PHP Vulnerability Responses by Company

Duda, Inc.

Global cloud / infrastructure
Aliases / services
Duda / Duda Inc. / Duda Website Builder / duda.co / Duda, Inc.
Official website
https://www.duda.co/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Duda website builder and hosting

Response status
Core platform does not use PHP
Response information checked
2026-10-24

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Website building and hosting platform for web agencies.

The support article says its core infrastructure serving customer websites does not use PHP and is not directly affected. Third-party dependency review continues.

Scope: Does not declare independently hosted PHP integrations unaffected.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

No manual Duda update is needed. Check externally hosted jobs, calendars, reviews and similar integrations with their providers.

Official service URL

Source URLs

  1. PHP2Shell security advisoryhttps://support.duda.co/hc/en-us/articles/44448794927127-PHP2Shell-Security-VulnerabilityResponse evidence
  2. https://www.duda.co/legal/termshttps://www.duda.co/legal/termsService and operation documentation
Related official sources
  1. PHP2Shell security advisoryOfficial notice

Comments