A quick POC for CVE-2018-9208. For testing purpose (will create an Apache/PHP docker container with vuln versions of the plugin): ./docker/install.sh You can examine the docker container with: docker run -it vuln bash