PHP Vulnerability Responses by Company

Zapier

Global cloud / infrastructure
Aliases / services
Zapier / Zapier Inc.
Official website
https://zapier.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
Investigation complete; no service impact
Response information checked
2026-10-27 Rechecked: 2026-10-27

Application integrations and workflow automation.

An October 22 follow-up closes the PHP assessment with no impact found on Zapier services or customer data. The WordPress integration plugin is not vulnerable.

What users should do

Update PHP in WordPress and other environments you operate yourself; these are separate from Zapier's assessment.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://status.zapier.com/incidents/01M5HYPNNVAQQPNWSF691PS7XKResponse evidence
  2. Operating entityhttps://zapier.com/legal/terms-of-serviceService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments