Joomla CVE index

All 420 CVE-numbered vulnerabilities mySites.guru tracks across 204 Joomla extensions, grouped by year.

Each record has its own page with the affected version ranges, the rules we match against, and, where we found the flaw ourselves, the write-up we published once the developer had shipped a fix. Years come from the CVE id, so they show when the id was assigned rather than when the flaw reached the extension.

A list like this shows which Joomla extensions have a history. It will not tell you whether the sites you look after are running an affected version right now, and past a handful of sites that is not a question you answer by hand. The mySites.guru subscription answers it: each audit checks every connected site against all 344 rules behind this index and flags the ones that match, with the version to update to.