PHP Vulnerability Responses by Company

Công ty Cổ phần ZION

海外決済・API
Aliases / services
ZaloPay / Zion Joint Stock Company / Công ty Cổ phần Zion / Zalopay / Công ty Cổ phần ZION
Official website
https://zalopay.vn/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Zalopay WordPress/WooCommerce PHP plugin

Response status
Not listed
Response information checked
2026-10-28

Current re-audit: Official sources searched; no response found · Research date: 2026-10-28

The official PHP WordPress-plugin guide specifies AppId, Mac key, callback key and sandbox settings for registered payment methods.

Scope: Official merchant-side PHP integration was reviewed. Cloud-side PHP use and fixes for PHP2Shell or either CVE remain unconfirmed.

What users should do

Install/activate the official plugin and test each registered method with sandbox credentials; disable sandbox only after obtaining approved production details.

Official service URL

Source URLs

  1. WordPress plugin integrationhttps://docs.zalopay.vn/docs/guides/extension-products/wordpress/intro/Service and operation documentation
  2. Integration downloadshttps://developers.zalopay.vn/v2/downloads/Service and operation documentation
Related official sources
  1. WordPress plugin integrationOfficial information directory
  2. Integration downloadsOfficial information directory
  3. Service agreementOfficial information directory
  4. Zalopay official websiteOfficial information directory

Comments