I'm going to assume some #Hosting providers are going to get owned. Lots of them use a billing and/or customer panel that is PHP underneath (e.g., WHMCS). Lots of things (rented servers) that are not themselves directly vulnerable will be adjacent to the threat.