# Classic, Ecwid and security issues

**URL:** <https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710>\
**Category:** RapidWeaver Classic\
**Created:** [February 25, 2026, 11:15am UTC](https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710 "2026-02-25T11:15:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jonwardallen](https://avatars.discourse-cdn.com/v4/letter/j/8491ac/32.png) [@jonwardallen](https://forums.realmacsoftware.com/u/jonwardallen)\
**Post date:** [February 25, 2026, 11:15am UTC](https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710/1 "2026-02-25T11:15:52Z")

</div>

We have been trading for many years without any security issues (using Rapidweaver along with an ECWID payment set up).

Recently, scans by Security Metrics are showing jQuery errors which means we are now technically not compliant and they have asked us to correct the problem.

I thought it was due to old stacks software, but I think we are running the most up to date version. I asked ECWID if they could shed any light on this and got this answer:

Ecwid does not use jQuery.

Additionally, I have checked your website [https://www.medlarpress.com/](https://www.medlarpress.com/) and see that it was built using RapidWeaver. I checked the scripts on the website and found that the jQuery script with version 2.2.4 comes from RapidWeaver itself.

You may see that it belongs to RapidWeaver because the URL for the script includes rw\_common. In this case, I recommend reaching out to the RapidWeaver support team to inquire about the jQuery script and how to update it.

So there you have it - I’m already operating on the edge of my own ability . . . can anyone show me a simple way to remedy this?

I’m currently also half-way through a conversion to elements, so hope the problem won’t appear there as well!

---

<div class="post-metadata">

**Author:** ![dan](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dan/32/28516_2.png) [@dan](https://forums.realmacsoftware.com/u/dan)\
**Post date:** [February 25, 2026, 11:27am UTC](https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710/2 "2026-02-25T11:27:50Z")

</div>

By default RapidWeaver Classic does not use jQuery…

Looking at your source code it appears that jQuery 2.2.4 is being included by the Stacks plugin, perhaps @isaiah at YourHead or @joeworkman could advise if there’s a way in Stacks to use a newer version of jQuery in Stacks?

The good news is that **this will not be a problem for you with Elements** 😃

---

<div class="post-metadata">

**Author:** ![jonwardallen](https://avatars.discourse-cdn.com/v4/letter/j/8491ac/32.png) [@jonwardallen](https://forums.realmacsoftware.com/u/jonwardallen)\
**Post date:** [February 25, 2026, 11:36am UTC](https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710/3 "2026-02-25T11:36:48Z")

</div>

Thanks Dan

I’ll ask about that, though I’m not too keen to start trying to patch classic if I don’t need to - and its good to know the new Elements site will be OK - perhaps I’d better get a move on with building it!

Jon

---

<div class="post-metadata">

**Author:** ![dan](https://dub1.discourse-cdn.com/flex005/user_avatar/forums.realmacsoftware.com/dan/32/28516_2.png) [@dan](https://forums.realmacsoftware.com/u/dan)\
**Post date:** [February 25, 2026, 11:58am UTC](https://forums.realmacsoftware.com/t/classic-ecwid-and-security-issues/54710/4 "2026-02-25T11:58:18Z")

</div>

@jonwardallen, yes I think migrating to Elements asap would be a good idea!

If you get stuck or have questions on how to do something in Elements, just start a new thread and we’ll help you out ☺