Security Checklist/Site Administration From Joomla! Documentation Review the vulnerable extensions - needs updating