Primer incident
This week’s security disclosures: what they mean for Primer merchants
Ongoing since 09:58 AM UTC.
Several security issues were disclosed this week. Here is where Primer stands on the two we’ve been asked about most. PHP vulnerabilities: Primer does not use PHP, so our platform and integrations are not affected. If your own site or tools run on PHP (for example WooCommerce), check with your developers or hosting provider and apply the patches. eMudhra certificate compromise: On 19 October, private keys for several eMudhra intermediate certificates were reported as compromised. As a precaution, we have updated the certificate trust stores across our services. No action is needed on your Primer integration. Your own website, hosting or CDN providers may be affected separately, so check with them.
Update timeline
- monitoring Oct 23, 2026, 09:58 AM UTC
Several security issues were disclosed this week. Here is where Primer stands on the two we’ve been asked about most. PHP vulnerabilities: Primer does not use PHP, so our platform and integrations are not affected. If your own site or tools run on PHP (for example WooCommerce), check with your developers or hosting provider and apply the patches. eMudhra certificate compromise: On 19 October, private keys for several eMudhra intermediate certificates were reported as compromised. As a precaution, we have updated the certificate trust stores across our services. No action is needed on your Primer integration. Your own website, hosting or CDN providers may be affected separately, so check with them.
Your product runs on more than Primer
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services