The following pages link to Why isn't un-publishing a vulnerable extension enough to protect your site?: