jquery-validation 1.19.0 Vulnerability detected with Retire.js extension

  • Resolved michaelsmartmove

    (@michaelsmartmove)


    2 years, 3 months ago

    I hope all is well.

    I’ve recently received a security assessment report from one of my clients, which they had a professional company conduct for them. In that report they mentioned that the jquery-validation script has 2 vulnerabilities.

    View post on imgur.com

    It would seem like the version currently being used by the free version of Rank Math is outdated and that there is an updated version available.
    https://jqueryvalidation.org/

    Would it be possible to update the jquery-validation script to the latest version and push an update for Rank Math?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support Rank Math Support

    (@rankmathteam)

    Hello @michaelsmartmove,

    Thank you for contacting the support.

    There are a few things to notice here:
    1. The functionality of the above file is not getting executed via Rank Math.
    2. Even though the file was included in the plugin, we were not using it for a long time, so this vulnerability does not affect Rank Math users.

    With that said, we released an update sometime back. Please update the plugin to the latest version, so you do not see the above error.

    Hope that helps. Please let us know if you need any other assistance. We are here to help.

    Thread Starter michaelsmartmove

    (@michaelsmartmove)

    Hello @rankmathteam,

    Thanks a lot for clarifying.

    It would seem that this file was still part of my Rank Math plugin installation from many months ago, even though I was using the latest version.

    I had to delete the Rank Math plugin entirely and then re-upload it. This solved the issue for me, as a new Rank Math installtion doesn’t include that file.

    This comment is mainly for others who also run into this issue and need to know how to resolve it.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘jquery-validation 1.19.0 Vulnerability detected with Retire.js extension’ is closed to new replies.