CVE-2022-40834 SQL Injection Vulnerability

Is CI3 still receiving security updates or are all these CVE's still exploitable?

I don't know. But it is not well-maintained.

If you think the SQL injection attack vectors in web.archive.org are vulnerabilities in the framework,
I believe they are still exploitable.
FYI, the maintainer did not think these were vulnerabilities in the framework, but vulnerabilities in the application code, if I recall correctly.

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper