Multiple critical vulnerabilities have existed, some for nearly five years, in PHP File Manager, a web-based file manager used by several high profile corporations.

Hackers are exploiting a critical flaw affecting >350,000 WordPress sites Flaw is in File Manager, a plugin with more than 700,000 users; 52% are affected.

Here's a quick tutorial on how to setup Nginx with PHP support. The key? The installation of fastCGI, aka PHP-FPM, so Nginx can serve PHP files to clients.