All Systems Operational

Uptime over the past 90 days. View historical uptime.
API Operational
Authentication Operational
Single Sign-On Operational
Multi-Factor Authentication Operational
Customer Support Operational
Support Ticketing System Operational
Knowledge Base Operational
Payments Uploads and Processing Operational
SFTP Operational
Vendor Data Uploads and Processing Operational
Vendor Onboarding and Approvals Operational
Web App Operational
Homepage Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Oct 31, 2026

No incidents reported today.

Oct 30, 2026

No incidents reported.

Oct 29, 2026

No incidents reported.

Oct 28, 2026

No incidents reported.

Oct 27, 2026

No incidents reported.

Oct 26, 2026

No incidents reported.

Oct 25, 2026

No incidents reported.

Oct 24, 2026

No incidents reported.

Oct 23, 2026

No incidents reported.

Oct 22, 2026

No incidents reported.

Oct 21, 2026

PHP2shell Vulnerabilities Patched
Resolved - PaymentWorks statement on extent of PHP2shell Vulnerabilities:

On October 21, 2026, PaymentWorks became aware of two PHP vulnerabilities affecting public websites throughout the internet. Our internal security review confirmed that the PHP toolchain used by our public WordPress marketing website (www.paymentworks.com) was affected. These specific vulnerabilities:

1. CVE-2026-109618: Memory exhaustion can corrupt PHP's internal state and allow remote code execution (detail: https://github.com/php/php-src/security/advisories/GHSA-w8hw-w9fx-j79w)
2. CVE-2026-109619: Improper cleanup between PHP requests can allow remote code execution (https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp)

We immediately took steps to determine our exposure, implement a patch and verify all our Production WordPress servers that same day.

Our use of PHP is limited to our public marketing website, which contains no platform business logic. Our main customer workloads run in a separate PaymentWorks system that does not use PHP for any purpose.

A detailed review found no evidence of unauthorized access to, or exposure of, customer data or credentials related to these vulnerabilities.
Oct 21, 13:00 EDT

Oct 20, 2026

No incidents reported.

Oct 19, 2026

No incidents reported.

Oct 18, 2026

No incidents reported.

Oct 17, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage