PHP Vulnerability Responses by Company

Autopay S.A.

Global cloud / infrastructure
Aliases / services
Autopay / Autopay S.A. / Blue Media
Official website
https://autopay.pl/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Autopay payment gateway

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

The official bm-sdk documents PHP7.2+, Composer and ITN payment notifications, but explicitly states that Autopay no longer supports this software.

Scope: Verified material concerns customer-side PHP integration. Provider-platform PHP2Shell impact, non-impact and patch deployment remain unconfirmed. PHP compatibility requirements do not prove remediation.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Check the current official API and recommended integration before adopting the old SDK. Test existing payment and notification flows, and confirm PHP security updates with the runtime administrator.

Official service URL

Source URLs

  1. Official PHP integration and operation documentationhttps://github.com/bluepayment-plugin/bm-sdkService and operation documentation
  2. Official provider and operator informationhttps://autopay.pl/Service and operation documentation
Related official sources
  1. Official PHP integration and operation documentationOfficial information directory
  2. Official provider and operator informationOfficial information directory

Comments