• Resolved ccarmical

    (@ccarmical)


    Got this notification today. I assume it’s in relation to the maps module. What do I do?

    Thanks,

    Casey

Viewing 6 replies - 1 through 6 (of 6 total)
  • Hi,
    You get the message, because you have a project on google cloud to integrate the google maps api.
    This is needed for some plugins in WordPress.

    I get the same message, too. I found this article:https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/eid-easy-qualified-electonic-signature/various-plugins-various-version-use-of-polyfillio

    Do you have maye a plugin or similar that is using polyfill_io for e.g. Google Maps or OpenStreeMaps? This included Javascript Bibliothek polyfill_io have a security issue.

    I deactive the Plugin that integrate Google Maps.

    In addition i recommend to install the wordfence Plugin.

    I hope that could help.
    Alex

    Thread Starter ccarmical

    (@ccarmical)

    Yes, the integration is pretty important for the directory. I’m wondering what I need to do to secure my directory. I’m not a coder, so I can’t do it myself. Need assistance from the developers.

    polyfill is core in wordpress, I think this error from google is bogus.

    Plugin Support Garret L

    (@garret1996)

    Hello everyone,

    Thanks for bringing this to our attention.

    I have taken a quick look at our code, but I don’t see that we are using the affected cdn.polyfill.io domain. I have reached out to our lead developer to confirm this in case I missed something.

    I will update you as soon as I hear back from them.

    Regards,

    Plugin Support Garret L

    (@garret1996)

    Hey everyone!

    I just wanted to confirm that this issue doesn’t affect our plugin.

    This only affects products that use cdn.polyfill.io embedded.

    Best regards,

    Thread Starter ccarmical

    (@ccarmical)

    Thank you, Garret!!

Viewing 6 replies - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.