Security update: no action needed
Published October 23, 2026
On October 21 there were a number of vulnerabilities announced by some of the most used technologies in the world, including PHP. We have completed the necessary security updates for Order Editing.app & Upsell and RF: Barcode Labels Generator in response to the recently disclosed PHP security vulnerabilities. You can read the official PHP announcement here.
We began taking precautionary measures on October 21, shortly after the vulnerabilities were disclosed. As of October 23, 2026, at 8:00 AM Eastern Time, the relevant components have been upgraded to secure versions.
We have also enabled firewall rules to block known attack patterns, patched the PHP vulnerabilities identified, and applied additional security hardening measures to help protect your business operations and data.
At this time, we have not detected any signs of related attacks affecting our apps or services. Our team continues to closely monitor the situation.
No action is needed from you. If you have any questions, please contact us at support@slashcart.org.
Thank you for your continued trust.
Retail Force Support Team