How this list is built
Only primary sources are used: the vendor or project's own advisory (PHP, WordPress.org, WooCommerce or Next.js), a CVE/GHSA record, or a national CERT (CERT-FR, CERT-EU). No aggregator site is treated as the source of truth.
Skepra / Web recovery & resilience
Security advisories relevant to PHP, WordPress, WooCommerce and Next.js sites.
Skepra reviews primary-source security advisories and records what was published, by whom, and which versions are affected.
Ask whether this applies to your site