There’s absolutely shit tons of exploits for PHP2Shell on GitHub and basically none of them actually work to RCE as nobody can figure out ASLR properly.

Which is good, because patching is going to take a long time.
https://php2shell.censys.com/