Regarding the PHP vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618 and CVE-2026-109619), we have reviewed their impact on all of our Shopify apps: Japan Order CSV, Delete Me, Mockingbird, Mypage Blocks, and B2E, our employee sales app. None of these apps use PHP, so they are not affected by these vulnerabilities. Merchants using our apps do not need to take any action, such as updating or changing settings.

We continuously monitor published vulnerability information and will notify our users promptly if any impact is expected. If you have any questions about this matter, please contact the support desk for the app you use.

PDP / PLP / Cart Drawer

Definition

  • PDP (Product Detail Page): The page for a single product — photos, price, description, variants, and the add-to-cart button.
  • PLP (Product List Page): Product listing pages — collections, search results, categories, and features.
  • Cart Drawer: A cart UI that slides in from the side of the screen without a page transition.

Background

The PDP is the page most directly tied to conversion — and a landing point for search traffic — demanding SEO, performance, and a strong purchase flow all at once. The PLP carries the "browse and find" experience, with heavy operational requirements such as faceted search, sorting, and stock filters, often combined with search engines like Algolia. The Cart Drawer, compared with navigating to a cart page, makes post-add upsells far easier and tends to lift conversion.

Flagship's Involvement

In theme projects the PDP receives the largest share of our effort, packing in member discounts, sale displays, stock status, delivery estimates, and recommendations. For PLPs we build Algolia-powered filtering and stock-status facets, designing consistency with the PDP in inventory display and SEO controls. For Cart Drawers, we implement experience improvements such as an upsell proof of concept for an apparel brand.