Weqas is aware of the recently disclosed PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619.
We can confirm that Weqas Connect and Weqas Interactive are not affected, as these platforms do not utilize PHP. In addition, our brochure website hosting provider, WP Engine, implemented proactive security mitigations as soon as the vulnerabilities became known and has since applied the official PHP security patch.
Our review has identified no impact to Weqas services, participant data, or system availability. We will continue to monitor the situation as part of our ongoing commitment to information security.
