re:Members is aware of PHP2Shell, two critical remote code execution vulnerabilities in the PHP runtime disclosed this week. The re:Members AMS platform does not use PHP and is not affected. There is no impact to our services.
If your organization runs a PHP-based website (such as WordPress) that connects to the re:Members AMS, we strongly recommend confirming with your hosting provider that the site has been patched.
Our full response, including remediation guidance, is available in the Vulnerability Memos section of the re:Members Trust Site (trust.remembers.com). As part of our commitment to transparency and proactive communication, we will also use our Trust Site to share updates on other security vulnerabilities and our response, as warranted. We encourage you to reference this resource for the latest information.
If you have any questions or need additional assistance, please contact us at ams-help@remembers.com.
Posted Oct 22, 2026 - 11:02 EDT
This incident affected: API, Cloud 1, Cloud 2, Cloud 3, Cloud 4, and Cloud 5.