PHP Vulnerability Responses by Company

Jotform

Global cloud / infrastructure
Aliases / services
Jotform / Jotform Inc. / Jotform Enterprise / jotform.com
Official website
https://www.jotform.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Jotform forms and workflow platform

Response status
Official patches deployed
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Online forms and workflow service.

The official statement reports initial mitigations followed by validation and deployment of official PHP fixes, completing remediation of both CVEs. Monitoring continues.

Scope: Covers the Jotform-operated platform, not PHP operated by customers.

What users should do

Use the Help Center for specific questions; Enterprise customers can contact their account manager.

Official service URL

Source URLs

  1. Statement on PHP2Shellhttps://www.jotform.com/blog/jotform-statement-on-php2shell-vulnerability/Response evidence
  2. https://www.jotform.com/blog/latest-articles/https://www.jotform.com/blog/latest-articles/Service and operation documentation
  3. https://status.jotform.com/https://status.jotform.com/Service and operation documentation
Related official sources
  1. Statement on PHP2ShellOfficial notice

Comments