|
#56256
|
The 'capability' parameter in the get_users function may not give the expected results.
|
|
Role/Capability
|
normal
|
normal
|
1
|
Future Release
|
defect (bug)
|
has-patch
|
07/26/2022
|
|
#49345
|
User with admin privileges cannot edit some pages/posts
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
02/02/2020
|
|
#49287
|
Users with no page deletion capabilities can delete homepage in multisite
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
01/24/2020
|
|
#37917
|
Users without the edit_private_posts capability can still create private posts
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
close
|
10/16/2025
|
|
#45879
|
WP_User::set_role() does not remove previous roles
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
01/09/2019
|
|
#36056
|
When saving a post for an other author, the current_user_can() check is not passing the post ID with the edit_others_posts capability
|
|
Role/Capability
|
normal
|
normal
|
1
|
|
defect (bug)
|
|
06/04/2019
|
|
#63216
|
simplify get_role() method in WP_Roles class
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
has-patch
|
04/05/2025
|
|
#40950
|
wp_terms_checklist() does not pass $post_id to current_user_can()
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/05/2021
|
|
#44017
|
Add filter to display edit post link without 'edit_post' capability
|
|
Role/Capability
|
normal
|
major
|
1
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
09/27/2025
|
|
#44468
|
Introduce infrastructure for testing primitive capabilities granted via `user_has_cap`
|
|
Role/Capability
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
has-patch
|
09/20/2019
|
|
#42405
|
Introduce singular capabilities for enabling individual themes on Multisite
|
|
Role/Capability
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/01/2017
|
|
#43210
|
Introduce singular capabilities for managing individual options
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
dev-feedback
|
04/19/2018
|
|
#42404
|
Introduce singular capabilities for managing individual plugins
|
|
Role/Capability
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
needs-unit-tests
|
05/25/2025
|
|
#32085
|
Less ambiguous dashboard access. Suggested new capability: access_dashboard
|
|
Role/Capability
|
normal
|
normal
|
1
|
|
enhancement
|
|
11/23/2023
|
|
#55106
|
Split publish_posts in publish_posts and publish_others_posts
|
|
Role/Capability
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
02/08/2022
|
|
#54018
|
Allow scripts registered via block.json to be enqueued in the footer
|
|
Script Loader
|
normal
|
normal
|
10
|
Future Release
|
enhancement
|
has-patch
|
10/16/2025
|
|
#55184
|
Custom style handle attached to a custom block style is never load even if the block is in the page.
|
|
Script Loader
|
normal
|
normal
|
9
|
Awaiting Review
|
defect (bug)
|
has-patch
|
01/22/2025
|
|
#20558
|
allow wp_localize_script data to be added to existing objects
|
|
Script Loader
|
normal
|
normal
|
9
|
|
enhancement
|
dev-feedback
|
06/04/2019
|
|
#21520
|
Prevent recursive script dependencies in wp_enqueue_script
|
|
Script Loader
|
normal
|
normal
|
7
|
|
defect (bug)
|
|
06/04/2019
|
|
#47285
|
Better Management of External Asset Dependencies
|
|
Script Loader
|
normal
|
major
|
7
|
Awaiting Review
|
feature request
|
|
07/24/2024
|
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
Script Loader
|
normal
|
normal
|
6
|
Future Release
|
defect (bug)
|
has-patch
|
11/13/2024
|
|
#60597
|
Script Modules API: Allow list of enqueued module data to be exposed
|
westonruter
|
Script Loader
|
normal
|
normal
|
6
|
Future Release
|
enhancement
|
has-patch
|
10/27/2025
|
|
#61500
|
Script Modules: Allow scripts to depend on modules
|
|
Script Loader
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
has-patch
|
10/01/2025
|
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
11/14/2018
|
|
#63017
|
Compression via PHP documented and in URL but not used anymore
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
defect (bug)
|
has-patch
|
10/31/2025
|
|
#17916
|
Enqueued styles are only printed on login_footer in wp-login.php
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
defect (bug)
|
dev-feedback
|
08/10/2018
|
|
#51200
|
Consider a better way to deprecate JavaScript code
|
|
Script Loader
|
normal
|
normal
|
4
|
Awaiting Review
|
enhancement
|
|
08/31/2020
|
|
#58302
|
Deprecate and disable the unused compression_test() and wp_ajax_wp_compression_test()
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
enhancement
|
has-patch
|
10/19/2025
|
|
#55639
|
Implement Async CSS
|
|
Script Loader
|
normal
|
normal
|
4
|
Awaiting Review
|
enhancement
|
|
06/10/2025
|
|
#58873
|
Add function to pass variables to scripts
|
|
Script Loader
|
normal
|
normal
|
4
|
Future Release
|
feature request
|
|
10/04/2025
|
|
#26113
|
Create a WordPress-specific, dependable reference to the WP-bundled jQuery object.
|
|
Script Loader
|
normal
|
normal
|
3
|
|
defect (bug)
|
|
06/04/2019
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
normal
|
trivial
|
3
|
Awaiting Review
|
defect (bug)
|
|
08/14/2025
|
|
#46089
|
Memory exhaustion when setting script translations on `wp-i18n`
|
|
Script Loader
|
normal
|
normal
|
3
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
02/04/2021
|
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
|
10/20/2019
|
|
#64015
|
Reconsider removal of import map polyfill
|
|
Script Loader
|
normal
|
normal
|
3
|
7.0
|
defect (bug)
|
|
11/11/2025
|
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
|
06/15/2024
|
|
#61625
|
Styles enqueued from block.json are not correctly configured for RTL
|
westonruter*
|
Script Loader
|
normal
|
normal
|
3
|
7.0
|
defect (bug)
|
|
11/12/2025
|
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
07/19/2022
|
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
05/22/2019
|
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
close
|
08/13/2025
|
|
#63887
|
Add sourceURL to inline scripts and styles
|
jonsurrell
|
Script Loader
|
normal
|
normal
|
3
|
6.9
|
enhancement
|
has-patch
|
11/17/2025
|
|
#60234
|
Script Modules API: Add a translations API
|
|
Script Loader
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
05/06/2025
|
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
10/25/2023
|
|
#59972
|
Clarify description of wp_script_add_data()
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
has-patch
|
10/10/2024
|
|
#64087
|
Deprecated urlencode() passing null warning during load-styles.php because get_stylesheet_directory() returns empty
|
|
Script Loader
|
normal
|
minor
|
2
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
10/08/2025
|
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
08/30/2023
|
|
#13078
|
Make wp_register_style and wp_enqueue_style consistent
|
|
Script Loader
|
normal
|
normal
|
2
|
|
defect (bug)
|
has-patch
|
06/04/2019
|
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
06/10/2025
|
|
#39991
|
jQuery UI Datepicker Localization Error with PHP date 'S'
|
|
Script Loader
|
normal
|
normal
|
2
|
Future Release
|
defect (bug)
|
has-patch
|
10/25/2018
|
|
#63805
|
Extend the existing conditional loading optimization for block-specific global styles from core blocks to include third-party blocks, improving performance by only loading styles for blocks actually present on the page.
|
|
Script Loader
|
normal
|
normal
|
2
|
Future Release
|
enhancement
|
has-patch
|
10/14/2025
|
|
#51317
|
Remove deprecated JavaScript i18n globals
|
|
Script Loader
|
normal
|
normal
|
2
|
Future Release
|
enhancement
|
early
|
05/25/2021
|
|
#61771
|
Script Modules: add the importmap's scopes key
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
close
|
09/04/2025
|
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
|
01/16/2019
|
|
#40485
|
Add function for retrieving metadata from registered script
|
|
Script Loader
|
normal
|
normal
|
2
|
Awaiting Review
|
feature request
|
dev-feedback
|
08/21/2025
|
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
12/14/2021
|
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
05/02/2018
|
|
#63179
|
Dependencies should load in the footer if the script is loaded in the footer
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
03/27/2025
|
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
01/30/2022
|
|
#36779
|
Move /wp-admin/load-scripts.php and /wp-admin/load-styles.php to /wp-includes
|
|
Script Loader
|
normal
|
normal
|
1
|
|
defect (bug)
|
close
|
08/12/2025
|
|
#52879
|
The SCRIPT_DEBUG constant is ignored when concatenating scripts
|
|
Script Loader
|
normal
|
minor
|
1
|
Future Release
|
defect (bug)
|
|
04/27/2022
|
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/03/2025
|
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
10/21/2024
|
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
02/18/2022
|
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
normal
|
major
|
1
|
Awaiting Review
|
defect (bug)
|
|
05/26/2023
|
|
#63693
|
wp_should_load_block_assets_on_demand doing it wrong too early
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
08/21/2025
|
|
#64229
|
Enqueueing scripts and script modules should warn when dependencies are missing
|
|
Script Loader
|
normal
|
normal
|
1
|
7.0
|
enhancement
|
|
11/11/2025
|
|
#40602
|
Implement immutable cache headers
|
pbearne
|
Script Loader
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
has-patch
|
02/12/2025
|
|
#63793
|
Parser-blocking scripts should render last in all cases to speed up page load
|
|
Script Loader
|
normal
|
normal
|
1
|
Future Release
|
enhancement
|
has-patch
|
08/18/2025
|
|
#62709
|
Script modules integration with wp_resource_hints
|
|
Script Loader
|
normal
|
minor
|
1
|
Awaiting Review
|
enhancement
|
|
12/19/2024
|
|
#36791
|
Set load order when enqueuing scripts and styles
|
|
Script Loader
|
normal
|
normal
|
1
|
|
enhancement
|
has-patch
|
06/04/2019
|
|
#43781
|
adding apply_filters on $handle in localize
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
|
04/16/2018
|
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
enhancement
|
dev-feedback
|
08/12/2025
|
|
#56993
|
I want to put a filter in the wp_enqueue_block_support_styles function.
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
10/25/2023
|
|
#55618
|
combine/concatenate enqueued relative js/css
|
|
Script Loader
|
normal
|
normal
|
1
|
Awaiting Review
|
feature request
|
|
04/25/2022
|
|
#38474
|
wp_signups.activation_key stores activation keys in plain text
|
SergeyBiryukov
|
Security
|
normal
|
normal
|
10
|
Future Release
|
enhancement
|
dev-feedback
|
06/20/2025
|
|
#37757
|
Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+
|
|
Security
|
normal
|
normal
|
8
|
Awaiting Review
|
enhancement
|
dev-feedback
|
04/24/2025
|
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
7
|
Awaiting Review
|
defect (bug)
|
|
08/19/2025
|
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
Security
|
normal
|
normal
|
7
|
Awaiting Review
|
enhancement
|
|
11/04/2025
|
|
#63727
|
A new function to sanitize an array
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
enhancement
|
dev-feedback
|
07/28/2025
|
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
enhancement
|
|
01/05/2023
|
|
#55514
|
2FA by default for WordPress
|
|
Security
|
normal
|
normal
|
6
|
Awaiting Review
|
feature request
|
|
03/06/2023
|
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
defect (bug)
|
|
11/19/2024
|
|
#53973
|
WordPress <= 5.8 - Authenticated Persistent XSS (User role name)
|
|
Security
|
normal
|
normal
|
5
|
Future Release
|
defect (bug)
|
has-patch
|
03/12/2025
|
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
06/06/2022
|
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
5
|
Awaiting Review
|
enhancement
|
|
12/24/2024
|
|
#20140
|
Ask old password to change user password
|
|
Security
|
normal
|
major
|
5
|
Future Release
|
feature request
|
dev-feedback
|
07/28/2024
|
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
Security
|
normal
|
normal
|
4
|
Awaiting Review
|
feature request
|
close
|
10/10/2024
|
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
3
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/22/2019
|
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
Security
|
normal
|
normal
|
3
|
Awaiting Review
|
enhancement
|
|
06/26/2023
|
|
#44058
|
Include security sniffs in PHPCS ruleset
|
|
Security
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
|
05/16/2018
|
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
Security
|
normal
|
normal
|
3
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/09/2021
|
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
has-patch
|
08/04/2021
|
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
08/24/2021
|
|
#63259
|
Replace zxcvbn with zxcvbn-ts
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
defect (bug)
|
|
04/11/2025
|
|
#62949
|
HttpOnly flag for the post password cookie
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/12/2025
|
|
#36087
|
Migration plan from insecure RNG fallback
|
|
Security
|
normal
|
normal
|
2
|
Future Release
|
enhancement
|
|
09/30/2020
|
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/18/2025
|
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
Security
|
normal
|
normal
|
2
|
Awaiting Review
|
feature request
|
|
07/03/2024
|
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
07/24/2017
|
|
#63940
|
Prevent POST flood cache bypass attacks
|
|
Security
|
normal
|
normal
|
1
|
Awaiting Review
|
defect (bug)
|
|
09/06/2025
|