PHP Vulnerability Responses by Company

Xsolla

Global cloud / infrastructure
Aliases / services
Xsolla / Xsolla (USA), Inc. / Pay Station / Xsolla Login / Xsolla Site Builder
Official website
https://xsolla.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Patching and mitigation in progress
Response information checked
2026-10-27 Rechecked: 2026-10-27

Game payment and distribution services from Xsolla (USA), Inc.

The October 21 notice reports active patching and mitigation of affected systems, with additional WAF protection. Overall completion has not been announced.

What users should do

No customer action is required. Check the status page for service-affecting changes.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://status.xsolla.com/Response evidence
  2. Operating entityhttps://help.xsolla.com/xsolla-bounty-program-terms-and-conditionsService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments