| 7
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
whyisjake
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 months ago
|
| 2
|
#36087
|
Migration plan from insecure RNG fallback
|
sarciszewski
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
6 years ago
|
| 7
|
#57424
|
Specific hook for Content Security Policy
|
bhubbard
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 3
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
flixos90
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
5 years ago
|
| 1
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
kkmuffme
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
| 5
|
#36177
|
default htaccess should include security measures
|
lelutin
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
20 months ago
|
| 6
|
#55514
|
2FA by default for WordPress
|
jamsec
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
3 years ago
|
| 1
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
mclaurent
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
9 months ago
|
| 2
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
Josiah S. Carberry
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
2 years ago
|
| 17
|
#32067
|
Remove inline javascript from WP-Core to allow CSP protection
|
anonymized_14391430
|
|
Security
|
normal
|
normal
|
Future Release
|
feature request
|
close
|
3 months ago
|
| 4
|
#62202
|
allow plugin versions to be flagged as security updates
|
oliversild
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
close
|
22 months ago
|
| 1
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
aaemnnosttv
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#59780
|
Add functionality to dequeue a block style added via wp_enqueue_block_style
|
jorbin
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 1
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
tobifjellner
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
| 2
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
jeremyfelt
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#45106
|
Concerns related to moving mce_external_plugins filter to WP_Scripts::__construct
|
david.binda
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
| 1
|
#63179
|
Dependencies should load in the footer if the script is loaded in the footer
|
kkmuffme
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
17 months ago
|
| 2
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
kevincorrigan
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 1
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
s56bouya
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#60850
|
Localize script not working in WordPress 6.5-RC3-57856
|
dev28
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
2 years ago
|
| 3
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
d.sturm
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
| 11
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
tannerm
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#49470
|
Script loader: simplify maintenance
|
azaozz
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
6 years ago
|
|
|
#63908
|
Style concatenation may duplicate inline styles
|
jonsurrell
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
| 3
|
#61435
|
Style dependencies are not inlined
|
mosne
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
shamstarek
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#61755
|
Use WPINC constant in script-loader.php
|
kkmuffme
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
12 months ago
|
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
erikdemarco
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#47322
|
scenario based-bug in the file load-style.php
|
asimbaki
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
| 1
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
cjm51213
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
22 months ago
|
| 1
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
wpfed
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 1
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
wprj
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
forcesail
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 2
|
#63693
|
wp_should_load_block_assets_on_demand doing it wrong too early
|
kkmuffme
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 days ago
|
|
|
#65607
|
Add font-display: swap option when enqueuing/loading Google or local fonts on the frontend
|
kavaiyanirmal
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
5 weeks ago
|
| 3
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
aristath
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
| 3
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
igmoweb
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
12 months ago
|
| 4
|
#51200
|
Consider a better way to deprecate JavaScript code
|
SergeyBiryukov
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
|
#60734
|
Deregistering Open Sans
|
ecv80
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
| 4
|
#55639
|
Implement Async CSS
|
mihaidumitrascu
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
14 months ago
|
|
|
#59076
|
Proposal for removing the version numbers of the JS and CSS files when SCRIPT_DEBUG is set to true
|
rajinsharwar
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
12 months ago
|
| 3
|
#60234
|
Script Modules API: Add a translations API
|
luisherranz
|
|
Script Loader
|
normal
|
normal
|
7.2
|
enhancement
|
|
5 weeks ago
|
| 2
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
kanishk.dudeja
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
petersplugins
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
9 years ago
|
| 1
|
#43781
|
adding apply_filters on $handle in localize
|
DuckDagobert
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 5
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
michaelkrieger
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 7
|
#47285
|
Better Management of External Asset Dependencies
|
justlevine
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
feature request
|
|
2 years ago
|
| 1
|
#56993
|
I want to put a filter in the wp_enqueue_block_support_styles function.
|
nendeb55
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
3 years ago
|
| 1
|
#55618
|
combine/concatenate enqueued relative js/css
|
briandd
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
4 years ago
|
|
|
#40340
|
"Attach to existing content" modal shows posts and pages of other users
|
menakas
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 1
|
#52247
|
Author role unable to set featured image (Error 403)
|
yewzy
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 3
|
#50252
|
Capability issue with admin menu
|
mort1305
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 2
|
#54966
|
Inconsistent checking of read permission for singular vs non-singular queries
|
manfcarlo
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#47897
|
Introduce method to introduce new roles and caps independently of db upgrades.
|
peterwilsoncc
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
| 4
|
#50123
|
Roles & Caps: give anonymous users the `read_post` meta cap for public posts.
|
peterwilsoncc
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 4
|
#19747
|
Roles add_cap should call update_user_level_from_caps()
|
lgladdy
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
|
#40214
|
Some WP instances prematurelly try to do capability tests, before the user object is loaded
|
dffnbfee
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#60026
|
Strange behavior WordPress in multisite environment wicustomizer
|
fkfaisalkhan007
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
9 months ago
|
| 3
|
#38714
|
Taxonomy meta boxes do not work right with Custom Post Types that use custom capabilities
|
bcworkz
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#51651
|
The `read_post` meta capability returns an incorrect result for the inherit post status.
|
peterwilsoncc
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 1
|
#49345
|
User with admin privileges cannot edit some pages/posts
|
malamiao
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
| 1
|
#49287
|
Users with no page deletion capabilities can delete homepage in multisite
|
robdxw
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#46440
|
WP_Roles data doesn't load correctly when 'switch_to_blog' is called in a multisite.
|
syammohanm
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
| 1
|
#45879
|
WP_User::set_role() does not remove previous roles
|
fried_eggz
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
|
|
#42136
|
manage_links should be a custom capability not a default
|
Beee
|
|
Role/Capability
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 5
|
#36691
|
Ability to disable "Password Protected" post option
|
paulschreiber
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 1
|
#64306
|
Enhancements: Add 'designer' user role, Collaborator groups/teams, display multiple contributor types and co-authors, contributor heirarchy on posts/pages
|
amykamala
|
|
Role/Capability
|
low
|
trivial
|
Awaiting Review
|
enhancement
|
|
9 months ago
|
| 8
|
#33240
|
Introduce a capability for previewing posts
|
johnbillion
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
|
9 years ago
|
| 1
|
#42405
|
Introduce singular capabilities for enabling individual themes on Multisite
|
johnbillion
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
|
9 years ago
|
|
|
#41701
|
Introduce singular capabilities for further management of individual plugins
|
johnbillion
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
|
9 years ago
|
|
|
#41703
|
Introduce singular capabilities for network activation and deactivation of individual plugins
|
johnbillion
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
enhancement
|
|
6 years ago
|
|
|
#56373
|
La EDICION de Contenidos y los ROLES de Usuario
|
LimaNorte.com
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 2
|
#41674
|
More granular capabilities for restoring and permanently deleting trashed posts
|
johnbillion
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
11 months ago
|
|
|
#23391
|
User in contributor role can add images to post only via the text editor
|
mark-k
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#41778
|
Archive page for user roles
|
mireillesan
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
9 years ago
|
| 10
|
#39174
|
Introduce network roles
|
flixos90
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
feature request
|
|
7 years ago
|
| 2
|
#46716
|
Site owner unable to control admin level users in Word Press dashboard
|
anu24
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
7 years ago
|
| 1
|
#55106
|
Split publish_posts in publish_posts and publish_others_posts
|
freakenstein
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
5 years ago
|
| 19
|
#37616
|
Replace `is_super_admin()` calls with real capability checks
|
flixos90
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
task (blessed)
|
|
9 years ago
|
| 1
|
#42478
|
Add_permastruct ignores EP_NONE and other args if %post_id% is present in struct
|
Underscorefunk
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 3
|
#41680
|
Added rewrite tags using add_rewrite_tag() not working on static front-page
|
Asgaros
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#41891
|
Bug when changing $(comments_)pagination_base of WP_Rewite instance to string with non-ASCII characters
|
dimadin
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#54654
|
Can flush_rewrite_rules() be called automatically after changing the site URL?
|
pikamander2
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 3
|
#51805
|
Clarify the prerequisites for updating the .htaccess file in flush_rewrite_rules()
|
SergeyBiryukov
|
|
Rewrite Rules
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
4 years ago
|
| 4
|
#34683
|
Default .htaccess config creates rewrite infinite loops for path-based multisite installations
|
rob006
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-testing
|
6 years ago
|
| 1
|
#53545
|
Domain Mapping not working with page as homepage
|
teresasumisu
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#40339
|
If $home_path=='wp' then WP::parse_request() will remove 'wp' from 'wp-json/wc/v1/products' in $pathinfo
|
Magenta Cuda
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-testing
|
9 years ago
|
| 6
|
#19896
|
Non-WP rewrites not saved on a multisite install
|
johnbillion
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#52419
|
Pagination adds trailing slash when it shouldn't
|
DhrRob
|
|
Rewrite Rules
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 1
|
#50726
|
Pagination error on 4 digit page when category and year are in the permalink structure
|
elpadi17
|
|
Rewrite Rules
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
|
|
#52969
|
Permalink for /wp-includes falls back to blog post
|
fancsali
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 2
|
#49510
|
Regular expression metacharacters in category and tag base lead rewrite rules to fail.
|
raaaahman
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 months ago
|
| 1
|
#38518
|
Rewrite Rules rebuilding on parse_request
|
andyphillips82
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#49155
|
WP_HOME constant will force-redirect static front page but not posts on front page
|
eclev91
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#54161
|
WordPress destroy iis web.config when using "location" config.
|
foxontherock
|
|
Rewrite Rules
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 1
|
#50943
|
add_rewrite_rule() sample codes don't work for passing multiple params
|
shahryarhn
|
|
Rewrite Rules
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
|
|
#44039
|
attachment rewrite rule redirects to posts instead of showing 404
|
swedish boy
|
|
Rewrite Rules
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
| 1
|
#42328
|
directory listing, missing index.html
|
rolandinsh
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 1
|
#42120
|
htpasswd protection not working due to .htaccess rewrite rules
|
subscriptiongroup
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#40719
|
iis7_add_rewrite_rule and iis7_delete_rewrite_rule create malformed web.config
|
jaendres
|
|
Rewrite Rules
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|