PHP Vulnerability Responses by Company

NomuPay（Cardinity）

Global cloud / infrastructure
Aliases / services
Cardinity / UAB Nomu Pay Europe / NomuPay / NomuPay Europe, UAB / Nomu Pay Limited / Click2Sell / Total Processing / KlickEx / NomuPay（Cardinity）
Official website
https://nomupay.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Cardinity API

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The official Cardinity PHP client installs with Composer and documents receiving 3-D Secure authentication information and finalising a payment.

Scope: Verified material concerns customer-side PHP integration and operation. Provider-platform PHP2Shell impact, non-impact and patch deployment remain unconfirmed. Listed PHP minimums are compatibility requirements, not evidence of an incident fix.

What users should do

Confirm the Cardinity/NomuPay contracting entity and test payment finalisation after 3-D Secure. Ask the runtime administrator to confirm PHP security updates.

Official service URL

Source URLs

  1. Official PHP integration and operation documentationhttps://github.com/cardinity/cardinity-sdk-phpService and operation documentation
  2. Official provider and operator informationhttps://nomupay.com/blog/cardinity-joins-forces-with-nomupay/Service and operation documentation
  3. Current API or migration informationhttps://nomupay.com/licences/Service and operation documentation
Related official sources
  1. Official PHP integration and operation documentationOfficial information directory
  2. Official provider and operator informationOfficial information directory
  3. Current API or migration informationOfficial information directory

Comments