Breach right now?

Website stack security guides

Pick the combination of technologies your website runs on to see which versions are still supported, which recent vulnerabilities are being exploited, and how to patch. Each guide cites NVD, CISA's Known Exploited Vulnerabilities catalog and the vendor.

Drupal and PHP stack breach guide

Running Drupal 10 or 11? The 9 December 2026 Drupal 10 end-of-life date, the exploited core SQL injection CVE-2026-9082, and plain-English patch steps.

Adobe Commerce (Magento) and PHP stack breach guide

Running Adobe Commerce or Magento Open Source? Three 2026 flaws are on CISA's exploited list. Which patch levels fix them, and how to check yours.

Next.js, React and Node.js stack breach guide

Running a Next.js or React site? What the exploited React2Shell flaw (CVE-2025-55182) and the middleware bypass mean, and plain-English patch steps.

PHP + WordPress stack breach guide

Is your PHP + WordPress site exposed? Supported versions, actively exploited CVEs (CISA KEV) and plain-English patch steps for Australian businesses.

Shopify store security guide

Shopify patches the platform, but apps, theme scripts, staff accounts and email spoofing are still on you. A practical checklist for Australian Shopify brands.

Silverstripe CMS, PHP and jQuery stack breach guide

Running a Silverstripe CMS 5 site? Support timeline, recent advisories, the jQuery version many themes still load, and plain-English patch steps.

Webflow and hosted CMS security guide

Webflow, Framer and HubSpot CMS patch the platform, but custom code, third-party scripts, editor accounts and email spoofing are still yours. A practical checklist for Australian organisations.

WordPress, PHP and Node.js stack breach guide

Headless or hybrid WordPress with a Node.js front end or API? Supported versions, actively exploited CVEs across PHP, WordPress and Node.js, and how to patch.

WooCommerce, WordPress and PHP stack breach guide

Running a WooCommerce store? Actively exploited WordPress and PHP CVEs, critical WooCommerce extension flaws, and patch steps that protect customer and card data.

Not sure what your site runs on? Book a free stack check. Already had an incident? Start with data breach help.