PHP Vulnerability Responses by Company

SumUp

Global cloud / infrastructure
Aliases / services
SumUp / SumUp Payments Limited / SumUp Limited
Official website
https://www.sumup.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SumUp PHP API

Response status
Not listed
Response information checked
2026-10-27 Rechecked: 2026-10-27

Install sumup/sumup-php and set SUMUP_API_KEY. Create a CheckoutCreateRequest with the merchant code and call checkouts()->create.

Scope: Only customer-side PHP integration was verified. The provider platform’s PHP2Shell response, impact and remediation are unconfirmed.

What users should do

Check the PHP client and runtime, and test installation and authentication in a sandbox. Ask the runtime administrator about PHP updates.

Official service URL

Source URLs

  1. Official PHP integration and installation documentationhttps://github.com/sumup/sumup-phpService and operation documentation
  2. Official operating entity informationhttps://www.sumup.com/en-gb/personal/legal/?_sm_nck=1Service and operation documentation
Related official sources
  1. Official PHP integration and installation documentationOfficial information directory
  2. Official operating entity informationOfficial information directory

Comments