Title: Remove compromised polyfill CDN script
Last modified: June 28, 2024

---

# Remove compromised polyfill CDN script

 *  Resolved [Ov3rfly](https://wordpress.org/support/users/ov3rfly/)
 * (@ov3rfly)
 * [1 year, 11 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/)
 * Please remove compromised polyfill CDN script as soon as possible, thanks.
 *     ```wp-block-code
           /**     * Print js scripts in admin head     *     * @since 2.5     *     * @return void     */    public function builder_mixins_script() {        ?>            <script>                if (!window.Promise) {                    var promise_polyfill = document.createElement('script');                    promise_polyfill.setAttribute('src','https://cdn.polyfill.io/v2/polyfill.min.js');                    document.head.appendChild(promise_polyfill);                }            </script>
       ```
   
 * More here: [https://thehackernews.com/2024/06/over-110000-websites-affected-by.html](https://thehackernews.com/2024/06/over-110000-websites-affected-by.html)

Viewing 5 replies - 1 through 5 (of 5 total)

 *  [brandonco](https://wordpress.org/support/users/brandonco/)
 * (@brandonco)
 * [1 year, 11 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17871303)
 * Hi [@ov3rfly](https://wordpress.org/support/users/ov3rfly/),
 * Thank you for reaching out, Our developers have been made aware of [this issue](https://github.com/BoldGrid/weforms/issues/230)
   and it looks like this it has been patched and should be resolved. You can check
   the status [here](https://github.com/BoldGrid/weforms/pull/231). Please let us
   know if you have more questions for us.
 * Thank you!
 *  Thread Starter [Ov3rfly](https://wordpress.org/support/users/ov3rfly/)
 * (@ov3rfly)
 * [1 year, 11 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17871411)
 * Feel free to mark this issue as ‘resolved’ **after** a plugin update with a fix
   has been released by your developers here, not before.
 * Thanks.
 *  [brandonco](https://wordpress.org/support/users/brandonco/)
 * (@brandonco)
 * [1 year, 11 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17871830)
 * Hi [@ov3rfly](https://wordpress.org/support/users/ov3rfly/) ,
 * I’m not sure if you’ve taken the time to check the issue but It does show as 
   being resolved and the patch looks to have been committed 3 days ago. Please 
   update your plugin if needed and let us know if the issue persist on your end.
 * Thanks
 *  Thread Starter [Ov3rfly](https://wordpress.org/support/users/ov3rfly/)
 * (@ov3rfly)
 * [1 year, 11 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17871864)
 * Latest release [here](https://wordpress.org/plugins/weforms/#developers) is 1.6.23(
   19 March, 2024). The issue was clearly described, waiting for an official release
   of a fix in WordPress plugin repository, no time/funding to look at github patches,
   sorry. Can’t be too hard to host polyfill package locally within plugin package
   and by that at same time solve GDPR issues with leaking IP address etc. to external
   servers.
 *  [brandonco](https://wordpress.org/support/users/brandonco/)
 * (@brandonco)
 * [1 year, 10 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17900817)
 * Hi [@ov3rfly](https://wordpress.org/support/users/ov3rfly/), just checking to
   make sure you’ve updated your weForms plugin and the error no longer persist.
   If so, we’d like to close out this issue, otherwise please share the new error
   message so that we can look into it further for you. Awaiting your response.
 * Thank you.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Remove compromised polyfill CDN script’ is closed to new replies.

 * ![](https://ps.w.org/weforms/assets/icon-256x256.png?rev=1978687)
 * [weForms - Easy Drag & Drop Contact Form Builder For WordPress](https://wordpress.org/plugins/weforms/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/weforms/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/weforms/)
 * [Active Topics](https://wordpress.org/support/plugin/weforms/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/weforms/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/weforms/reviews/)

## Tags

 * [Compromised](https://wordpress.org/support/topic-tag/compromised/)
 * [polyfill](https://wordpress.org/support/topic-tag/polyfill/)

 * 5 replies
 * 2 participants
 * Last reply from: [brandonco](https://wordpress.org/support/users/brandonco/)
 * Last activity: [1 year, 10 months ago](https://wordpress.org/support/topic/remove-compromised-polyfill-cdn-script/#post-17900817)
 * Status: resolved