|
#25060
|
Quick Edit Comments inline edit save breaks the alternating table row backgrounds
|
helen
|
Quick/Bulk Edit
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#60329
|
Quick Edit tags-input drop-down selection box hangs exactly over the Published/Draft/Queud selection-box
|
|
Quick/Bulk Edit
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#38507
|
Quick Edit: Parent label without input when editing page
|
|
Quick/Bulk Edit
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
13 months ago
|
|
#15981
|
Quick edit (and other actions) need to cancel AJAX actions
|
garyc40
|
Quick/Bulk Edit
|
low
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
4 months ago
|
|
#62229
|
post_status dropdown in Quick Edit incorrect if the admin user's timezone is "behind" the site's timezone
|
|
Quick/Bulk Edit
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
11 months ago
|
|
#64045
|
/wp-json/wp/v2/menus incorrectly emits 403 for invalid `post` param
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
11 months ago
|
|
#62742
|
Add Missing REST API Filters to WP_REST_Global_Styles_Revisions_Controller
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
9 months ago
|
|
#60055
|
Array to string conversion warning after r50157
|
|
REST API
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#52925
|
Autosaves controller: Post checks will never catch invalid IDs
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#63982
|
Comment REST API route: add support multiple statuses
|
adamsilverstein
|
REST API
|
normal
|
normal
|
7.2
|
defect (bug)
|
has-patch
|
2 weeks ago
|
|
#65045
|
Duplicate 'Comment' entry in trashableTypes array in wp/api.js
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#64168
|
Inaccurate JSON schema for template-parts endpoint
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#61061
|
PHP Warning with invalid JSON input
|
|
REST API
|
low
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
6 months ago
|
|
#62671
|
REST API Plugins Endpoint: Plugins are activated before language packages are installed
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 months ago
|
|
#61843
|
REST API endpoint /wp-json/wp/v2/categories returns 500 instead of 400
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#63967
|
REST API test methods using supported image format to test unsupported logic checks
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
10 months ago
|
|
#41032
|
REST API: Date fields do not support ISO8601
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
6 months ago
|
|
#56494
|
REST API: Fix and test rest_default_additional_properties_to_false
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#64926
|
REST API: GET requests fail object/array schema validation when params are JSON-serialized strings
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 months ago
|
|
#60618
|
REST API: Meta update fails if unrelated unchanged field is a multi-item array
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
15 months ago
|
|
#65240
|
REST API: WP_REST_Plugins_Controller::create_item() fatals when plugins_api response lacks language_packs property
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#65810
|
REST API: attachments created from a `url` skip the shared insert path in `create_item()`
|
adamsilverstein
|
REST API
|
normal
|
normal
|
7.1
|
defect (bug)
|
has-patch
|
4 days ago
|
|
#48257
|
REST API: post-process endpoint cannot be discovered from media creation endpoint
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#65694
|
REST autosave controller silently ignores post_title updates matching the published post's title, leaving stale title in the autosave revision
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 weeks ago
|
|
#65761
|
REST comments: wrong error when a status is sent with no post
|
|
REST API
|
normal
|
minor
|
7.2
|
defect (bug)
|
has-patch
|
10 days ago
|
|
#47443
|
REST-API prevents users with edit_published_posts capability updating published posts
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#60349
|
Rest API media upload utf8 urlencoded filename not decoded on server
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#65754
|
Revisionable, Multivalue Post Meta are not saved properly via REST autosave
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
9 days ago
|
|
#52640
|
The rest_prepare_attachment filter runs twice during REST request
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
5 years ago
|
|
#61842
|
Uncaught TypeError in /wp-json/wp/v2/menu-items REST API POST operation
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
20 months ago
|
|
#61838
|
Uncaught TypeError in multiple REST API endpoints from a single bug
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#64670
|
WP_REST_Posts_Controller::update_item() not passing parent to wp_unique_post_slug() for draft child
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
#43502
|
`WP_REST_Posts_Controller::prepare_item_for_response()` doesn't reset postdata after calling setup_postdata()
|
|
REST API
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
9 days ago
|
|
#62903
|
permission_callback should be called before validate_callback in REST API
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
18 months ago
|
|
#64032
|
wp_die() status code Rest API component updates (parent ticket: #64009)
|
|
REST API
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
9 months ago
|
|
#27244
|
'Restore This Autosave' immediately updates a published post
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 months ago
|
|
#29920
|
Autosave breaks if post revision fields contains a value that isn't a string
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#61447
|
Clarify revisions UI to better indicate what version you are viewing and restoring.
|
joedolson*
|
Revisions
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 weeks ago
|
|
#27938
|
Restore This Autosave does not work for custom post types that don't support 'revisions'
|
chriscct7
|
Revisions
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#58844
|
Revisions: Compare Revisions layout issues on mobile
|
|
Revisions
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#53417
|
The revisions endpoints provide an incorrect JSON schema
|
|
Revisions
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 months ago
|
|
#30854
|
`wp_insert_post` doesn't save revision for new published post
|
adamsilverstein
|
Revisions
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 weeks ago
|
|
#43676
|
.htaccess rules don't work with Plain
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
|
#47686
|
Always flush rewrite rules when active plugins changes & on plugin upgrades
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 weeks ago
|
|
#39442
|
Custom rewrite endpoints and wp_old_slug_redirect
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 months ago
|
|
#25194
|
Filtered IIS rewrite rules not added to web.config
|
|
Rewrite Rules
|
normal
|
normal
|
|
defect (bug)
|
has-patch
|
6 months ago
|
|
#24963
|
IIS Multisite, Suspected bug in web.config code for URL Rewrite (404 wp-login)
|
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
9 years ago
|
|
#57858
|
If permalink structure is set to /%category%/%postname% , WordPress will match a /0/ path as a category archive
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
12 days ago
|
|
#63353
|
Invalid type false for permalink_structure property
|
|
Rewrite Rules
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
has-patch
|
16 months ago
|
|
#17047
|
Not following spec for REQUEST_URI
|
sterlo
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
6 years ago
|
|
#51662
|
Pagination adds extra trailing slash at the end of some URLs
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
14 months ago
|
|
#26829
|
Use of strpos() in extract_from_markers() and insert_with_markers() can target wrong BEGIN and END markers.
|
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#56381
|
WordPress creates invalid web.config -file
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 years ago
|
|
#43571
|
`add_feed` with regex characters breaks rewrite rules
|
SergeyBiryukov
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
#36486
|
is_apache in vars.php does not always work
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#60713
|
remove 'array_merge(...)' is used in a loop and is a resources greedy construction. from generate_rewrite_rules
|
pbearne
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#58516
|
url_to_postid does not return post id for static Posts page
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 years ago
|
|
#13972
|
Add new category link - capability check needed
|
|
Role/Capability
|
normal
|
minor
|
Future Release
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#56256
|
The 'capability' parameter in the get_users function may not give the expected results.
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
4 years ago
|
|
#37917
|
Users without the edit_private_posts capability can still create private posts
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
10 months ago
|
|
#38997
|
delete_private_posts capability doesn't prevent user from deleting private posts
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
17 months ago
|
|
#62600
|
fatal error on capabilities.
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
2 days ago
|
|
#47338
|
is_super_admin() should check a different capability
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
12 days ago
|
|
#26365
|
map_meta_cap() should use parent post status when post has a post status of inherit
|
|
Role/Capability
|
normal
|
normal
|
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
#40197
|
meta cap 'publish_post' is not being used
|
johnbillion
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
22 months ago
|
|
#40950
|
wp_terms_checklist() does not pass $post_id to current_user_can()
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
21 months ago
|
|
#65272
|
Blocks' opinionated styles are not loading on demand in classic themes
|
westonruter*
|
Script Loader
|
normal
|
normal
|
7.2
|
defect (bug)
|
has-patch
|
5 days ago
|
|
#59972
|
Clarify description of wp_script_add_data()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
22 months ago
|
|
#65750
|
Compression test sends unauthorized AJAX requests for users without manage_options
|
|
Script Loader
|
normal
|
minor
|
Future Release
|
defect (bug)
|
has-patch
|
11 days ago
|
|
#63017
|
Compression via PHP documented and in URL but not used anymore
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 weeks ago
|
|
#61828
|
Global Styles: Refactor wp_add_inline_style() to use HTML API
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#45008
|
Inconsistent use of 'script_loader_src' and 'style_loader_src' filters when performing concatenation
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 years ago
|
|
#13078
|
Make wp_register_style and wp_enqueue_style consistent
|
|
Script Loader
|
normal
|
normal
|
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#15833
|
Script concatenation fails to take external dependencies into account.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
5 weeks ago
|
|
#64812
|
Scripts: wp_enqueue_registered_block_scripts_and_styles() does not include modules
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
4 months ago
|
|
#39991
|
jQuery UI Datepicker Localization Error with PHP date 'S'
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
8 years ago
|
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
17 months ago
|
|
#65054
|
$_GET['pagenow'] and $_GET['widget'] unsanitized in dashboard AJAX handler
|
rajeshcp
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 weeks ago
|
|
#52333
|
Lack of the : entity on the list of allowed entity names in kses.php
|
|
Security
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
has-patch
|
6 years ago
|
|
#65052
|
Nonce check order flaw in post-quickdraft-save
|
rajeshcp
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 months ago
|
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
|
#60864
|
URL sanitizing strips valid characters instead of encoding, documented use is invalid
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 months ago
|
|
#65574
|
Unsafe usage of href attribute in wp-admin/js/common.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 weeks ago
|
|
#65573
|
Unsafe usage of href attribute in wp-admin/js/link.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 weeks ago
|
|
#65572
|
Unsafe usage of href attribute in wp-admin/js/post.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 weeks ago
|
|
#53973
|
WordPress <= 5.8 - Authenticated Persistent XSS (User role name)
|
|
Security
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
17 months ago
|
|
#56391
|
safecss_filter_attr(): support rgba background-color
|
|
Security
|
normal
|
normal
|
|
defect (bug)
|
has-patch
|
6 months ago
|
|
#56521
|
wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by /
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 years ago
|
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 years ago
|
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
6 years ago
|
|
#35022
|
WP allows Unicode 0x00a0 spaces in editor but shortcode parser can't handle them
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
10 years ago
|
|
#43457
|
`wp_html_split` valid HTML attributes issues
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
#48153
|
Allow the admin email verification capability to be filtered
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
11 days ago
|
|
#46910
|
Allow wp_die to called after html has started output
|
SergeyBiryukov*
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 years ago
|
|
#47050
|
Recovery Email - Keep consistent newline spacing around ###CAUSE### mergetag
|
|
Site Health
|
normal
|
minor
|
Future Release
|
defect (bug)
|
has-patch
|
5 years ago
|
|
#65395
|
Site Health falsely reports "Opcode cache is not enabled" on shared hosting (WP 7.0)
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
#62630
|
Site Health plugin information display html tags in plugin name
|
|
Site Health
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
has-patch
|
20 months ago
|