Regarding the PHP vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618 and CVE-2026-109619), we have reviewed their impact on all of our Shopify apps: Japan Order CSV, Delete Me, Mockingbird, Mypage Blocks, and B2E, our employee sales app. None of these apps use PHP, so they are not affected by these vulnerabilities. Merchants using our apps do not need to take any action, such as updating or changing settings.

We continuously monitor published vulnerability information and will notify our users promptly if any impact is expected. If you have any questions about this matter, please contact the support desk for the app you use.

B2B on Shopify / Catalog

Definition

  • B2B on Shopify: Plus-exclusive functionality for selling to businesses, supporting customer management by Company and Location, quotes and invoicing, and catalog-based pricing.
  • Catalog: The set of published products and price lists tied to a customer Company.

Background

B2B requirements that once demanded separate stores or headless builds can now be met with native Shopify features — handling combined requirements such as multiple currencies, retail versus wholesale rates, and regional inventory out of the box.

Flagship's Involvement

In B2B projects we have built up B2B-specific data modeling expertise — for example, designing multiple Catalogs to cover JPY/USD × retail/wholesale combinations.