📢 Important Security Update: Preemptive Monitoring and System Status

Update timeline

1. investigating Oct 21, 2026, 01:43 PM UTC

   We want to share an important update regarding a newly discovered global vulnerability in PHP, a core programming language used by millions of websites and platforms across the internet. First and foremost: There has been no data breach at RSVPify, and your data remains completely safe. Our security team is actively monitoring the situation in real time, and we have already deployed extra protective filters at our network layer. Because official patches from the PHP Foundation are still being finalized today, cyber security authorities worldwide have advised platforms to closely monitor traffic or temporarily isolate systems. Out of an abundance of caution and to ensure the total security of your event data, RSVPify may experience brief, temporary periods of planned downtime today if our monitoring teams determine a proactive shutdown is necessary. • **Is my event or guest data safe?** Yes. We have seen zero unauthorized access. This is a preemptive defense strategy, not a reaction to an incident. • **What should I expect?** If we take systems offline as a precaution, hosts will temporarily be unable to access their dashboards, and guests will be unable to access your event pages and registration forms. • **When will this be resolved?** We are prepared to deploy the official permanent security patch the exact moment it is released by the core developers later today, minimizing any disruption to your events. We deeply appreciate your patience and understanding as we take these aggressive, proactive steps to keep your event data entirely secure. We will keep this page updated with further developments.

2. investigating Oct 21, 2026, 02:42 PM UTC

   Following our earlier update, RSVPify has made the decision to take all systems offline as a precaution while the global PHP vulnerability remains unpatched. To be clear, this is a preemptive step, not a response to an incident. We have found no evidence of any unauthorized access to RSVPify’s systems, and your event and guest data remain secure. With official patches from the PHP project still pending, and the vulnerability now public, we determined that isolating our systems entirely was the responsible course of action for a platform hosting events worldwide. **What this means right now** Event pages, registration forms and ticketing are unavailable to guests. Hosts are unable to access their dashboards. Scheduled emails and reminders are paused and will resume once service is restored. **What happens next** We are awaiting the official patch from the PHP project, alongside millions of other applications and systems worldwide. Once it is released, our security team will apply it and complete a full security review before restoring service. We will not bring systems back online until we have confidence in the integrity of the fix. We know many of you have events underway or imminent, and we recognize the disruption this causes. We appreciate your patience and understanding as we work through what is a massive cybersecurity event on a global scale. We will post updates here as the situation develops. For more on the vulnerability itself, The Wall Street Journal has coverage here: https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websites-at-risk-fd0902ea

3. investigating Oct 21, 2026, 03:08 PM UTC

   The global PHP project has begun rolling out the official security patches for this vulnerability. Our security team is standing by and will deploy them to our systems the moment they are available to us. Once the patches are applied, we will complete our security review and restore service. **At this time, we anticipate restoring services within the next 1 to 2 hours once the patch is available.** We will post here the moment systems are back online. Thank you for your continued patience.

4. investigating Oct 21, 2026, 05:16 PM UTC

   The specific vulnerability patches required by RSVPify's systems are not yet available. Global teams on the PHP project are working diligently to produce patches across all PHP versions and configurations, and RSVPify is continuing to closely monitor for their availability. Ensuring the continued safety and security of your data is our top priority, and we will complete our security updates the moment these patches are made available.

5. resolved Oct 21, 2026, 06:33 PM UTC

   All RSVPify services have been restored and are operating normally. Our security team has applied the official PHP security patches across all systems and completed a full security review Event pages, registration forms, ticketing, dashboards and email delivery are fully available. Scheduled emails, reminders and automations were not affected by the pause and continued to send as planned. Please note that email open and click tracking recorded during the outage window may be temporarily inaccurate or unavailable. We recognize the disruption this caused, particularly for those with events underway today, and we are grateful for your patience and understanding. This was a global security event affecting a substantial share of the internet. You trust RSVPify with your events and your guests’ data. Protecting that trust always comes first, and we would make the same decision again.