PHP Vulnerability Responses by Company

Plaid

Global cloud / infrastructure
Aliases / services
Plaid / Plaid Inc. / Plaid API / plaid.com
Official website
https://plaid.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Plaid production services and commercial products

Response status
Production excluded in prior notice
Response information checked
2026-10-27

Current re-audit: Source inaccessible; on hold · Research date: 2026-10-28

Financial account connectivity and financial data APIs.

The previously recorded 21 October notice says Plaid production services and commercial products do not use PHP.

Scope: The notice body could not be reverified in the current public Trust Center; the prior verification date is retained.

Some official sources could not be retrieved. Reverification remains on hold and the previous verification date is retained.

What users should do

Refer to the prior no-action guidance for Plaid; assess your own PHP environment separately.

Official service URL

Source URLs

  1. Plaid response to PHP2Shellhttps://security.plaid.com/Response evidence
Related official sources
  1. Plaid response to PHP2ShellOfficial notice

Comments