PHP Vulnerability Responses by Company

Omise

海外決済・API
Aliases / services
Opn / Opn Payments / SYNQA / Omise Co Ltd / Omise Payment SG Pte Ltd / Omise Japan / Omise
Official website
https://www.omise.co/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Omise PHP library and self-hosted ecommerce plugins

Response status
Update self-hosted PHP
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

The advisory names both CVEs and requires PHP updates for self-hosted stores/library users. Hosted flows without self-run PHP and Shopify require no action.

Scope: Omise supports PHP 8.2–8.4, not yet 8.5. Plugin updates alone do not fix this. Customer-server patch completion is unverified.

What users should do

Use supported PHP 8.2.35, 8.3.36 or 8.4.27 or later, restart PHP-FPM/server, verify web runtime and test checkout, order status and refunds. Migrate PHP 8.1 or earlier.

Official service URL

Source URLs

  1. PHP Security Update (October 2026)https://docs.omise.co/php-sec-update-oct-2026/singaporeResponse evidence
Related official sources
  1. PHP Security Update (October 2026)Official notice
  2. Omise Privacy PolicyOfficial information directory
  3. Omise Payment SG, operating as OpnOfficial information directory

Comments