Wufoo experienced a critical incident on October 21, 2026, lasting 4h 40m. The incident has been resolved; the full update timeline is below.
Update timeline
- investigating Oct 21, 2026, 06:38 PM UTC
We have temporarily taken our Wufoo service offline to perform urgent preventive security maintenance in response to a newly reported critical PHP vulnerability affecting systems worldwide. Please note that there is no evidence of a security breach or compromise to our systems. We are proactively taking these measures as a preemptive measure to ensure full protection of our infrastructure and customer data. Our engineering and security teams are actively applying the necessary updates and testing the service. We expect to bring Wufoo back online as soon as maintenance is complete. Thank you for your patience and understanding.
- monitoring Oct 21, 2026, 10:43 PM UTC
Wufoo is back online. We finished the preventive security maintenance and have the needed protections in place. We see no evidence of a security breach or any compromise of customer data. We're monitoring closely. In the short term, file uploads may not work as expected, and some upload limits may apply. Our teams are working to bring uploads fully back to normal.
- resolved Oct 21, 2026, 11:18 PM UTC
Incident is Resolved. Wufoo is back online. We finished the preventive security maintenance and have the needed protections in place. We see no evidence of a security breach or any compromise of customer data.