Updates
39 articles tagged Updates, newest first.
The PHP Project Advises Turning Off Session Upload Progress Until the Next Release
PHP has posted an informational advisory on session upload progress and CVE-2026-115560. Who needs to act, the one-line fix, and how to find sites with it on.
Joomla.org Is Offline After the PHP Security Release: What It Means for Your Site
joomla.org is offline after PHP's critical security release. Downloads, the JED and automated updates are down. What still works, and why PHP is the real job.
PHP's Critical Security Release and Your Joomla or WordPress Site
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two unauthenticated RCE flaws. Your host applies the update to your Joomla or WordPress site; 8.1 and older get none.
What Does File Checksum Failed Mean in a Joomla Update, and How Do You Fix It?
Joomla's File Checksum Failed error means the update zip did not match its signed hash. A release-day glitch, a full disk or a wrong tmp path all cause it.
Joomla Extension Updates Can Now Be Flagged as Security Releases
For Joomla extension developers: Joomla 5.4.9 and 6.1.4 read a security tag in your update XML and badge the update by severity. The XML and edge cases.
Joomla 5.4 Is Security-Only Since 13 October 2026
Joomla 5.4 bug fixes ended 13 October 2026 and security fixes end 12 October 2027. What changed, the PHP 8.2 deadline that comes first, and planning Joomla 6.
Joomla 6.2 Is Out: Requirements, Changes and Which Sites Can Take It
Joomla 6.2.0 shipped on 13 October 2026 with the 6.1 requirements, no documented breaking changes and no security fixes. What is new and which sites can update.
AcyMailing Shoots Itself in the Foot With a Vanishing Update Site
Up to 11.1.0, AcyMailing added its Joomla update site from PHP, so Rebuild deleted it and Joomla called vulnerable sites up to date. 11.1.1 fixes it.
Joomla 5.4.9 and 6.1.4 Fix 16 Security Issues, Two Rated High
Joomla 5.4.9 and 6.1.4 fix 16 core security issues, including cache directory deletion, SSRF, an MFA bypass and account creation with registration switched off.
Modules Anywhere 10.0.0 and Tabs & Accordions 3.2.0 Close Two Content Author Security Holes
CVE-2026-100750 and CVE-2026-100751: Regular Labs fixed two High severity issues in Modules Anywhere 10.0.0 and Tabs & Accordions 3.2.0 for Joomla.
Regular Labs Publishes 24 Joomla Extension Updates Including 10 Security Fixes
Regular Labs shipped 24 Joomla extension updates on 13 September 2026. Ten fix security issues across nine CVEs, and four change behaviour on update.
Release Radar, a Free Joomla and WordPress Release Tracker
A free public log of new Joomla and WordPress extension releases, including the paid ones no plugin directory covers. RSS and JSON, no account needed.
Helix Ultimate 2.2.10 Fixes Twelve Security Issues, Including a Pre-Login Bypass
Helix Ultimate 2.2.10 is a security release for the Joomla template framework. Every version below it is affected. Here is what it fixes and how to update.
Slower on purpose: the new Update Queue, and why it is off by default
Firing every update at once is what takes a shared server down. mySites.guru's new Update Queue runs one update at a time per server, off by default.
Summer 2026: Everything New in mySites.guru
Everything new in mySites.guru this summer: 38 new tools, 40 improvements, and the 19 Joomla extension vulnerabilities we found and disclosed ourselves.
Why PHP 8.5.7 Shows Amber When PHP 8.4.24 Shows Green
PHP 8.5.7 shows amber while 8.4.24 shows green because the badge checks whether you are on the newest patch in your branch, not which branch you picked.
Joomla 6.1.2 and 5.4.7 Ignore Every Article Option
Joomla 6.1.2 and 5.4.7 ignore every per-article Option on the front end. The root cause, how to find affected articles, and the official hotfix.
Regular Labs Patched Its Whole Joomla Extension Catalogue at Once
Regular Labs shipped a security-hardening update across its Joomla extension range on 22 July 2026: SSRF, command injection, stored XSS and more. No CVEs.
Joomla Update Error 999: a Dead Extension Redirecting to LinkedIn
The Joomla 'Invalid status code 999' update error is an abandoned extension whose update site redirects to LinkedIn. Here is the fix.
Avada Builder 3.15.4 Patches an Unauthenticated File Deletion Flaw (CVE-2026-8713)
Avada Builder 3.15.4 fixes a critical unauthenticated file deletion flaw (CVE-2026-8713, CVSS 9.1) that can delete wp-config.php and take over the site.
Joomla Update Not Possible Because the Offered Update Has Expired
Joomla shows "Update not possible because the offered update has expired"? It is usually not your site. Here is the real cause, and how to fix it.
Joomla 5.4.6 and 6.1.1 Patch TEN Security Issues
Joomla 5.4.6 and 6.1.1 close ten security issues including an MFA bypass and a com_users privilege escalation. The patch order for 30+ sites.
mySites.guru is fully compatible with WordPress 7.0
WordPress 7.0 "Armstrong" shipped on 20 May 2026. mySites.guru works perfectly with it. Backup, update, and control auto-updates across every site.
Avada Builder Patches Two Security Issues in 3.15.3
Avada Builder 3.15.3 patches an unauthenticated SQL injection and a Subscriber-level file read across 1 million WordPress sites. Find affected sites.
How to Enable Joomla Extension Auto-Updates Safely
How to enable auto-updates for Joomla extensions across one site or hundreds, with backup and rollback steps that keep client sites safe if an update breaks.
Joomla 6.1.0 Released - What's New
Joomla 6.1 ships a visual workflow editor, built-in POW captcha, media custom fields for audio and video, and a new Cassiopeia child template.
4 Major WordPress Plugins Patched Security Flaws in March 2026
Elementor, Yoast SEO, WPForms, and Really Simple Security all shipped security patches in March 2026. What was fixed, and how to verify your sites.
WordPress 7 Technical Requirements Check: Is Your Hosting Ready?
WordPress 7 requires PHP 7.4+ and still accepts MySQL 5.5.5+. Run a hosting check across every site to find old PHP and end-of-life database servers.
How to Check Your Sites for WordPress 7.0 Compatibility
WordPress 7.0 requires PHP 7.4+, dropping PHP 7.2 and 7.3, while the MySQL and MariaDB minimum stays at 5.5.5. Check every site's PHP and database at once.
How to Enforce Minor Upgrades Only in WordPress
Stop WordPress from jumping major versions automatically while still getting security patches. How WP_AUTO_UPDATE_CORE works.
How to Disable Automated Joomla Core Upgrades in Joomla 5.4+ and 6.0
Joomla 5.4 and 6.0 auto-update your site without asking. How to disable Joomla automatic updates, why agencies should, and the TUF security model behind them.
WordPress 6.9.2, 6.9.3, and 6.9.4: 10 Security Fixes, a Crash, and Incomplete Patches
WordPress 6.9.2 crashed sites with a white screen, 6.9.3 fixed it, then 6.9.4 completed three missing security patches. What happened and how to recover.
How to Prevent Accidental Joomla Version Jumps with Update Channel Management
One wrong Joomla update channel setting can jump your site from Joomla 4 to 5 or 5 to 6. Here is how mySites.guru detects and prevents this.
How to Stop Automatic Updates in WordPress with One Click
Disable WordPress auto-updates with define('AUTOMATIC_UPDATER_DISABLED', true); in wp-config.php, or the automatic_updater_disabled filter. Code included.
Automatic Updates for Any Joomla Extension
Enable automatic updates for any Joomla extension that uses a Joomla update site - set per-site or across all connected sites with two clicks.
Remove Fluff Files After Joomla Updates
mySites.guru can automatically delete leftover installation folders, readme files and other fluff left behind after Joomla core updates.
Upgrade 100s of Sites from One Dashboard
Run core and extension updates across hundreds of Joomla and WordPress sites from the mySites.guru dashboard.
Auto-Upgrade 1000s of Plugins & Extensions
Update Joomla extensions, WordPress plugins, and CMS cores across all your sites from one mySites.guru dashboard. Select all, click upgrade, done.
Schedule Audits, Updates & Backups
Configure time-based and action-based schedules for security audits, snapshots, updates and Akeeba backups across all your mySites.guru connected sites.