Your pages load a version of a script library (jQuery is the most common) that has a published security hole, fixed in a later version. Find which version your site loads, then update it. On WordPress, that usually means updating the theme or plugin that brings it in.
What's the problem
A security scan or browser tool says your site uses an outdated or vulnerable version of jQuery, Bootstrap, Lodash or another JavaScript library.
Why it happens
- The library was added years ago and never updated.
- A theme or plugin bundles its own old copy, separate from the one your platform provides.
- The site loads the library from a fixed old address on a CDN.
How to fix it
- Find the version: open your page's source and search for the library name; the version is usually in the file name or after
?ver=. - Look it up in the GitHub Advisory Database to see which versions are affected and which version fixes it.
- Update it: change the file or CDN address to the fixed version, or on WordPress, update the theme or plugin that loads it.
- Test the pages that use it, because major versions can change how the library behaves.
What Preventionlabs checks
One click runs the full report on your domain. For this problem it shows script libraries on your homepage with published security holes; every outside service your homepage loads scripts and files from; your WordPress version and plugins against the latest releases. It checks from the outside, so it can't see files your server only uses internally.
Run your free reportYour first report is free, no card needed. Then A$50 a month, up to 10 domains. Read-only: it never changes anything.