WordPress.org
Get WordPress

Make WordPress Core

{1} All Tickets (8316 matches)

​Create a new ticket
  • All active tickets
  • Sort by component, type, summary
  • Accepted tickets have an '*' appended to their owner's name

Results (6701 - 6800 of 8316)

← 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 →

Script Loader (4 matches)

Ticket Summary Owner Workflow Priority Severity Milestone Type Modified Comments
#47285 Better Management of External Asset Dependencies normal major Awaiting Review feature request 2 years ago 6
#56993 I want to put a filter in the wp_enqueue_block_support_styles function. normal normal Awaiting Review feature request 3 years ago 1
#58873 Script Loader: Add a filter to pass data from PHP to classic scripts jonsurrell* has-patch normal normal 7.2 feature request 3 weeks ago 14
#55618 combine/concatenate enqueued relative js/css normal normal Awaiting Review feature request 4 years ago

Security (57 matches)

#65054 $_GET['pagenow'] and $_GET['widget'] unsanitized in dashboard AJAX handler rajeshcp has-patch normal normal Awaiting Review defect (bug) 2 months ago 15
#52333 Lack of the : entity on the list of allowed entity names in kses.php has-patch normal minor Awaiting Review defect (bug) 6 years ago
#41391 Links to media in password protected pages normal normal Awaiting Review defect (bug) 9 years ago 1
#65052 Nonce check order flaw in post-quickdraft-save rajeshcp has-patch normal normal Awaiting Review defect (bug) 4 months ago 7
#37264 Please do not chmod 666 the wp-config.php file on installation. has-patch normal normal Awaiting Review defect (bug) 7 years ago 9
#53869 Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label has-patch normal normal Awaiting Review defect (bug) 5 years ago 3
#63940 Prevent POST flood cache bypass attacks normal normal Awaiting Review defect (bug) 12 months ago
#53994 REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request normal normal Awaiting Review defect (bug) 5 years ago
#63259 Replace zxcvbn with zxcvbn-ts normal normal Awaiting Review defect (bug) 17 months ago 4
#62134 Security Issue in WordPress Core normal normal defect (bug) 2 years ago 5
#56860 Sodium Compat library is improperly loaded normal normal Awaiting Review defect (bug) 22 months ago
#60864 URL sanitizing strips valid characters instead of encoding, documented use is invalid has-patch normal normal Awaiting Review defect (bug) 8 months ago 5
#66054 Unauthenticated XML-RPC pingback timing oracle discloses non-public post titles and privacy-request email addresses normal normal defect (bug) 8 days ago
#65574 Unsafe usage of href attribute in wp-admin/js/common.js has-patch normal normal Awaiting Review defect (bug) 2 months ago 1
#65573 Unsafe usage of href attribute in wp-admin/js/link.js has-patch normal normal Awaiting Review defect (bug) 5 weeks ago 2
#65572 Unsafe usage of href attribute in wp-admin/js/post.js has-patch normal normal Awaiting Review defect (bug) 8 weeks ago 1
#63457 WordPress 6.8 will fail creating bcrypt when entropy sources are not available reporter-feedback normal normal Awaiting Review defect (bug) 16 months ago 2
#53973 WordPress <= 5.8 - Authenticated Persistent XSS (User role name) has-patch normal normal Future Release defect (bug) 18 months ago 13
#62693 check if chmod is available to prevent Fatal Errors normal normal Awaiting Review defect (bug) 21 months ago 2
#58679 meta key field in usermeta table should NOT use accent insensitive collations normal major Awaiting Review defect (bug) 13 months ago 1
#56391 safecss_filter_attr(): support rgba background-color has-patch normal normal defect (bug) 7 months ago 13
#57447 wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled normal normal Awaiting Review defect (bug) 4 years ago
#31686 wp_authenticate_username_password() should check for a WP_Error object reporter-feedback normal normal Awaiting Review defect (bug) 7 years ago 6
#56521 wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by / has-patch normal major Awaiting Review defect (bug) 4 years ago 1
#62384 .htaccess lacks normal normal Awaiting Review enhancement 21 months ago 1
#63727 A new function to sanitize an array dev-feedback normal normal Awaiting Review enhancement 14 months ago 11
#37757 Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+ dev-feedback normal normal Awaiting Review enhancement 17 months ago 14
#23165 Admin validation errors on form nonce element IDs (_wpnonce) has-patch normal normal Awaiting Review enhancement 6 years ago 17
#58636 Automatic Sanitization of Nonces in wp_verify_nonce normal normal Awaiting Review enhancement 3 years ago
#40237 Educate users about modern password best-practices normal normal Awaiting Review enhancement 4 years ago 9
#56141 Enhance installer security dev-feedback high major Future Release enhancement 3 months ago 17
#51611 Escape echoing Core functions normal normal Awaiting Review enhancement 6 years ago 1
#64481 Explore Sec-Fetch Headers as a Core-Supported CSRF Mitigation Mechanism normal normal Awaiting Review enhancement 8 months ago 1
#28521 FORCE_SSL constant for really forcing SSL adamsilverstein has-patch normal normal Future Release enhancement 5 weeks ago 28
#43320 Harden API requests against man-in-the-middle attacks low minor Awaiting Review enhancement 9 years ago 2
#62949 HttpOnly flag for the post password cookie dev-feedback normal normal Awaiting Review enhancement 19 months ago
#44058 Include security sniffs in PHPCS ruleset normal normal Future Release enhancement 8 years ago 3
#51159 Let's expand our context specific escaping methods for wp_json_encode(). normal normal Awaiting Review enhancement 8 months ago 7
#36087 Migration plan from insecure RNG fallback normal normal Future Release enhancement 6 years ago 3
#51407 Remove inline event handlers and JavaScript URIs for Strict CSP-compatibility adamsilverstein dev-feedback normal normal Future Release enhancement 2 months ago 16
#57424 Specific hook for Content Security Policy normal normal Awaiting Review enhancement 4 years ago
#61706 Support for storing and getting encrypted options dev-feedback normal normal Awaiting Review enhancement 19 months ago 1
#37000 Support for the SameSite cookie attribute johnbillion* has-patch normal normal 7.2 enhancement 13 days ago 55
#51438 Use CSP directive upgrade-insecure-requests when using HTTPS needs-unit-tests normal normal Future Release enhancement 5 years ago 4
#60470 Use `filter_input` instead of superglobals where possible normal normal Awaiting Review enhancement 3 years ago 3
#63329 Use check_ajax_referer() instead of check_admin_referer() for AJAX requests in media form handling. has-patch normal normal Awaiting Review enhancement 17 months ago 1
#65448 Use the new Uri\Rfc3986\Uri::parse in wp_parse_url() if PHP 8.5 is available has-patch normal normal Awaiting Review enhancement 2 weeks ago 17
#36177 default htaccess should include security measures normal normal Awaiting Review enhancement 21 months ago 23
#38474 wp_signups.activation_key stores activation keys in plain text SergeyBiryukov dev-feedback normal normal Future Release enhancement 3 months ago 30
#55514 2FA by default for WordPress normal normal Awaiting Review feature request 4 years ago 3
#43215 Allow wp_kses to pass allowed CSS properties normal normal Awaiting Review feature request 10 months ago 4
#20140 Ask old password to change user password dev-feedback normal major Future Release feature request 8 weeks ago 23
#53902 Automating the creation of inline javascript and inline stylesheet nonces or hashes normal normal Awaiting Review feature request 2 years ago 4
#30465 Dashboard alert if a plugin/theme was removed from WordPress repo dev-feedback normal normal Future Release feature request 7 months ago 67
#32067 Remove inline javascript from WP-Core to allow CSP protection close normal normal Future Release feature request 4 months ago 22
#62202 allow plugin versions to be flagged as security updates close normal normal Awaiting Review feature request 2 years ago 5
#64789 Security audit for API key storage on the Connectors screen dev-feedback normal normal Future Release task (blessed) 5 weeks ago 19

Shortcodes (39 matches)

#58174 A shortcode block that evaluates to nothing, renders as a space in the HTML normal normal Awaiting Review defect (bug) 3 years ago 3
#60887 After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates normal critical Awaiting Review defect (bug) 2 years ago
#58469 Changeset 55832 broke shortcodes saved in block attributes and rendered serverside normal normal Awaiting Review defect (bug) 3 years ago 1
#33134 Complex Nested Shortcodes Inside of Attributes Are Not Processed Left-to-Right normal normal defect (bug) 7 years ago 7
#49877 Content enclosed by (content enclosing) shortcode gets stripped from excerpt dev-feedback normal normal Awaiting Review defect (bug) 6 years ago 5
#47863 Fix odd, unexpected output from shortcode_parse_attts SergeyBiryukov dev-feedback normal normal Future Release defect (bug) 14 months ago 33
#51377 Front End elements break after too many shortcodes reporter-feedback normal normal Awaiting Review defect (bug) 6 years ago 2
#43725 Multiple instances of opening / closing shortcode only works when closing tag is provided normal normal Future Release defect (bug) 6 years ago 1
#37183 Nested shortcodes in new-style [caption] dev-feedback normal normal defect (bug) 5 years ago 3
#57790 Parsing of Shortcode Attributes: bug locating a final attribute dev-feedback normal normal Awaiting Review defect (bug) 18 months ago 2
#34814 Presence of "Less than sign" < adds additional closing shortcode tag. normal normal defect (bug) 7 years ago 1
#35216 Return empty string from wp.shortcode.replace() callback is ignored has-patch normal normal Awaiting Review defect (bug) 8 years ago 6
#37238 Right-aligned captions with embedded iframes get removed in Visual mode normal normal defect (bug) 7 years ago 1
#35591 Shortcode Attributes Parsing Issue reporter-feedback normal normal defect (bug) 7 years ago 13
#58366 Shortcode Support Regained but Content Filters are messing with Shortcode HTML needs-unit-tests normal normal Future Release defect (bug) 16 months ago 95
#61007 Shortcode aren't paste inline in paragraphs normal major Awaiting Review defect (bug) 2 years ago 7
#59509 Shortcode attributes named 0 are ignored needs-unit-tests normal normal Awaiting Review defect (bug) 23 months ago 4
#49955 Shortcode escaping not correctly handled when followed by enclosing shortcodes normal normal Awaiting Review defect (bug) 6 years ago 2
#58386 Shortcode generated by a block element is not executed in templates normal normal Awaiting Review defect (bug) 3 years ago 4
#38713 Shortcodes and utf-8 no-break whitespace (\xc2\xa0) normal normal Awaiting Review defect (bug) 7 years ago 1
#43686 Shortcodes containing asterisks may create invalid regex breaking the editor dev-feedback normal normal Future Release defect (bug) 8 years ago 3
#55406 Shortcodes don't work inside srcset attribute normal normal Awaiting Review defect (bug) 4 years ago
#58397 Shortcodes in patterns are not rendered in templates has-patch normal normal Awaiting Review defect (bug) 3 weeks ago 1
#52567 Shortcodes in separate <p> tags appear on same line in browser normal normal Awaiting Review defect (bug) 3 years ago 1
#35545 Unexpected behavior of wp.shortcode.regexp normal normal defect (bug) 7 years ago
#45377 Video Shortcode Ajax Issue normal minor Future Release defect (bug) 8 years ago 5
#42718 Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+ has-patch normal normal Awaiting Review defect (bug) 6 years ago 8
#35022 WP allows Unicode 0x00a0 spaces in editor but shortcode parser can't handle them has-patch normal normal Future Release defect (bug) 10 years ago 21
#25820 [embed] shortcode can't be escaped like others normal minor defect (bug) 7 years ago 9
#43456 `wp_html_split` <script> normal normal Awaiting Review defect (bug) 9 years ago
#43457 `wp_html_split` valid HTML attributes issues has-patch normal normal Awaiting Review defect (bug) 2 years ago 5
#26649 escaped shortcodes should not be expanded during 'get_the_excerpt' dev-feedback normal normal Future Release defect (bug) 8 weeks ago 41
#44571 force_balance_tags breaks JavaScript normal normal Awaiting Review defect (bug) 2 years ago 2
#40958 force_balance_tags breaks Ninjaforms and probably other plugins that output html within js. normal normal Awaiting Review defect (bug) 19 months ago 6
#33213 has_shortcode spec in 4.3 normal normal defect (bug) 7 years ago 3
#34983 shortcodes not working in input fields normal normal defect (bug) 7 years ago 3
#57267 wp_enqueue_style is not working under shortcode reporter-feedback normal normal Awaiting Review defect (bug) 4 years ago 1
#6984 wpautop() formats the the contents of shortcodes normal normal Future Release defect (bug) 7 years ago 18
#47616 Enhancement: doing_shortcode() function similar to doing_filter() audrasjb* needs-unit-tests normal normal Future Release enhancement 5 years ago 17
← 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 →
Note: See TracReports for help on using and creating reports.