PHP Vulnerability Responses by Company

Hypehound Inc.

Global cloud / infrastructure
Aliases / services
Downpay / Hypehound Inc. / Downpay Shopify / getdownpay.com
Official website
https://getdownpay.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Downpay

Response status
No PHP; not affected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Shopify deposit and deferred payment app from Hypehound.

The official notice updated 23 October says its Ruby on Rails stack has no PHP in the app, admin, API or webhooks.

Scope: Covers Downpay's service; separately check independent connected PHP environments.

What users should do

No update or access-token rotation is required for this issue.

Official service URL

Source URLs

  1. PHP2Shell security updatehttps://getdownpay.com/security/php2shell-updateResponse evidence
  2. Legal information: Hypehoundhttps://getdownpay.com/legalService and operation documentation
  3. https://getdownpay.com/securityhttps://getdownpay.com/securityService and operation documentation
Related official sources
  1. PHP2Shell security updateOfficial notice
  2. Legal information: HypehoundOfficial information directory

Comments