Make WordPress Core

Opened 6 years ago

Closed 6 years ago

Last modified 5 years ago

#45310 closed defect (bug) (duplicate)

Outdated jQuery

Reported by: ale5000's profile ale5000 Owned by:
Milestone: Priority: normal
Severity: normal Version: 4.9.8
Component: External Libraries Keywords:
Focuses: Cc:


WordPress 4.9.8 use jQuery v1.12.4, see here:

A vulnerability is present in this version of jQuery, see here:
Detected also in Audits of Google Chrome developer tools.

Change History (3)

#1 @swissspidy
6 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to duplicate
  • Status changed from new to closed

Hello to WordPress Trac and thanks for opening this ticket!

This has been previously reported a few times, most recently in #45015.

That task is probably best covered by ticket #37110 though, which is about upgrading jQuery.

Note that we're currently still on 1.12 mainly because of browser support.

#2 @consultingroupitaly
6 years ago

Is the fix of the vulnerability backported to jQuery v1.12.4?

#3 @remzicavdar
5 years ago

Hi @ale5000 and @consultingroupitaly

I could recommend a plugin I developed for this specific reason:

In this way you're not dependent on the bundled WP jQuery.

Note: See TracTickets for help on using tickets.