outdated JQuery

• 

  milanjku · Member · Jul 11, 2018 at 1:55 am

  • Copy link
  • Add topic to favorites

  Hi there,

  Our security guy pointed out that our latest WP installation uses an outdated version of JQuery which could be a potential threat.

  Retire.js plugin reports:
  Found in https://XYZ.com/wp-includes/js/jquery/jquery.js?ver=1.12.4 – Vulnerability info:
  medium 2432 3rd party CORS request may execute CVE-2015-9251 123
  medium CVE-2015-9251 11974 parseHTML() executes scripts in event handlers

• 

  gemmacevans · Member · Jul 11, 2018 at 11:30 am

  • Copy link

  Hi milanjku,

  Your account doesn’t own any WordPress.com sites, which suggests it is hosted elsewhere. Can you send a link to the site you are working on?

  Thanks!

• 

  milanjku · Member · Jul 11, 2018 at 10:15 pm

  • Copy link

  Sure. Try https://tsunami-stg-1.t-iserv.com/ or https://tsunami-stg-1.t-iserv.com/1529027574847/ please.

  Regards
  Milan

• 

  supernovia · Staff · Jul 12, 2018 at 12:51 am

  • Copy link

  Sure, so these sites are WordPress.org installations, which is a bit different from what we’re supporting here:

  WordPress.com vs. WordPress.org

  There are articles out there though covering backward compatibility, how newer jQuery is handled, etc, as well as plugins to help you change things if you’d like. I’d recommend posting over in the forums for WordPress.org if you have further questions:

  https://wordpress.org/support

  Cheers!

• 

  milanjku · Member · Jul 12, 2018 at 1:17 am

  • Copy link

  Thanks, Supernovia! I didn’t realize these are two different entities.