PHP Vulnerability Responses by Company

Commerce.com Pty. Ltd.

Global cloud / infrastructure
Aliases / services
BigCommerce / Commerce.com, Inc. / BigCommerce Holdings, Inc. / Commerce / Feedonomics / Makeswift / BigCommerce Pty. Ltd. / Commerce.com Inc. / BigCommerce Holdings Inc. / Commerce.com Pty. Ltd.
Official website
https://www.bigcommerce.com/
Sources identifying the operating company

The 1 June 2026 terms name Commerce.com US, Inc. in the US, Commerce Software UK Ltd. in the UK, Commerce Software Ireland Ltd. in the EU, and Commerce.com Pty. Ltd. in Australia/elsewhere. Existing agreements may retain their prior entity; Feedonomics and Makeswift are separate entities.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

BigCommerce PHP REST API client and custom PHP integrations

Response status
Customer PHP updates required
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The official notice asks customers running their own PHP applications to review custom solutions and third-party integrations and apply PHP patches.

Scope: The SDK requirement of PHP 8.1+ is not a patched-version requirement. This scope is separate from the hosted BigCommerce platform.

What users should do

Review the PHP runtime and third-party integrations, then apply and verify provider fixes.

Official service URL

Source URLs

  1. BigCommerce: official PHP integration documentationhttps://github.com/bigcommerce/bigcommerce-api-phpService and operation documentation
  2. BigCommerce: official operator and legal/company informationhttps://www.bigcommerce.com/company/Service and operation documentation
  3. BigCommerce: official SDK migration or supplementary documentationhttps://www.bigcommerce.com/blog/meet-commerce/Service and operation documentation
  4. https://security.bigcommerce.com/https://security.bigcommerce.com/Response evidence
  5. https://www.commerce.com/terms/https://www.commerce.com/terms/Service and operation documentation

Hosted BigCommerce platform

Response status
Protected by patches or mitigations
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Commerce states that affected services, including BigCommerce, are protected by PHP patches or mitigation measures, with no evidence of compromise found in its assessment.

Scope: This is not a claim that every environment received the same patch. Operators of other group products are not merged.

What users should do

No additional action is requested if you do not run custom PHP applications. Check custom PHP and integrations separately.

Source URLs

  1. https://security.bigcommerce.com/https://security.bigcommerce.com/Response evidence
  2. https://www.commerce.com/terms/https://www.commerce.com/terms/Service and operation documentation
Related official sources
  1. BigCommerce: official PHP integration documentationOfficial information directory
  2. BigCommerce: official operator and legal/company informationOfficial information directory
  3. BigCommerce: official SDK migration or supplementary documentationOfficial information directory

Comments