Major incident

DonorPerfect: ReadySetAuction – Temporary Feature Restrictions for Security Maintenance

Affected: ReadySetAuction

Current status of DonorPerfect: Minor issues — live DonorPerfect status

Timeline

1. Oct 21, 2026, 20:57 UTC
   identified
   As part of our ongoing commitment to protecting client data and maintaining the security of our products, we are proactively addressing a recently identified PHP security vulnerability that may affect certain functionality within ReadySetAuction (RSA). Out of an abundance of caution, we are temporarily disabling image uploads and CSV imports in RSA. Additionally, the ability to create new packages under Items → Packages will be temporarily unavailable. These features will remain disabled until a permanent security patch has been implemented. All other ReadySetAuction functionality will remain available and operational. Protecting our clients' information remains a top priority, and these precautionary measures are being taken to help ensure the continued security of the platform. We understand that these temporary restrictions may cause some inconvenience and appreciate your patience as we work to restore these features safely. We will provide additional updates as our remediation efforts progress and the affected functionality becomes available again.
2. Oct 21, 2026, 22:20 UTC
   identified
   We are continuing to work on a fix for this issue.
3. Oct 21, 2026, 22:22 UTC
   identified
   We are continuing to work on a fix for this issue.
4. Oct 22, 2026, 13:50 UTC
   identified
   We are in the final stages of testing the security patch and are planning to deploy it later today. Thank you for your continued patience and understanding as we work to safely restore all functionality. We will keep you updated here.
5. Oct 22, 2026, 18:10 UTC
   identified
   We are currently deploying a security patch for ReadySetAuction (RSA). During this process, you may experience intermittent errors or temporary difficulty accessing RSA. We apologize for any inconvenience this may cause and will provide an update here as soon as the deployment is complete.
6. Oct 22, 2026, 18:43 UTC
   monitoring
   A fix has been implemented and we are monitoring the results.
7. Oct 22, 2026, 20:42 UTC
   resolved
   This incident has been resolved.

Updates as published by DonorPerfect (original).