PHP Vulnerability Responses by Company

Oro

Global cloud / infrastructure
Aliases / services
Oro Inc. / OroCommerce / OroCRM / OroPlatform / オロコマース / Oro
Official website
https://oroinc.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

OroCommerce, OroCRM and OroPlatform (self-managed deployments)

Response status
Not listed
Response information checked
2026-10-27

Current re-audit: Official sources searched; no response found · Research date: 2026-10-27

Provides PHP platforms for B2B commerce and CRM.

Oro requires matching web and CLI PHP versions and provides oro:check-requirements for environment checks.

Scope: No notice for these two CVEs was found in the checked requirements, product updates or separate-domain PHP notice. Meeting requirements and the 2018 OroCloud upgrade do not establish remediation of this incident.

What users should do

Check the requirements for the installed Oro release, patch PHP, and align queue workers with the same runtime.

Official service URL

Source URLs

  1. Oro system requirementshttps://doc.oroinc.com/backend/setup/system-requirements/Service and operation documentation
  2. Oro environment checkshttps://doc.oroinc.com/backend/setup/dev-environment/Service and operation documentation
Related official sources
  1. Oro system requirementsOfficial information directory
  2. Oro environment checksOfficial information directory

Comments