#61577
|
health check count display bug
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
07/11/2024
|
#52945
|
wp_cache settings not recognized in site health / plugins
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
03/31/2021
|
#62526
|
Add the theme type (block theme or non block theme) to the site health page
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
dev-feedback
|
11/25/2024
|
#62846
|
Allow direct linking to site health check result
|
audrasjb
|
Site Health
|
normal
|
normal
|
1
|
6.9
|
enhancement
|
reporter-feedback
|
02/28/2025
|
#59362
|
Display deprecated function usage in Site Health
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
dev-feedback
|
09/16/2023
|
#57349
|
Page cache is not detected but the server response time is OK
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
03/07/2024
|
#52471
|
Site Health Upload-related INI values could use consistent formatting
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
close
|
02/14/2021
|
#54338
|
Site Health dashboard: "insecure PHP"
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
|
01/24/2024
|
#47781
|
Site Health: mark installed default themes
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
|
11/21/2019
|
#60670
|
[Site Health] Add current mysql version to update recommendation
|
|
Site Health
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
has-patch
|
03/02/2024
|
#56258
|
Add IPv6 availability check in Site Health
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
03/08/2024
|
#60508
|
Add a plugin dependency section to Site Health
|
|
Site Health
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
02/12/2024
|
#53572
|
An "acknowledged" category for site health check for things managed outside of WordPress
|
|
Site Health
|
normal
|
trivial
|
1
|
Awaiting Review
|
feature request
|
|
10/16/2021
|
#60802
|
Enable debug mode / debug options in site health
|
|
Site Health
|
normal
|
minor
|
1
|
Awaiting Review
|
feature request
|
close
|
03/19/2024
|
#50683
|
Parse content for shortcodes instead of using regex
|
johnbillion
|
Shortcodes
|
normal
|
normal
|
6
|
Future Release
|
enhancement
|
has-patch
|
06/17/2024
|
#47863
|
Fix odd, unexpected output from shortcode_parse_attts
|
SergeyBiryukov
|
Shortcodes
|
normal
|
normal
|
5
|
Future Release
|
defect (bug)
|
dev-feedback
|
02/24/2020
|
#24990
|
Nested Shortcode Inside [caption]
|
|
Shortcodes
|
normal
|
normal
|
5
|
|
defect (bug)
|
needs-unit-tests
|
05/08/2021
|
#47616
|
Enhancement: doing_shortcode() function similar to doing_filter()
|
audrasjb*
|
Shortcodes
|
normal
|
normal
|
5
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/09/2021
|
#34814
|
Presence of "Less than sign" < adds additional closing shortcode tag.
|
|
Shortcodes
|
normal
|
normal
|
4
|
|
defect (bug)
|
|
06/04/2019
|
#35022
|
WP allows Unicode 0x00a0 spaces in editor but shortcode parser can't handle them
|
|
Shortcodes
|
normal
|
normal
|
4
|
Future Release
|
defect (bug)
|
has-patch
|
02/06/2017
|
#43456
|
`wp_html_split` <script>
|
|
Shortcodes
|
normal
|
normal
|
4
|
Awaiting Review
|
defect (bug)
|
|
03/02/2018
|
#40958
|
force_balance_tags breaks Ninjaforms and probably other plugins that output html within js.
|
|
Shortcodes
|
normal
|
normal
|
4
|
Awaiting Review
|
defect (bug)
|
|
02/21/2025
|
#37183
|
Nested shortcodes in new-style [caption]
|
|
Shortcodes
|
normal
|
normal
|
3
|
|
defect (bug)
|
dev-feedback
|
05/08/2021
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
has-patch
|
07/10/2020
|
#54289
|
Improve get_shortcode_regex performance
|
|
Shortcodes
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
has-patch
|
10/19/2021
|
#31093
|
Make $tag argument optional for has_shortcode()
|
|
Shortcodes
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
dev-feedback
|
10/31/2017
|
#29661
|
Should Shortcode Attributes Allow HTML Special Characters?
|
|
Shortcodes
|
normal
|
normal
|
3
|
|
enhancement
|
|
06/04/2019
|
#33593
|
Make shortcodes case insensitive
|
|
Shortcodes
|
normal
|
normal
|
3
|
|
feature request
|
dev-feedback
|
06/04/2019
|
#43725
|
Multiple instances of opening / closing shortcode only works when closing tag is provided
|
|
Shortcodes
|
normal
|
normal
|
2
|
Future Release
|
defect (bug)
|
|
07/16/2020
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
06/09/2023
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
05/25/2023
|
#35545
|
Unexpected behavior of wp.shortcode.regexp
|
|
Shortcodes
|
normal
|
normal
|
2
|
|
defect (bug)
|
|
06/04/2019
|
#44571
|
force_balance_tags breaks JavaScript
|
|
Shortcodes
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
09/22/2024
|
#34983
|
shortcodes not working in input fields
|
|
Shortcodes
|
normal
|
normal
|
2
|
|
defect (bug)
|
|
06/04/2019
|
#36958
|
extending has_shortcode to allow searching in custom fields
|
|
Shortcodes
|
normal
|
normal
|
2
|
|
enhancement
|
|
06/04/2019
|
#25644
|
strip_shortcodes always removes text between shortcode tags, should be optional
|
|
Shortcodes
|
normal
|
normal
|
2
|
|
enhancement
|
dev-feedback
|
06/04/2019
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
normal
|
critical
|
1
|
Awaiting Review
|
defect (bug)
|
|
04/02/2024
|
#51377
|
Front End elements break after too many shortcodes
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
09/24/2020
|
#57790
|
Parsing of Shortcode Attributes: bug locating a final attribute
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
03/18/2025
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
has-patch
|
06/27/2018
|
#35591
|
Shortcode Attributes Parsing Issue
|
|
Shortcodes
|
normal
|
normal
|
1
|
|
defect (bug)
|
reporter-feedback
|
06/04/2019
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
normal
|
major
|
1
|
Awaiting Review
|
defect (bug)
|
|
08/24/2024
|
#43457
|
`wp_html_split` valid HTML attributes issues
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
has-patch
|
05/28/2024
|
#33213
|
has_shortcode spec in 4.3
|
|
Shortcodes
|
normal
|
normal
|
1
|
|
defect (bug)
|
|
06/04/2019
|
#60948
|
shortcodes that return with no value / text will break if shortcode is being used as an attribute value
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
08/13/2024
|
#46412
|
Make shortcode attributes case-insensitive? shortcode_parse_atts
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
|
03/04/2019
|
#35179
|
playlist shortcode needs an option to not loop
|
|
Shortcodes
|
normal
|
normal
|
1
|
|
enhancement
|
|
06/04/2019
|
#41086
|
Conditional loading of CSS files from (for example) shortcodes
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
06/16/2017
|
#62752
|
Enhance Audio and Video Shortcodes with Custom Features (Tracklist, Images, Artists, Track Numbers, and Media Handling)
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
dev-feedback
|
01/02/2025
|
#47984
|
Filter pre_do_shortcode
|
|
Shortcodes
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
has-patch
|
09/05/2019
|
#38474
|
wp_signups.activation_key stores activation keys in plain text
|
SergeyBiryukov
|
Security
|
normal
|
normal
|
7
|
Future Release
|
enhancement
|
has-patch
|
04/23/2024
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
6
|
Awaiting Review
|
defect (bug)
|
|
10/30/2023
|
#37757
|
Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/21/2025
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
enhancement
|
|
05/09/2024
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
enhancement
|
|
01/05/2023
|
#55514
|
2FA by default for WordPress
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
feature request
|
|
03/06/2023
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
defect (bug)
|
|
11/19/2024
|
#53973
|
WordPress <= 5.8 - Authenticated Persistent XSS (User role name)
|
|
Security
|
normal
|
normal
|
5
|
Future Release
|
defect (bug)
|
has-patch
|
03/12/2025
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
06/06/2022
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
12/24/2024
|
#20140
|
Ask old password to change user password
|
|
Security
|
normal
|
major
|
5
|
Future Release
|
feature request
|
dev-feedback
|
07/28/2024
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
Security
|
normal
|
normal
|
4
|
Awaiting Review
|
feature request
|
close
|
10/10/2024
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/22/2019
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
Security
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
06/26/2023
|
#44058
|
Include security sniffs in PHPCS ruleset
|
|
Security
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
|
05/16/2018
|
#29429
|
Support frame-ancestors directive over X-Frame-Options
|
|
Security
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
dev-feedback
|
07/29/2019
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
Security
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/09/2021
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
has-patch
|
08/04/2021
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
08/24/2021
|
#62949
|
HttpOnly flag for the post password cookie
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/12/2025
|
#36087
|
Migration plan from insecure RNG fallback
|
|
Security
|
normal
|
normal
|
2
|
Future Release
|
enhancement
|
|
09/30/2020
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/18/2025
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
feature request
|
|
07/03/2024
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
07/24/2017
|
#62134
|
Security Issue in WordPress Core
|
|
Security
|
normal
|
normal
|
1
|
|
defect (bug)
|
|
10/14/2024
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
Security
|
low
|
minor
|
1
|
Awaiting Review
|
enhancement
|
|
02/18/2018
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
Security
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
|
02/09/2024
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
Security
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
02/21/2025
|
#51124
|
Can we get an additional parameter in wp_add_inline_script to set the script type?
|
audrasjb*
|
Script Loader
|
normal
|
normal
|
10
|
Future Release
|
feature request
|
needs-unit-tests
|
11/08/2021
|
#55184
|
Custom style handle attached to a custom block style is never load even if the block is in the page.
|
|
Script Loader
|
normal
|
normal
|
9
|
Awaiting Review
|
defect (bug)
|
has-patch
|
01/22/2025
|
#20558
|
allow wp_localize_script data to be added to existing objects
|
|
Script Loader
|
normal
|
normal
|
9
|
|
enhancement
|
dev-feedback
|
06/04/2019
|
#21520
|
Prevent recursive script dependencies in wp_enqueue_script
|
|
Script Loader
|
normal
|
normal
|
7
|
|
defect (bug)
|
|
06/04/2019
|
#47285
|
Better Management of External Asset Dependencies
|
|
Script Loader
|
normal
|
major
|
7
|
Awaiting Review
|
feature request
|
|
07/24/2024
|
#60597
|
Script Modules API: Allow list of enqueued module data to be exposed
|
|
Script Loader
|
normal
|
normal
|
6
|
Future Release
|
enhancement
|
has-patch
|
02/25/2025
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
Script Loader
|
normal
|
normal
|
5
|
Future Release
|
defect (bug)
|
has-patch
|
11/13/2024
|
#61734
|
Add the ability to handle "fetchpriority" to ES Modules and Import Maps
|
|
Script Loader
|
normal
|
minor
|
5
|
Future Release
|
enhancement
|
dev-feedback
|
10/03/2024
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
11/14/2018
|
#17916
|
Enqueued styles are only printed on login_footer in wp-login.php
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
defect (bug)
|
dev-feedback
|
08/10/2018
|
#62435
|
Preload script modules and enqueue script modules in wrong order
|
|
Script Loader
|
normal
|
normal
|
4
|
Awaiting Review
|
defect (bug)
|
close
|
12/02/2024
|
#51200
|
Consider a better way to deprecate JavaScript code
|
|
Script Loader
|
normal
|
normal
|
4
|
Awaiting Review
|
enhancement
|
|
08/31/2020
|
#58302
|
Deprecate and disable the unused compression_test() and wp_ajax_wp_compression_test()
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
enhancement
|
has-patch
|
01/29/2024
|
#61500
|
Script Modules: Allow scripts to depend on modules
|
|
Script Loader
|
normal
|
normal
|
4
|
Awaiting Review
|
enhancement
|
has-patch
|
12/19/2024
|
#26113
|
Create a WordPress-specific, dependable reference to the WP-bundled jQuery object.
|
|
Script Loader
|
normal
|
normal
|
3
|
|
defect (bug)
|
|
06/04/2019
|
#46089
|
Memory exhaustion when setting script translations on `wp-i18n`
|
|
Script Loader
|
normal
|
normal
|
3
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
02/04/2021
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
|
10/20/2019
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
|
06/15/2024
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
07/19/2022
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
05/22/2019
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
03/26/2019
|
#60234
|
Script Modules API: Add a translations API
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
02/27/2024
|