Minor incident
GoFundMe Pro: Errors updating campaigns
Oct 21, 2026, 14:46 UTC
started
00:42 UTC
resolved October 22, 2026
9 h 56 min
duration
Affected: Campaign & Fundraising Pages, Supporter Pages
Current status of GoFundMe Pro: Operational — live GoFundMe Pro status
Timeline
- Oct 21, 2026, 14:46 UTCinvestigatingWe are actively investigating inconsistent errors when updating campaigns and uploading images. This does not affect donation processing or the donor experience.
- Oct 21, 2026, 15:58 UTCidentifiedA broad, internet-wide critical vulnerability has been identified in PHP, which is used on GoFundMe. As a precautionary measure, we have limited some functionality to protect our customers and their supporters. Updating to the latest version is our first priority and resuming normal operations directly behind. This impact is focused on file uploads to our platform, and the donation experience and transaction flows are not affected. We will update this page as we have them. More information about the large scale vulnerability can be found here https://www.php2shell.com/
- Oct 22, 2026, 00:42 UTCresolvedThe PHP vulnerability we reported earlier has been fully addressed. We have updated to the latest patched version, and all functionality, including file uploads, has been restored. Throughout this incident, the donation experience and transaction flows were not affected. Campaigns, donations, and account information remained protected.
Updates as published by GoFundMe Pro (original).
Other services with incidents at the same time
This was part of a wider event: 109 services reported incidents within the hour.
- Vanta 15:40 UTC · Stale data for CloudflareDomainInventory and CloudflareZoneRule
- Liquid Web - Services 15:39 UTC · PHP Security Vulnerability Assessment (CVE-2026-109618 & CVE-2026-109619)
- RIPE NCC 15:37 UTC · RIPE NCC Academy, NRO and ASO Websites Temporarily Unavailable
- Supabase 15:36 UTC · Project lifecycle operations such as project creation, pausing, and restoration, in all regions
- OpenAI 15:34 UTC · Elevated error rates for gpt-5.6-luna API requests
- Asana 15:33 UTC · Asana downtime
- Ellucian Cloud 15:33 UTC · Ellucian Workflow – Service Disruption
- Liquid Web - Services 15:33 UTC · Apache Service Disruptions
- Granicus System 15:31 UTC · Temporary Service Unavailability
- Akamai 15:30 UTC · Web Security Analytics, Reporting and Configuration Deployment Issues
- CC 15:30 UTC · PHP Vulnerability announced - Upload capabilities disabled
- Brivo 15:24 UTC · Degraded Performance -- Brivo Smart Home & Brivo Mobile Key
- Zapier 15:21 UTC · Delayed real-time updates in Zapier Tables
- Sucuri 15:14 UTC · PHP Security Advisory: Critical remote code execution vulnerabilities
- Fasthosts 15:10 UTC · Security maintenance: Short interruptions possible on PHP-based services
More GoFundMe Pro incidents
- July 27, 2026 Live Events Admin Access Impacted
- July 22, 2026 Inconsistent transaction failures
- March 31, 2026 Pages inaccessible
- March 24, 2026 Log In and Pro Manager Loading Issues
- March 23, 2026 Embedded Studio inaccessible