Organisations running PHP need to fix two security vulnerabilities, with AI dramatically changing what is exploitable.