|
#39442
|
Custom rewrite endpoints and wp_old_slug_redirect
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
07/14/2020
|
4.7
|
|
|
#34683
|
Default .htaccess config creates rewrite infinite loops for path-based multisite installations
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
03/27/2020
|
4.3.1
|
needs-patch
|
|
#49510
|
Regular expression metacharacters in category and tag base lead rewrite rules to fail.
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
02/25/2020
|
5.3.2
|
|
|
#40719
|
iis7_add_rewrite_rule and iis7_delete_rewrite_rule create malformed web.config
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
02/15/2020
|
4.7.4
|
|
|
#49155
|
WP_HOME constant will force-redirect static front page but not posts on front page
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
01/09/2020
|
5.3.2
|
|
|
#42120
|
htpasswd protection not working due to .htaccess rewrite rules
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
05/14/2019
|
4.8.2
|
|
|
#38518
|
Rewrite Rules rebuilding on parse_request
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
03/26/2019
|
4.6.1
|
|
|
#46000
|
non empty post object in case of error 404
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
01/16/2019
|
5.0.3
|
|
|
#45970
|
in IIS if web.confing <configuration has xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0" attribute the WordPress creates new <configuration> section and the site craches with wrong web.config
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
01/13/2019
|
5.0.3
|
needs-patch
|
|
#43881
|
url_to_postid doesn't works with custom post type in PhpUnit Test
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
12/21/2018
|
|
|
|
#44039
|
attachment rewrite rule redirects to posts instead of showing 404
|
|
Rewrite Rules
|
minor
|
defect (bug)
|
05/10/2018
|
|
|
|
#19493
|
post and archive pagination don't work with custom endpoints
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
01/25/2018
|
2.1
|
needs-patch
|
|
#40339
|
If $home_path=='wp' then WP::parse_request() will remove 'wp' from 'wp-json/wc/v1/products' in $pathinfo
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
01/12/2018
|
4.7.3
|
needs-patch
|
|
#42478
|
Add_permastruct ignores EP_NONE and other args if %post_id% is present in struct
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
11/08/2017
|
4.9
|
|
|
#42328
|
directory listing, missing index.html
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
10/24/2017
|
4.8.2
|
|
|
#41791
|
Unicode + add_permastruct breaks rewrite rules
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
09/15/2017
|
4.9
|
needs-unit-tests
|
|
#19896
|
Non-WP rewrites not saved on a multisite install
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
08/22/2017
|
3.0
|
needs-patch
|
|
#41680
|
Added rewrite tags using add_rewrite_tag() not working on static front-page
|
|
Rewrite Rules
|
normal
|
defect (bug)
|
08/20/2017
|
4.8.1
|
|
|
#47338
|
is_super_admin() should check a different capability
|
|
Role/Capability
|
normal
|
defect (bug)
|
11/14/2024
|
|
has-patch
|
|
#40197
|
meta cap 'publish_post' is not being used
|
johnbillion
|
Role/Capability
|
normal
|
defect (bug)
|
10/25/2024
|
3.5
|
has-patch
|
|
#50123
|
Roles & Caps: give anonymous users the `read_post` meta cap for public posts.
|
|
Role/Capability
|
normal
|
defect (bug)
|
01/26/2024
|
|
needs-unit-tests
|
|
#59585
|
Unchecked variable creates fatal error in wp-includes/class-wp-user-query.php
|
|
Role/Capability
|
normal
|
defect (bug)
|
10/10/2023
|
6.3.2
|
needs-unit-tests
|
|
#50260
|
Multisite - Getting actual user capabilities with get_role_caps() different with current_user_can()
|
|
Role/Capability
|
normal
|
defect (bug)
|
08/04/2023
|
5.4.1
|
needs-docs
|
|
#50252
|
Capability issue with admin menu
|
|
Role/Capability
|
normal
|
defect (bug)
|
06/24/2023
|
5.4.1
|
|
|
#19747
|
Roles add_cap should call update_user_level_from_caps()
|
|
Role/Capability
|
normal
|
defect (bug)
|
05/13/2022
|
3.3.1
|
|
|
#54966
|
Inconsistent checking of read permission for singular vs non-singular queries
|
|
Role/Capability
|
normal
|
defect (bug)
|
02/03/2022
|
|
|
|
#51651
|
The `read_post` meta capability returns an incorrect result for the inherit post status.
|
|
Role/Capability
|
normal
|
defect (bug)
|
02/02/2021
|
3.4
|
|
|
#52247
|
Author role unable to set featured image (Error 403)
|
|
Role/Capability
|
normal
|
defect (bug)
|
01/07/2021
|
5.6
|
|
|
#49345
|
User with admin privileges cannot edit some pages/posts
|
|
Role/Capability
|
normal
|
defect (bug)
|
02/02/2020
|
5.3.2
|
needs-patch
|
|
#49287
|
Users with no page deletion capabilities can delete homepage in multisite
|
|
Role/Capability
|
normal
|
defect (bug)
|
01/24/2020
|
|
|
|
#47897
|
Introduce method to introduce new roles and caps independently of db upgrades.
|
|
Role/Capability
|
normal
|
defect (bug)
|
08/18/2019
|
|
|
|
#38714
|
Taxonomy meta boxes do not work right with Custom Post Types that use custom capabilities
|
|
Role/Capability
|
normal
|
defect (bug)
|
03/25/2019
|
4.6
|
|
|
#46440
|
WP_Roles data doesn't load correctly when 'switch_to_blog' is called in a multisite.
|
|
Role/Capability
|
normal
|
defect (bug)
|
03/08/2019
|
5.1
|
|
|
#45879
|
WP_User::set_role() does not remove previous roles
|
|
Role/Capability
|
normal
|
defect (bug)
|
01/09/2019
|
|
|
|
#43877
|
Do not run unnecessary `user_has_cap` filter if the caps to check for include `do_not_allow` already
|
|
Role/Capability
|
normal
|
defect (bug)
|
09/17/2018
|
|
needs-unit-tests
|
|
#42136
|
manage_links should be a custom capability not a default
|
|
Role/Capability
|
minor
|
defect (bug)
|
10/07/2017
|
4.8.2
|
|
|
#40214
|
Some WP instances prematurelly try to do capability tests, before the user object is loaded
|
|
Role/Capability
|
normal
|
defect (bug)
|
03/21/2017
|
4.7.3
|
|
|
#63908
|
Style concatenation may duplicate inline styles
|
|
Script Loader
|
normal
|
defect (bug)
|
09/03/2025
|
|
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
Script Loader
|
normal
|
defect (bug)
|
09/01/2025
|
5.2
|
needs-patch
|
|
#63693
|
wp_should_load_block_assets_on_demand doing it wrong too early
|
|
Script Loader
|
normal
|
defect (bug)
|
08/21/2025
|
|
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
trivial
|
defect (bug)
|
08/14/2025
|
4.5
|
needs-patch
|
|
#63179
|
Dependencies should load in the footer if the script is loaded in the footer
|
|
Script Loader
|
normal
|
defect (bug)
|
03/27/2025
|
|
|
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
Script Loader
|
normal
|
defect (bug)
|
03/03/2025
|
|
has-patch
|
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
Script Loader
|
normal
|
defect (bug)
|
10/21/2024
|
6.6.2
|
|
|
#59972
|
Clarify description of wp_script_add_data()
|
|
Script Loader
|
normal
|
defect (bug)
|
10/10/2024
|
|
has-patch
|
|
#61828
|
Global Styles: Refactor wp_add_inline_style() to use HTML API
|
|
Script Loader
|
normal
|
defect (bug)
|
08/08/2024
|
6.7
|
has-patch
|
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
defect (bug)
|
06/15/2024
|
5.8
|
|
|
#59780
|
Add functionality to dequeue a block style added via wp_enqueue_block_style
|
|
Script Loader
|
normal
|
defect (bug)
|
10/31/2023
|
|
|
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
|
Script Loader
|
normal
|
defect (bug)
|
10/25/2023
|
|
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
|
Script Loader
|
major
|
defect (bug)
|
10/04/2023
|
6.3.1
|
|
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
|
Script Loader
|
normal
|
defect (bug)
|
08/30/2023
|
6.3
|
|
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
major
|
defect (bug)
|
05/26/2023
|
6.2
|
needs-patch
|
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
defect (bug)
|
07/19/2022
|
5.9
|
needs-unit-tests
|
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
Script Loader
|
normal
|
defect (bug)
|
02/18/2022
|
|
|
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
|
Script Loader
|
normal
|
defect (bug)
|
01/30/2022
|
5.9
|
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
|
Script Loader
|
normal
|
defect (bug)
|
01/10/2022
|
|
|
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
|
Script Loader
|
normal
|
defect (bug)
|
12/14/2021
|
5.8
|
|
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
|
Script Loader
|
normal
|
defect (bug)
|
11/10/2021
|
|
|
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
Script Loader
|
normal
|
defect (bug)
|
10/20/2019
|
|
|
|
#45106
|
Concerns related to moving mce_external_plugins filter to WP_Scripts::__construct
|
|
Script Loader
|
normal
|
defect (bug)
|
01/16/2019
|
5.0
|
|
|
#45008
|
Inconsistent use of 'script_loader_src' and 'style_loader_src' filters when performing concatenation
|
|
Script Loader
|
normal
|
defect (bug)
|
09/27/2018
|
2.8
|
has-patch
|
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
Script Loader
|
normal
|
defect (bug)
|
05/02/2018
|
|
needs-patch
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
Script Loader
|
normal
|
defect (bug)
|
11/06/2017
|
4.8.3
|
|
|
#60864
|
URL sanitizing strips valid characters instead of encoding, documented use is invalid
|
|
Security
|
normal
|
defect (bug)
|
01/04/2026
|
|
has-patch
|
|
#63940
|
Prevent POST flood cache bypass attacks
|
|
Security
|
normal
|
defect (bug)
|
09/06/2025
|
6.8.2
|
|
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
major
|
defect (bug)
|
08/19/2025
|
|
|
|
#63259
|
Replace zxcvbn with zxcvbn-ts
|
|
Security
|
normal
|
defect (bug)
|
04/11/2025
|
|
|
|
#62693
|
check if chmod is available to prevent Fatal Errors
|
|
Security
|
normal
|
defect (bug)
|
12/14/2024
|
|
|
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
defect (bug)
|
11/19/2024
|
5.2
|
needs-patch
|
|
#57447
|
wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled
|
|
Security
|
normal
|
defect (bug)
|
01/11/2023
|
|
|
|
#56521
|
wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by /
|
|
Security
|
major
|
defect (bug)
|
09/06/2022
|
6.0.2
|
has-patch
|
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
defect (bug)
|
08/24/2021
|
|
|
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
defect (bug)
|
08/04/2021
|
5.8
|
has-patch
|
|
#52333
|
Lack of the : entity on the list of allowed entity names in kses.php
|
|
Security
|
minor
|
defect (bug)
|
01/20/2021
|
5.6
|
has-patch
|
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
defect (bug)
|
03/22/2019
|
1.0
|
has-patch
|
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
defect (bug)
|
07/24/2017
|
4.7.5
|
|
|
#57790
|
Parsing of Shortcode Attributes: bug locating a final attribute
|
|
Shortcodes
|
normal
|
defect (bug)
|
03/18/2025
|
6.1.1
|
dev-feedback
|
|
#40958
|
force_balance_tags breaks Ninjaforms and probably other plugins that output html within js.
|
|
Shortcodes
|
normal
|
defect (bug)
|
02/21/2025
|
4.7.4
|
|
|
#59509
|
Shortcode attributes named 0 are ignored
|
|
Shortcodes
|
normal
|
defect (bug)
|
10/25/2024
|
6.3.1
|
needs-unit-tests
|
|
#44571
|
force_balance_tags breaks JavaScript
|
|
Shortcodes
|
normal
|
defect (bug)
|
09/22/2024
|
4.9.7
|
|
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
major
|
defect (bug)
|
08/24/2024
|
6.5
|
|
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
critical
|
defect (bug)
|
04/02/2024
|
6.4.3
|
|
|
#58174
|
A shortcode block that evaluates to nothing, renders as a space in the HTML
|
|
Shortcodes
|
normal
|
defect (bug)
|
10/26/2023
|
|
|
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
defect (bug)
|
06/09/2023
|
6.2.2
|
needs-patch
|
|
#58469
|
Changeset 55832 broke shortcodes saved in block attributes and rendered serverside
|
|
Shortcodes
|
normal
|
defect (bug)
|
06/07/2023
|
6.2.2
|
|
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
defect (bug)
|
05/25/2023
|
5.6.1
|
needs-patch
|
|
#58397
|
Shortcodes in patterns are not rendered in templates
|
|
Shortcodes
|
normal
|
defect (bug)
|
05/24/2023
|
6.2.2
|
|
|
#55406
|
Shortcodes don't work inside srcset attribute
|
|
Shortcodes
|
normal
|
defect (bug)
|
04/08/2022
|
5.8.3
|
|
|
#49877
|
Content enclosed by (content enclosing) shortcode gets stripped from excerpt
|
|
Shortcodes
|
normal
|
defect (bug)
|
07/24/2020
|
5.4
|
dev-feedback
|
|
#49955
|
Shortcode escaping not correctly handled when followed by enclosing shortcodes
|
|
Shortcodes
|
normal
|
defect (bug)
|
07/16/2020
|
|
|
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
defect (bug)
|
07/10/2020
|
3.6
|
has-patch
|
|
#38713
|
Shortcodes and utf-8 no-break whitespace (\xc2\xa0)
|
|
Shortcodes
|
normal
|
defect (bug)
|
03/25/2019
|
4.6.1
|
|
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
defect (bug)
|
06/27/2018
|
3.5
|
has-patch
|
|
#51088
|
Site Health Status widget displays incorrect or inconsistent number of issues
|
|
Site Health
|
normal
|
defect (bug)
|
08/10/2025
|
5.5
|
|
|
#51230
|
WP_DEBUG is flagged when using the development environment type
|
|
Site Health
|
normal
|
defect (bug)
|
06/02/2025
|
5.5
|
has-patch
|
|
#63058
|
Site Health: Directory size stuck in loading state
|
|
Site Health
|
normal
|
defect (bug)
|
05/02/2025
|
|
|
|
#62630
|
Site Health plugin information display html tags in plugin name
|
|
Site Health
|
trivial
|
defect (bug)
|
12/18/2024
|
6.7.1
|
has-patch
|
|
#61534
|
if debug mode is true and go to the site-heath page showing extra margin top at admin-menu
|
|
Site Health
|
normal
|
defect (bug)
|
10/02/2024
|
|
dev-feedback
|
|
#61577
|
health check count display bug
|
|
Site Health
|
normal
|
defect (bug)
|
07/11/2024
|
6.5.5
|
|
|
#60388
|
WordPress Core error message in my Website
|
|
Site Health
|
normal
|
defect (bug)
|
05/10/2024
|
|
has-patch
|