|
#45970
|
in IIS if web.confing <configuration has xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0" attribute the WordPress creates new <configuration> section and the site craches with wrong web.config
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/13/2019
|
|
#19493
|
post and archive pagination don't work with custom endpoints
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/25/2018
|
|
#34136
|
Allow register_post_type's rewrite to remove CPT slug
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
09/30/2025
|
|
#14502
|
Enable /post-type/taxonomy/term/ permalinks
|
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
enhancement
|
|
06/04/2019
|
|
#41946
|
Option to delete_with_markers
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
09/21/2017
|
|
#46087
|
Short-circuit `page_on_front` check during site creation
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
01/23/2019
|
|
#35482
|
Archival pagination fails in 4.4 and up
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
needs-unit-tests
|
06/04/2019
|
|
#20520
|
Author Page Pagination Broken When Removing /author/ Slug
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#31591
|
Bug in the author permalink .
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
reporter-feedback
|
06/04/2019
|
|
#26885
|
Path Based Multisite Rewrite rule absolute path without trailing slash
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#16832
|
Trouble if the slug of a custom taxonomy is the same as the url of page/post
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#20109
|
Valid htaccess rule causes 404 after upgrade to 3.3.1
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#35916
|
WP_Rewrite::generate_rewrite_rules() ignores boolean $endpoints / $feed parameters for CPT
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
needs-unit-tests
|
06/04/2019
|
|
#23867
|
add_rewrite_endpoint causes front-page.php template to be ignored
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
reporter-feedback
|
06/04/2019
|
|
#25106
|
web.config for multisite configurations on IIS7
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
needs-unit-tests
|
06/04/2019
|
|
#27276
|
wp_rewrite_rule does not update option when it's empty
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#21374
|
Add core support for letting custom permalink structure for different post types
|
|
Rewrite Rules
|
normal
|
normal
|
|
enhancement
|
|
06/04/2019
|
|
#24853
|
Add endpoint support to CPT archives
|
|
Rewrite Rules
|
normal
|
normal
|
|
enhancement
|
|
06/04/2019
|
|
#22798
|
Invalid URLs not giving 404 with "Default" permalink settings
|
|
Rewrite Rules
|
normal
|
normal
|
|
enhancement
|
close
|
07/16/2025
|
|
#40340
|
"Attach to existing content" modal shows posts and pages of other users
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
08/03/2017
|
|
#63440
|
6.8.1 Multisite: Uncaught TypeError: array_keys(): Argument #1 ($array) must be of type array, string given in wp-includes/class-wp-roles.php:291
|
|
Role/Capability
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
05/15/2025
|
|
#42532
|
Custom post type : redirection bug after publish when cap edit_published_cpt is not set
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
01/16/2019
|
|
#49673
|
Mass select change of role is bugged.
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
03/22/2020
|
|
#50260
|
Multisite - Getting actual user capabilities with get_role_caps() different with current_user_can()
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-docs
|
08/04/2023
|
|
#50123
|
Roles & Caps: give anonymous users the `read_post` meta cap for public posts.
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
01/26/2024
|
|
#19747
|
Roles add_cap should call update_user_level_from_caps()
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/13/2022
|
|
#40214
|
Some WP instances prematurelly try to do capability tests, before the user object is loaded
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/21/2017
|
|
#60026
|
Strange behavior WordPress in multisite environment wicustomizer
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
11/19/2025
|
|
#49345
|
User with admin privileges cannot edit some pages/posts
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
02/02/2020
|
|
#36376
|
current_user_can/has_cap fails when user has multiple roles
|
dd32*
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
01/14/2019
|
|
#42136
|
manage_links should be a custom capability not a default
|
|
Role/Capability
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
10/07/2017
|
|
#38303
|
register_meta and capabilities aren't working as expected
|
rmccue
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
06/25/2017
|
|
#36691
|
Ability to disable "Password Protected" post option
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
03/10/2018
|
|
#52350
|
Add documentation about meta capabilities
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
needs-docs
|
01/23/2021
|
|
#33240
|
Introduce a capability for previewing posts
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
07/14/2017
|
|
#42405
|
Introduce singular capabilities for enabling individual themes on Multisite
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/01/2017
|
|
#41701
|
Introduce singular capabilities for further management of individual plugins
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
08/22/2017
|
|
#41703
|
Introduce singular capabilities for network activation and deactivation of individual plugins
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
09/20/2020
|
|
#41674
|
More granular capabilities for restoring and permanently deleting trashed posts
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
needs-unit-tests
|
09/01/2025
|
|
#20152
|
Multisite simplify option name to user_roles
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
|
09/18/2018
|
|
#23391
|
User in contributor role can add images to post only via the text editor
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
10/03/2018
|
|
#38276
|
"Is thing public/accessible" API
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
dev-feedback
|
09/23/2017
|
|
#5942
|
Add Owner role
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
11/06/2017
|
|
#41778
|
Archive page for user roles
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
09/02/2017
|
|
#44476
|
Backend section Access based on Role/User
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
dev-feedback
|
08/02/2018
|
|
#51334
|
Implement enhanced post_status transition capabilities
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
dev-feedback
|
09/18/2020
|
|
#39174
|
Introduce network roles
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
feature request
|
needs-unit-tests
|
03/15/2019
|
|
#37616
|
Replace `is_super_admin()` calls with real capability checks
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
task (blessed)
|
|
05/08/2017
|
|
#26807
|
Comments on private posts should also be private in admin depending on role
|
|
Role/Capability
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#16808
|
Insufficient permissions for custom post type management and custom role/caps
|
|
Role/Capability
|
normal
|
normal
|
|
defect (bug)
|
|
01/27/2023
|
|
#27670
|
Plugin Information tab - inaccesible without install_plugin capability
|
|
Role/Capability
|
normal
|
normal
|
|
defect (bug)
|
dev-feedback
|
06/04/2019
|
|
#57751
|
contributor bypass asking for review
|
|
Role/Capability
|
normal
|
normal
|
|
defect (bug)
|
reporter-feedback
|
02/23/2023
|
|
#34608
|
Add role display name to WP_Role object
|
|
Role/Capability
|
normal
|
normal
|
|
enhancement
|
|
06/06/2019
|
|
#14986
|
Make WordPress roles/capabilities more secure (edit_users related)
|
|
Role/Capability
|
normal
|
normal
|
|
enhancement
|
|
12/05/2022
|
|
#36939
|
Role groups
|
|
Role/Capability
|
normal
|
normal
|
|
enhancement
|
dev-feedback
|
06/04/2019
|
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/02/2018
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
|
08/14/2025
|
|
#60850
|
Localize script not working in WordPress 6.5-RC3-57856
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
03/27/2024
|
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
12/09/2025
|
|
#15833
|
Script concatenation fails to take external dependencies into account.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
05/21/2019
|
|
#49470
|
Script loader: simplify maintenance
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
07/21/2020
|
|
#52879
|
The SCRIPT_DEBUG constant is ignored when concatenating scripts
|
|
Script Loader
|
normal
|
minor
|
Future Release
|
defect (bug)
|
|
04/27/2022
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/06/2017
|
|
#61755
|
Use WPINC constant in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
08/14/2025
|
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
07/19/2022
|
|
#55695
|
error on script_loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
05/07/2022
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
09/01/2025
|
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
05/26/2023
|
|
#61356
|
Add $is_module as an extra strategy argument when enqueueing js script.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
06/03/2024
|
|
#51325
|
Add a filter for script/style tags injected by wp_add_inline_{script|style}
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
|
06/06/2023
|
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
05/22/2019
|
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
08/13/2025
|
|
#59132
|
Create two filters in wp_scripts() and wp_styles().
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
11/27/2023
|
|
#59076
|
Proposal for removing the version numbers of the JS and CSS files when SCRIPT_DEBUG is set to true
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
08/12/2025
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
09/29/2017
|
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
08/12/2025
|
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
11/14/2018
|
|
#26113
|
Create a WordPress-specific, dependable reference to the WP-bundled jQuery object.
|
|
Script Loader
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#36779
|
Move /wp-admin/load-scripts.php and /wp-admin/load-styles.php to /wp-includes
|
|
Script Loader
|
normal
|
normal
|
|
defect (bug)
|
close
|
08/12/2025
|
|
#21520
|
Prevent recursive script dependencies in wp_enqueue_script
|
|
Script Loader
|
normal
|
normal
|
|
defect (bug)
|
|
06/04/2019
|
|
#25666
|
Pass perpetrating $handle to enqueue_script's _doing_it_wrong() call
|
|
Script Loader
|
normal
|
normal
|
|
enhancement
|
|
06/04/2019
|
|
#20558
|
allow wp_localize_script data to be added to existing objects
|
|
Script Loader
|
normal
|
normal
|
|
enhancement
|
dev-feedback
|
06/04/2019
|
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/24/2017
|
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/19/2024
|
|
#63457
|
WordPress 6.8 will fail creating bcrypt when entropy sources are not available
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
05/18/2025
|
|
#31686
|
wp_authenticate_username_password() should check for a WP_Error object
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
08/06/2019
|
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
06/06/2022
|
|
#56141
|
Enhance installer security
|
|
Security
|
high
|
major
|
Future Release
|
enhancement
|
dev-feedback
|
08/30/2025
|
|
#28521
|
FORCE_SSL constant for really forcing SSL
|
adamsilverstein
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
11/19/2024
|
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
Security
|
low
|
minor
|
Awaiting Review
|
enhancement
|
|
02/18/2018
|
|
#62949
|
HttpOnly flag for the post password cookie
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/12/2025
|
|
#36087
|
Migration plan from insecure RNG fallback
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
09/30/2020
|
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/18/2025
|
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/09/2021
|
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
12/24/2024
|
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
11/19/2025
|
|
#32067
|
Remove inline javascript from WP-Core to allow CSP protection
|
|
Security
|
normal
|
normal
|
Future Release
|
feature request
|
close
|
05/04/2026
|
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
close
|
10/10/2024
|
|
#64789
|
Security audit for API key storage on the Connectors screen
|
|
Security
|
normal
|
normal
|
Future Release
|
task (blessed)
|
dev-feedback
|
05/20/2026
|
|
#49877
|
Content enclosed by (content enclosing) shortcode gets stripped from excerpt
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
07/24/2020
|