Reviews (422)
the app has been hacked, and someone has embedded custom code into the app's settings in my store to insert a malicious checkout that is not Shopify's official checkout. Orders have been processed through this malicious checkout.
This app is not secure.
Hello,
We're sincerely sorry for the concern this incident caused, and we understand why it affected your trust in our app.
On 22 July 2026, we identified a security vulnerability affecting our Qikify Slide Cart Drawer that allowed an unauthorized third party to inject scripts into customizable HTML fields in the app settings, which redirected some shoppers to a fraudulent checkout page. We detected it the same day and removed all malicious scripts from every affected store within hours.
Since then, we engaged an independent cybersecurity firm to carry out a full Incident Report investigation and Vulnerability Assessment & Penetration Testing, and reinforced security across our entire system. The vulnerability has been remediated and independently verified, and Shopify reviewed our remediation and security documentation before approving the app return to the App Store in late August 2026. Our app has been stable since then, with no further incidents.
We've shared our findings, the incident timeline, and the security measures we've taken in our official report:
https://qikify.com/pages/security-incident-notice
We understand this incident damaged your trust in us, and we don't expect a review reply to repair that. What we can do is be transparent about what happened and show the work we've done since.
Once again, we sincerely apologize for this incident and the concern it may have caused. If you have any further questions or need additional information, please don't hesitate to contact our Support team. We're here to help.
Kind regards,
The Qikify Team
