PHP Vulnerability Responses by Company

HiPay SAS

Global cloud / infrastructure
Aliases / services
HiPay / HiPay Enterprise / HiPay SAS
Official website
https://hipay.com/
Sources identifying the operating company

Website operator in the cited developer-site terms, SIREN390334225; check individual API contracts for the contracting entity.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

HiPay Enterprise API

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

The official PHP SDK specifies PHP7.2+, Composer installation, sandbox/production configuration and a notification-signature verification method.

Scope: Verified material concerns customer-side PHP integration and operation. Provider-platform PHP2Shell impact, non-impact and patch deployment remain unconfirmed. Listed PHP minimums are compatibility requirements, not evidence of an incident fix.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Match API credentials to the environment and verify notifications using the configured passphrase and hash algorithm. Ask the runtime administrator to confirm PHP security updates.

Official service URL

Source URLs

  1. Official PHP integration and operation documentationhttps://developer.hipay.com/online-payments/sdk-reference/sdk-phpService and operation documentation
  2. Official provider and operator informationhttps://developer.hipay.com/Service and operation documentation
Related official sources
  1. Official PHP integration and operation documentationOfficial information directory
  2. Official provider and operator informationOfficial information directory

Comments