Security Advisory: PHP 5 Vulnerability

Update timeline

1. monitoring Oct 22, 2026, 03:15 AM UTC

   Status: Monitoring – No impact to MyVenue hosted services or websites. Reviewing Tapin2 hosted services Details: • mvManager (including the Suites Portal, database and surrounding infrastructure) are not impacted and do not use PHP. No patches are required. • A review of MyVenue code repositories found no direct or indirect use of PHP in our platform or back-office systems. • Websites (myvenue.com and tapin2.com) are protected by Cloudflare, which deployed protections against this vulnerability. Our understanding is that this occurred before the PHP vulnerability was made public. • A review of Tapin2 hosted database environments is ongoing Action required: None. If you have any questions, please contact support at [email protected]

2. resolved Oct 22, 2026, 06:41 AM UTC

   No impact to MyVenue or Tapin2 hosted services or websites. Details: • MyVenue & Tapin2 websites are protected by Cloudflare, which deployed protections against this vulnerability. Our understanding is that this occurred before the PHP vulnerability was made public. • All other MyVenue & Tapin2 hosted services do not use PHP. This includes the Suites Portals, databases and surrounding infrastructure. • A wider review of MyVenue & Tapin2 repositories found no direct or indirect use of PHP in the platform or back-office systems. Action required: None.