#45310 closed defect (bug) (duplicate)
Outdated jQuery
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Priority: | normal | |
| Severity: | normal | Version: | 4.9.8 |
| Component: | External Libraries | Keywords: | |
| Focuses: | Cc: |
Description
WordPress 4.9.8 use jQuery v1.12.4, see here: https://github.com/WordPress/WordPress/blob/master/wp-includes/js/jquery/jquery.js
A vulnerability is present in this version of jQuery, see here: https://snyk.io/vuln/npm:jquery?lh=1.12.4
Detected also in Audits of Google Chrome developer tools.
Change History (3)
#1
@
6 years ago
- Milestone Awaiting Review deleted
- Resolution set to duplicate
- Status changed from new to closed
#3
@
5 years ago
Hi @ale5000 and @consultingroupitaly
I could recommend a plugin I developed for this specific reason: https://wordpress.org/plugins/jquery-manager/
In this way you're not dependent on the bundled WP jQuery.
Note: See
TracTickets for help on using
tickets.
Hello to WordPress Trac and thanks for opening this ticket!
This has been previously reported a few times, most recently in #45015.
That task is probably best covered by ticket #37110 though, which is about upgrading jQuery.
Note that we're currently still on 1.12 mainly because of browser support.