None of our core services, including FixMyStreet and WasteWorks, use PHP, so are unaffected by the current vulnerability.
Our tile server does use PHP for certain use cases, as do some of our parent charity services, which run on different systems to core SocietyWorks services.
All systems that do use PHP were patched on the afternoon of the 21st October.
Last updated: 22 October 2026 at 8:39 AM