13
|
#51407
|
Remove inline event handlers and JavaScript URIs for Strict CSP-compatibility
|
adamsilverstein
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
12/26/2023
|
6
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
01/05/2023
|
2
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
02/18/2025
|
33
|
#37000
|
Support for the SameSite cookie attribute
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
06/06/2024
|
3
|
#29429
|
Support frame-ancestors directive over X-Frame-Options
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
dev-feedback
|
07/29/2019
|
3
|
#51438
|
Use CSP directive upgrade-insecure-requests when using HTTPS
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-unit-tests
|
11/09/2021
|
1
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
02/09/2024
|
5
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
12/24/2024
|
7
|
#38474
|
wp_signups.activation_key stores activation keys in plain text
|
SergeyBiryukov
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
04/23/2024
|
6
|
#55514
|
2FA by default for WordPress
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
03/06/2023
|
1
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
02/21/2025
|
5
|
#20140
|
Ask old password to change user password
|
|
Security
|
normal
|
major
|
Future Release
|
feature request
|
dev-feedback
|
07/28/2024
|
2
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
07/03/2024
|
31
|
#30465
|
Dashboard alert if a plugin/theme was removed from WordPress repo
|
|
Security
|
normal
|
normal
|
Future Release
|
feature request
|
dev-feedback
|
01/24/2025
|
17
|
#32067
|
Remove inline javascript from WP-Core to allow CSP protection
|
|
Security
|
normal
|
normal
|
Future Release
|
feature request
|
|
06/18/2024
|
19
|
#43936
|
Settings: Warn when open registration and new user default is privileged
|
audrasjb*
|
Security
|
normal
|
normal
|
6.9
|
feature request
|
changes-requested
|
02/20/2025
|
4
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
close
|
10/10/2024
|
1
|
#62134
|
Security Issue in WordPress Core
|
|
Security
|
normal
|
normal
|
|
defect (bug)
|
|
10/14/2024
|
1
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12/14/2021
|
2
|
#37362
|
@font-face errors with dashicons in Microsoft Edge
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12/11/2017
|
|
#59780
|
Add functionality to dequeue a block style added via wp_enqueue_block_style
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/31/2023
|
1
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/02/2018
|
5
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
11/13/2024
|
1
|
#49192
|
All plugin style tags are empty after upgrade to 5.3.2
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
01/20/2020
|
1
|
#37756
|
Allow inline scripts on script aliases
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
12/13/2019
|
1
|
#34591
|
BugFix to WP_Scripts::do_item(), remove doubled "//"
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
02/05/2017
|
2
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/25/2023
|
2
|
#59972
|
Clarify description of wp_script_add_data()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
10/10/2024
|
2
|
#63017
|
Compression via PHP documented and in URL but not used anymore
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
03/12/2025
|
|
#45106
|
Concerns related to moving mce_external_plugins filter to WP_Scripts::__construct
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/16/2019
|
9
|
#55184
|
Custom style handle attached to a custom block style is never load even if the block is in the page.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
01/22/2025
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
|
02/23/2021
|
4
|
#17916
|
Enqueued styles are only printed on login_footer in wp-login.php
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
08/10/2018
|
|
#61233
|
Executing the Script before DOM ready.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/16/2024
|
|
#61828
|
Global Styles: Refactor wp_add_inline_style() to use HTML API
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
08/08/2024
|
|
#45008
|
Inconsistent use of 'script_loader_src' and 'style_loader_src' filters when performing concatenation
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
09/27/2018
|
2
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
08/30/2023
|
1
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/30/2022
|
|
#40134
|
Invalid data for scripts in footer
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/12/2017
|
|
#60850
|
Localize script not working in WordPress 6.5-RC3-57856
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
03/27/2024
|
3
|
#46089
|
Memory exhaustion when setting script translations on `wp-i18n`
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
02/04/2021
|
3
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/20/2019
|
11
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/10/2021
|
4
|
#62435
|
Preload script modules and enqueue script modules in wrong order
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
12/02/2024
|
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/16/2024
|
|
#15833
|
Script concatenation fails to take external dependencies into account.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
05/21/2019
|
|
#49470
|
Script loader: simplify maintenance
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
07/21/2020
|
|
#40737
|
Script tags inside unclosed HTML comment in value passed to WP_Script->localize() breaks page
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
06/01/2017
|
3
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
06/15/2024
|
2
|
#61625
|
Styles enqueued from block.json are not correctly configured for RTL
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/11/2024
|
1
|
#52879
|
The SCRIPT_DEBUG constant is ignored when concatenating scripts
|
|
Script Loader
|
normal
|
minor
|
Future Release
|
defect (bug)
|
needs-refresh
|
04/27/2022
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/06/2017
|
|
#61755
|
Use WPINC constant in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/25/2024
|
3
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
07/19/2022
|
|
#55695
|
error on script_loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
05/07/2022
|
2
|
#39991
|
jQuery UI Datepicker Localization Error with PHP date 'S'
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
10/25/2018
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/10/2022
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/20/2019
|
1
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/03/2025
|
1
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/21/2024
|
2
|
#53741
|
wp-admin/css/common.min.css is loading on the front-end
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-docs
|
11/02/2021
|
|
#41990
|
wp_add_inline_script() does not print if the handler has already processed
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
04/12/2023
|
1
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
02/18/2022
|
1
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
05/26/2023
|
1
|
#46334
|
wp_localize_script did not output anything in wp_print_footer_scripts hook although document suggested that it should be working
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
02/24/2019
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
10/04/2023
|
|
#61356
|
Add $is_module as an extra strategy argument when enqueueing js script.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
06/03/2024
|
|
#51325
|
Add a filter for script/style tags injected by wp_add_inline_{script|style}
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
needs-refresh
|
06/06/2023
|
58
|
#22249
|
Add ability to set or remove attributes on enqueued scripts and styles.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
06/02/2022
|
3
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
05/22/2019
|
3
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
03/26/2019
|
5
|
#61734
|
Add the ability to handle "fetchpriority" to ES Modules and Import Maps
|
|
Script Loader
|
normal
|
minor
|
Future Release
|
enhancement
|
dev-feedback
|
10/03/2024
|
|
#52465
|
Allow a relation type in resource hints to be used multiple times
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
11/10/2021
|
|
#60163
|
Block editor admin assets should use asset file version when in debug/local mode
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
12/28/2023
|
4
|
#51200
|
Consider a better way to deprecate JavaScript code
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
08/31/2020
|
|
#59132
|
Create two filters in wp_scripts() and wp_styles().
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
11/27/2023
|
4
|
#58302
|
Deprecate and disable the unused compression_test() and wp_ajax_wp_compression_test()
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
changes-requested
|
01/29/2024
|
|
#60734
|
Deregistering Open Sans
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
03/09/2024
|
1
|
#40602
|
Implement immutable cache headers
|
pbearne
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
02/12/2025
|
|
#43403
|
Improve wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
02/24/2018
|
|
#63018
|
Increase styles_inline_size_limit from 20,000 bytes
|
westonruter*
|
Script Loader
|
normal
|
normal
|
6.9
|
enhancement
|
|
02/25/2025
|
1
|
#54884
|
Load scripts conditionally to reduce page loading and processing time
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
02/20/2022
|
|
#52497
|
New filter "wp_script_attributes" doesn't take effort in enqueued scripts
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
02/11/2021
|
|
#59076
|
Proposal for removing the version numbers of the JS and CSS files when SCRIPT_DEBUG is set to true
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
08/11/2023
|
2
|
#51317
|
Remove deprecated JavaScript i18n globals
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
early
|
05/25/2021
|
3
|
#60234
|
Script Modules API: Add a translations API
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
02/27/2024
|
6
|
#60597
|
Script Modules API: Allow list of enqueued module data to be exposed
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
has-patch
|
02/25/2025
|
4
|
#61500
|
Script Modules: Allow scripts to depend on modules
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
12/19/2024
|
2
|
#61771
|
Script Modules: add the importmap's scopes key
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
09/27/2024
|
|
#62709
|
Script modules integration with wp_resource_hints
|
|
Script Loader
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
|
12/19/2024
|
13
|
#57548
|
Stop concatenating scripts and stylesheets in wp-admin and retire load-scripts.php and load-styles.php
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
enhancement
|
|
04/29/2024
|
2
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
01/16/2019
|
|
#48880
|
Using JSON.parse instead of an actual object literal when localizing scripts
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
12/06/2019
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
09/29/2017
|
1
|
#43781
|
adding apply_filters on $handle in localize
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
04/16/2018
|
|
#38054
|
class.wp-scripts.php - add_action when init is already doing
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
04/09/2019
|
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
11/08/2021
|
|
#56425
|
wp_localize_script assign to const and freeze instead of var to avoid reassignments
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
11/08/2022
|
5
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
11/14/2018
|
|
#44211
|
Add cookie domain to `userSettings` script localize
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
has-patch
|
10/12/2020
|