Is Xoxoday Down?

The Plum platform is back up following today's security maintenance. Core services are operational. You may see intermittent slowness or delayed voucher delivery over the next few hours while vendor connections and catalog availability fully recover. Action required — credential refresh: every API, Storefront and Marketplace client must refresh their credentials. Update your existing API token with the latest key from the Xoxoday Admin Dashboard. Integrations still using the previous key will fail until refreshed. We are actively monitoring vendor recovery and will post updates as services stabilise. For assistance, contact cs@xoxoday.com.

Resolved. The Plum platform is back online. Today's security maintenance and credential rotation are complete, and all services — Plum Giift, Plum Accounts, Perks and Benefits, and Plum Stores — are operational. Action required: API, Storefront and Marketplace customers must update their existing API token with the latest key from the Xoxoday Admin Dashboard before resuming integrations. IP allowlisting remains optional. Thank you for your patience. For assistance, contact cs@xoxoday.com. --- [2026-10-25T05:15:41.144Z] (identified) We have proactively taken Plum services offline to apply mandatory security patches following the Node.js security release of 21 October 2026 (CVE-2026-111497, a flaw in the Node.js Brotli decoder) and the PHP security release of 21 October 2026 (CVE-2026-109618 and CVE-2026-109619, critical remote-code-execution flaws). As an added precaution we are also rotating API keys. Given the financial nature of the products we deliver, all Plum services have been brought down so this can be completed safely. We expect the Plum platform to be available by 4:00 PM IST. We will post the next update in 60 minutes. Once services are restored, API and Storefront/Marketplace customers must update their existing API token with the latest key from the Xoxoday Admin Dashboard to ensure uninterrupted access. IP allowlisting is optional. For support, contact cs@xoxoday.com.

Between 05:26 and 06:01 IST on 23 October 2026, most Plum requests failed. Users could not log in, the storefront and checkout were unavailable, Plum Pro API orders failed, and GV link redemptions could not be completed. Cause: following the earlier performance degradation (02:07–05:26 IST), the overloaded caching component that our authentication service depends on became unresponsive. Resolution: our engineering team traced the load to an internal background process, stopped it, cleaned up the affected component and restored the authentication service. Services recovered at 06:01 IST, and all systems have operated normally since 06:05 IST. We are monitoring closely. What you should do: some orders and API requests submitted between 02:07 and 06:01 IST may have failed or timed out. Plum Pro API clients should retry orders that failed during that window. Orders that completed successfully are not affected. If you see a discrepancy, contact your account manager or Plum support with your order reference. Next steps: we are tightening safeguards so background jobs cannot overload shared infrastructure, and adding earlier alerting on this component. We apologise for the disruption.