PHP Vulnerability Responses by Company

The Lettings Hub

Global cloud / infrastructure
Aliases / services
The Lettings Hub / The Lettings Hub Limited / Lettings Hub BOX
Official website
https://lettingshub.co.uk/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status
BOX and its Reapit integration patched
Response information checked
2026-10-27 Rechecked: 2026-10-27

BOX lettings platform from The Lettings Hub Limited.

The report says PHP patches were applied to BOX and its Reapit integration, with the work completed on October 21. Additional access-control hardening was introduced without a service outage.

What users should do

BOX customers do not need to take additional action. Continue using the service and its integration, and contact The Lettings Hub with any questions.

Official service URL

Source URLs

  1. PHP2Shell response and scopehttps://lettingshub.co.uk/letting-agents/blog/security-update-our-response-to-the-php-vulnerability/Response evidence
  2. Operating entityhttps://lettingshub.co.uk/Service and operation documentation
Related official sources
  1. PHP2Shell response and scopeOfficial notice
  2. Operating entityOfficial information directory

Comments