \u00e0 jour de s\u00e9curit\u00e9 avaient \u00e9t\u00e9 d\u00e9ploy\u00e9es sur l\u2019ensemble de la plateforme.<\/p>\n<p>Tout au long de l\u2019incident, notre \u00e9quipe a surveill\u00e9 les activit\u00e9s suspectes, v\u00e9rifi\u00e9 manuellement les sites qui semblaient \u00eatre cibl\u00e9s et continu\u00e9 \u00e0 effectuer des contr\u00f4les ponctuels des environnements d\u2019h\u00e9bergement \u00e0 la recherche de signes de compromission. Nous n\u2019avons trouv\u00e9 aucune preuve de violations r\u00e9ussies li\u00e9es \u00e0 PHP2Shell.<\/p>\n<p>Vous pouvez consulter les mises \u00e0 jour publi\u00e9es tout au long de l\u2019intervention sur notre <a href=\"https:\/\/status.kinsta.com\/incidents\/c0c6xl1ghpb2\">page d\u2019\u00e9tat consacr\u00e9e \u00e0 l\u2019incident de s\u00e9curit\u00e9 PHP<\/a>.<\/p>\n<h2>Les clients de Kinsta doivent-ils prendre des mesures ?<\/h2>\n<p>Non. Si votre site WordPress est h\u00e9berg\u00e9 chez Kinsta, nous avons d\u00e9j\u00e0 appliqu\u00e9 les mises \u00e0 jour de s\u00e9curit\u00e9 n\u00e9cessaires.<\/p>\n<p>Vous n\u2019avez pas besoin de changer de version de PHP, d\u2019installer un correctif sp\u00e9cifique ni de mettre votre site hors ligne en raison de PHP2Shell. Les mesures de protection s\u2019appliquent \u00e9galement \u00e0 vos environnements de staging.<\/p>\n<p>Si vous avez suspendu certains environnements par mesure de pr\u00e9caution pendant que nous corrigions les vuln\u00e9rabilit\u00e9s, vous pouvez les r\u00e9activer d\u00e8s \u00e0 pr\u00e9sent. Notre \u00e9quipe a \u00e9galement effectu\u00e9 les mises \u00e0 jour de s\u00e9curit\u00e9 n\u00e9cessaires sur les environnements suspendus.<\/p>\n<p>Vous devez toutefois continuer \u00e0 mettre \u00e0 jour votre installation WordPress, vos extensions et vos th\u00e8mes dans le cadre de la maintenance habituelle de votre site web. Ces mises \u00e0 jour sont toutefois distinctes des correctifs PHP2Shell, que nous avons d\u00e9j\u00e0 appliqu\u00e9s au niveau de l\u2019h\u00e9bergement.<\/p>\n<aside role=\"note\" class=\"wp-block-kinsta-notice is-style-info\">\n            <h3>Info<\/h3>\n        <p><strong>Vous souhaitez v\u00e9rifier votre version de PHP ?<\/strong> Dans <a href=\"https:\/\/my.kinsta.com\/?lang=fr\">MyKinsta<\/a>, rendez-vous dans <strong>Sites<\/strong>, s\u00e9lectionnez votre site web, puis ouvrez <strong>Outils<\/strong> &gt; <strong>R\u00e9glages PHP<\/strong>.<\/p>\n<p>Gardez \u00e0 l\u2019esprit que la version de PHP affich\u00e9e n\u2019indique pas n\u00e9cessairement si un correctif de s\u00e9curit\u00e9 a \u00e9t\u00e9 appliqu\u00e9. Certaines versions de PHP int\u00e8grent des correctifs de s\u00e9curit\u00e9 r\u00e9troport\u00e9s sans pour autant passer au dernier num\u00e9ro de version officiel.<\/p>\n<p>Nous avons d\u00e9j\u00e0 appliqu\u00e9 les mises \u00e0 jour de s\u00e9curit\u00e9 PHP2Shell sur l\u2019ensemble de notre plateforme. Si vous avez des questions concernant l\u2019\u00e9tat d\u2019application d\u2019un correctif sur un environnement particulier, <a href=\"https:\/\/kinsta.com\/fr\/docs\/support\/contacter-support\/\">veuillez contacter notre \u00e9quipe de support<\/a> via MyKinsta.<\/p>\n<\/aside>\n\n<h2>O\u00f9 trouver les mises \u00e0 jour et obtenir de l\u2019aide<\/h2>\n<p>Si vous g\u00e9rez des sites WordPress pour des clients, vous pouvez leur transmettre notre <a href=\"https:\/\/status.kinsta.com\/incidents\/c0c6xl1ghpb2\">rapport officiel sur l\u2019incident de s\u00e9curit\u00e9 PHP<\/a>. Ce document pr\u00e9sente les mises \u00e0 jour que nous avons effectu\u00e9es \u00e0 mesure que les versions corrig\u00e9es de PHP devenaient disponibles et confirme la r\u00e9solution de l\u2019incident.<\/p>\n<p>Si vous avez des questions concernant un site web en particulier ou si vous souhaitez v\u00e9rifier son \u00e9tat de s\u00e9curit\u00e9, vous pouvez contacter directement <a href=\"https:\/\/kinsta.com\/fr\/support-kinsta\/\">notre \u00e9quipe de support<\/a> via MyKinsta. Notre \u00e9quipe est \u00e0 votre disposition 24\/7 pour vous aider.<\/p>\n<p>Pour plus d&rsquo;informations, consultez notre <a href=\"https:\/\/kinsta.com\/fr\/docs\/support\/contacter-support\/\">guide sur la mani\u00e8re de contacter le support Kinsta<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Le 21 octobre 2026, deux vuln\u00e9rabilit\u00e9s critiques de PHP, connues sous le nom collectif de \u00ab PHP2Shell \u00bb, ont \u00e9t\u00e9 rendues publiques. Ces vuln\u00e9rabilit\u00e9s pourraient permettre &#8230;<\/p>\n","protected":false},"author":287,"featured_media":85108,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kinsta_gated_content":false,"_kinsta_gated_content_redirect":"","footnotes":""},"tags":[],"topic":[1000,1036],"class_list":["post-85107","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-mises-a-jour-php","topic-securite-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.6 (Yoast SEO v24.6) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress<\/title>\n<meta name=\"description\" content=\"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress\" \/>\n<meta property=\"og:description\" content=\"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\" \/>\n<meta property=\"og:site_name\" content=\"Kinsta\u00ae\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/kinstafrance\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-26T07:55:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-27T07:29:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1470\" \/>\n\t<meta property=\"og:image:height\" content=\"735\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Joel Olawanle\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:description\" content=\"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\" \/>\n<meta name=\"twitter:creator\" content=\"@olawanle_joel\" \/>\n<meta name=\"twitter:site\" content=\"@kinsta_fr\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"Joel Olawanle\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\"},\"author\":{\"name\":\"Joel Olawanle\",\"@id\":\"https:\/\/kinsta.com\/fr\/#\/schema\/person\/efa7de30245ca15be5ce1dcacff89c07\"},\"headline\":\"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress\",\"datePublished\":\"2026-10-26T07:55:44+00:00\",\"dateModified\":\"2026-10-27T07:29:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\"},\"wordCount\":1432,\"publisher\":{\"@id\":\"https:\/\/kinsta.com\/fr\/#organization\"},\"image\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\",\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\",\"url\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\",\"name\":\"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress\",\"isPartOf\":{\"@id\":\"https:\/\/kinsta.com\/fr\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\",\"datePublished\":\"2026-10-26T07:55:44+00:00\",\"dateModified\":\"2026-10-27T07:29:57+00:00\",\"description\":\"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.\",\"breadcrumb\":{\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage\",\"url\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\",\"contentUrl\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png\",\"width\":1470,\"height\":735},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/kinsta.com\/fr\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"S\u00e9curit\u00e9 WordPress\",\"item\":\"https:\/\/kinsta.com\/fr\/sujets\/securite-wordpress\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/kinsta.com\/fr\/#website\",\"url\":\"https:\/\/kinsta.com\/fr\/\",\"name\":\"Kinsta\u00ae\",\"description\":\"Solutions d&#039;h\u00e9bergement premium, rapides et s\u00e9curis\u00e9es\",\"publisher\":{\"@id\":\"https:\/\/kinsta.com\/fr\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/kinsta.com\/fr\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/kinsta.com\/fr\/#organization\",\"name\":\"Kinsta\",\"url\":\"https:\/\/kinsta.com\/fr\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/kinsta.com\/fr\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2023\/12\/kinsta-logo.jpeg\",\"contentUrl\":\"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2023\/12\/kinsta-logo.jpeg\",\"width\":500,\"height\":500,\"caption\":\"Kinsta\"},\"image\":{\"@id\":\"https:\/\/kinsta.com\/fr\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/kinstafrance\/\",\"https:\/\/x.com\/kinsta_fr\",\"https:\/\/www.instagram.com\/kinstahosting\/\",\"https:\/\/www.linkedin.com\/company\/kinsta\/\",\"https:\/\/www.pinterest.com\/kinstahosting\/\",\"https:\/\/www.youtube.com\/c\/Kinsta\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/kinsta.com\/fr\/#\/schema\/person\/efa7de30245ca15be5ce1dcacff89c07\",\"name\":\"Joel Olawanle\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/kinsta.com\/fr\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/051bf577ce2c837846a1db9eef184758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/051bf577ce2c837846a1db9eef184758?s=96&d=mm&r=g\",\"caption\":\"Joel Olawanle\"},\"description\":\"Joel is a Frontend developer working at Kinsta as a Technical Editor. He is a passionate teacher with love for open source and has written over 300 technical articles majorly around JavaScript and it's frameworks.\",\"sameAs\":[\"https:\/\/joelolawanle.com\/\",\"https:\/\/www.linkedin.com\/in\/olawanlejoel\/\",\"https:\/\/x.com\/olawanle_joel\",\"https:\/\/www.youtube.com\/@joelolawanle\"],\"gender\":\"male\",\"knowsAbout\":[\"JavaScript\",\"React\",\"Next.js\"],\"knowsLanguage\":[\"English\"],\"jobTitle\":\"Technical Editor\",\"worksFor\":\"Kinsta\",\"url\":\"https:\/\/kinsta.com\/fr\/blog\/author\/joelolawanle\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress","description":"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/","og_locale":"fr_FR","og_type":"article","og_title":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress","og_description":"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.","og_url":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/","og_site_name":"Kinsta\u00ae","article_publisher":"https:\/\/www.facebook.com\/kinstafrance\/","article_published_time":"2026-10-26T07:55:44+00:00","article_modified_time":"2026-10-27T07:29:57+00:00","og_image":[{"width":1470,"height":735,"url":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","type":"image\/png"}],"author":"Joel Olawanle","twitter_card":"summary_large_image","twitter_description":"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.","twitter_image":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","twitter_creator":"@olawanle_joel","twitter_site":"@kinsta_fr","twitter_misc":{"\u00c9crit par":"Joel Olawanle","Dur\u00e9e de lecture estim\u00e9e":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#article","isPartOf":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/"},"author":{"name":"Joel Olawanle","@id":"https:\/\/kinsta.com\/fr\/#\/schema\/person\/efa7de30245ca15be5ce1dcacff89c07"},"headline":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress","datePublished":"2026-10-26T07:55:44+00:00","dateModified":"2026-10-27T07:29:57+00:00","mainEntityOfPage":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/"},"wordCount":1432,"publisher":{"@id":"https:\/\/kinsta.com\/fr\/#organization"},"image":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/","url":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/","name":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress","isPartOf":{"@id":"https:\/\/kinsta.com\/fr\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage"},"image":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage"},"thumbnailUrl":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","datePublished":"2026-10-26T07:55:44+00:00","dateModified":"2026-10-27T07:29:57+00:00","description":"Comment Kinsta a r\u00e9agi aux vuln\u00e9rabilit\u00e9s critiques \u00ab PHP2Shell \u00bb, les protections que nous avons mises en place et ce que les clients doivent savoir.","breadcrumb":{"@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#primaryimage","url":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","contentUrl":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2026\/10\/how-kinsta-protected-wordpress-sites-from-php2shell-and-what-customers-need-to-know.png","width":1470,"height":735},{"@type":"BreadcrumbList","@id":"https:\/\/kinsta.com\/fr\/blog\/kinsta-php2shell-wordpress\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kinsta.com\/fr\/"},{"@type":"ListItem","position":2,"name":"S\u00e9curit\u00e9 WordPress","item":"https:\/\/kinsta.com\/fr\/sujets\/securite-wordpress\/"},{"@type":"ListItem","position":3,"name":"PHP2Shell : comment Kinsta a prot\u00e9g\u00e9 les sites WordPress"}]},{"@type":"WebSite","@id":"https:\/\/kinsta.com\/fr\/#website","url":"https:\/\/kinsta.com\/fr\/","name":"Kinsta\u00ae","description":"Solutions d&#039;h\u00e9bergement premium, rapides et s\u00e9curis\u00e9es","publisher":{"@id":"https:\/\/kinsta.com\/fr\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kinsta.com\/fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/kinsta.com\/fr\/#organization","name":"Kinsta","url":"https:\/\/kinsta.com\/fr\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/kinsta.com\/fr\/#\/schema\/logo\/image\/","url":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2023\/12\/kinsta-logo.jpeg","contentUrl":"https:\/\/kinsta.com\/fr\/wp-content\/uploads\/sites\/4\/2023\/12\/kinsta-logo.jpeg","width":500,"height":500,"caption":"Kinsta"},"image":{"@id":"https:\/\/kinsta.com\/fr\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/kinstafrance\/","https:\/\/x.com\/kinsta_fr","https:\/\/www.instagram.com\/kinstahosting\/","https:\/\/www.linkedin.com\/company\/kinsta\/","https:\/\/www.pinterest.com\/kinstahosting\/","https:\/\/www.youtube.com\/c\/Kinsta"]},{"@type":"Person","@id":"https:\/\/kinsta.com\/fr\/#\/schema\/person\/efa7de30245ca15be5ce1dcacff89c07","name":"Joel Olawanle","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/kinsta.com\/fr\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/051bf577ce2c837846a1db9eef184758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/051bf577ce2c837846a1db9eef184758?s=96&d=mm&r=g","caption":"Joel Olawanle"},"description":"Joel is a Frontend developer working at Kinsta as a Technical Editor. He is a passionate teacher with love for open source and has written over 300 technical articles majorly around JavaScript and it's frameworks.","sameAs":["https:\/\/joelolawanle.com\/","https:\/\/www.linkedin.com\/in\/olawanlejoel\/","https:\/\/x.com\/olawanle_joel","https:\/\/www.youtube.com\/@joelolawanle"],"gender":"male","knowsAbout":["JavaScript","React","Next.js"],"knowsLanguage":["English"],"jobTitle":"Technical Editor","worksFor":"Kinsta","url":"https:\/\/kinsta.com\/fr\/blog\/author\/joelolawanle\/"}]}},"acf":[],"_links":{"self":[{"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/posts\/85107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/users\/287"}],"replies":[{"embeddable":true,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/comments?post=85107"}],"version-history":[{"count":5,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/posts\/85107\/revisions"}],"predecessor-version":[{"id":85122,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/posts\/85107\/revisions\/85122"}],"alternate":[{"embeddable":true,"hreflang":"en","title":"English","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/en"},{"embeddable":true,"hreflang":"ja","title":"Japanese","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/jp"},{"embeddable":true,"hreflang":"it","title":"Italian","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/it"},{"embeddable":true,"hreflang":"pt","title":"Portuguese","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/pt"},{"embeddable":true,"hreflang":"fr","title":"French","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/fr"},{"embeddable":true,"hreflang":"nl","title":"Dutch","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/nl"},{"embeddable":true,"hreflang":"es","title":"Spanish","href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/translations\/es"},{"href":"https:\/\/kinsta.com\/fr\/wp-json\/kinsta\/v1\/posts\/85107\/tree"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/media\/85108"}],"wp:attachment":[{"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/media?parent=85107"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/tags?post=85107"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/kinsta.com\/fr\/wp-json\/wp\/v2\/topic?post=85107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}