PHP Vulnerability Responses by Company

Paddle.com Market Limited

Global cloud / infrastructure
Aliases / services
Paddle / Paddle.com Market Ltd. / Paddle Billing / Paddle.com Market Limited
Official website
https://www.paddle.com/
Sources identifying the operating company

Terms assign US buyer transactions to Paddle.com Inc., non-US buyer transactions for UK/Isle of Man suppliers to Paddle Payments Limited, and other transactions to Paddle.com Market Limited.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Paddle Billing API

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The official PHP8.1+ SDK supports Paddle Billing, not Classic. Sandbox and live keys are separate, and the SDK supplies a webhook-signature verifier.

Scope: Verified material concerns customer-side PHP integration and operation. Provider-platform PHP2Shell impact, non-impact and patch deployment remain unconfirmed. Listed PHP minimums are compatibility requirements, not evidence of an incident fix.

What users should do

Distinguish Billing from Classic and test billing with environment-specific keys and verified webhooks. Ask the runtime administrator to confirm PHP security updates.

Official service URL

Source URLs

  1. Official PHP integration and operation documentationhttps://github.com/PaddleHQ/paddle-php-sdkService and operation documentation
  2. Official provider and operator informationhttps://www.paddle.com/legal/termsService and operation documentation
Related official sources
  1. Official PHP integration and operation documentationOfficial information directory
  2. Official provider and operator informationOfficial information directory

Comments