The PHP vulnerability we reported earlier has been fully addressed. We have updated to the latest patched version, and all functionality, including file uploads, has been restored. Throughout this incident, the donation experience and transaction flows were not affected. Campaigns, donations, and account information remained protected.

A broad, internet-wide critical vulnerability has been identified in PHP, which is used on GoFundMe. As a precautionary measure, we have limited some functionality to protect our customers and their supporters. Updating to the latest version is our first priority and resuming normal operations directly behind. This impact is focused on file uploads to our platform, and the donation experience and transaction flows are not affected. We will update this page as we have them. More information about the large scale vulnerability can be found here https://www.php2shell.com/

We are actively investigating inconsistent errors when updating campaigns and uploading images. This does not affect donation processing or the donor experience.