Validating Weebly & PHP - CVE-2026-109619 & 18

spearce — Thu, 22 Oct 2026 19:26:44 GMT

I can’t find anything online or in our account regarding Weebly’s response to the above CVE Security issues. (Other than it’s likely Weebly has already closed any holes via patches)

Re: Validating Weebly & PHP - CVE-2026-109619 & 18

tranguyen — Tue, 27 Oct 2026 12:33:20 GMT

Hi @spearce, our team has recently published some resources — let me know if this is helpful!

To confirm, if your site is hosted by Square or Weebly — there is no required action. We’ve applied updates to the servers hosting your store to address both PHP vulnerabilities. We’ve handled those updates for you. Based on our assessment to date, we have not identified evidence of compromise of our systems in connection with these vulnerabilities.

thread Re: Validating Weebly & PHP - CVE-2026-109619 & 18 in Online Store

Validating Weebly & PHP - CVE-2026-109619 & 18

Re: Validating Weebly & PHP - CVE-2026-109619 & 18