PHP Vulnerability Responses by Company

We Make Stuff Ltd

Global hosting
Aliases / services
Mutual / mutual.agency / We Make Stuff Ltd
Official website
https://www.mutual.agency/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Craft CMS site maintenance

Response status
Patched and restored
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

The October 21 report says all supported sites were patched and restored by approximately 20:55 UK time that day.

Scope: This covers Mutual-supported sites deployed on Craft Cloud, Servd or VPS; it does not assess every customer of those hosts.

What users should do

Check restored site behavior and report problems to Mutual.

Official service URL

Source URLs

  1. Mutual: PHP vulnerability responsehttps://www.mutual.agency/blog/craft-cms-and-php2shell-how-we-dealt-with-itResponse evidence
  2. https://www.mutual.agency/bloghttps://www.mutual.agency/blogService and operation documentation
Related official sources
  1. Mutual: PHP vulnerability responseOfficial notice

Comments