Lists of Vulnerabilities
The vulnerability database maintained by SecurityCheck Pro tracks known security issues in Joomla extensions. This page explains how the database works and how it is kept up to date.
Database structure
Each record in the vulnerability database contains:
- Product - the extension name as it appears in the Joomla extensions directory
- Type - Core, Component, Plugin, or Module
- Installed Version - the version found on your site
- Vulnerable - whether the installed version is confirmed vulnerable (Yes), not vulnerable (No), or has an uncertain status (Undefined)
Undefined status
An extension is marked Undefined when SecurityCheck Pro cannot determine with certainty whether the installed version is affected by a known vulnerability. This can happen when the version string is not in the expected format, when the database contains version ranges that do not cover the installed version, or when the vulnerability affects all versions without a fixed release.
An Undefined result does not mean the extension is safe. Treat Undefined extensions with the same caution as Vulnerable ones until you can verify the status independently.
Keeping the database current
The vulnerability database is updated by the SecurityCheck Pro Update Database plugin. When installed and enabled, the plugin checks the SecurityCheck Pro server for new vulnerability signatures every 12 hours. The check is triggered by normal site traffic: when the site receives a visit and more than 12 hours have passed since the last check, the plugin downloads the latest signatures automatically.
The last update timestamp is shown in the action bar of the Check Vulnerabilities page. If the timestamp is several days old, verify that the plugin is installed and enabled, and that the site is receiving visits.
Real-time updates
When the Update Database plugin is active and the subscription is valid, the database is refreshed automatically as described above — no manual action or scheduled task is required. The real-time status badge in the action bar confirms the current database state.
