WordPress.org
Get WordPress

Make WordPress Core

Opened 8 years ago

Closed 8 years ago

Last modified 7 years ago

#45310 closed defect (bug) (duplicate)

Outdated jQuery

Reported by: ale5000 Owned by:
Priority: normal Milestone:
Component: External Libraries Version: 4.9.8
Severity: normal Keywords:
Cc: Focuses:

Description

WordPress 4.9.8 use jQuery v1.12.4, see here: ​https://github.com/WordPress/WordPress/blob/master/wp-includes/js/jquery/jquery.js

A vulnerability is present in this version of jQuery, see here: ​https://snyk.io/vuln/npm:jquery?lh=1.12.4
Detected also in Audits of Google Chrome developer tools.

Change History (3)

#1 @swissspidy
8 years ago

  • Milestone Awaiting Review
  • Resolution → duplicate
  • Status new → closed

Hello to WordPress Trac and thanks for opening this ticket!

This has been previously reported a few times, most recently in #45015.

That task is probably best covered by ticket #37110 though, which is about upgrading jQuery.

Note that we're currently still on 1.12 mainly because of browser support.

#2 @consultingroupitaly
8 years ago

Is the fix of the vulnerability backported to jQuery v1.12.4?

#3 @remzicavdar
7 years ago

Hi @ale5000 and @consultingroupitaly

I could recommend a plugin I developed for this specific reason: ​https://wordpress.org/plugins/jquery-manager/

In this way you're not dependent on the bundled WP jQuery.

Note: See TracTickets for help on using tickets.