PHP Vulnerability Responses by Company

Agility, Inc.

Global cloud / infrastructure
Aliases / services
Agility CMS / Agility Inc. / Agility Content Fetch API / agilitycms.com / Agility, Inc.
Official website
https://agilitycms.com/
Sources identifying the operating company

Provider in the standard Customer Agreement; check the individual ALT for overriding terms.

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Agility CMS platform

Response status
No PHP; unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Headless CMS and content APIs.

The official notice states that Agility CMS, including its editor, Content API, Management API and CDN, uses no PHP and is unaffected.

Scope: Covers Agility's platform, excluding customer-managed frontends and servers.

What users should do

No action is required for Agility CMS itself. Administrators must separately patch and restart any custom PHP frontend.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://agilitycms.com/blog/php2shell-agility-cms-not-affectedResponse evidence
  2. https://agilitycms.com/bloghttps://agilitycms.com/blogService and operation documentation
  3. https://agilitycms.com/customer-agreementhttps://agilitycms.com/customer-agreementService and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments