| 11
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 1
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
7 months ago
|
|
|
#63908
|
Style concatenation may duplicate inline styles
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
| 3
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#61755
|
Use WPINC constant in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
11 months ago
|
| 3
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
4 years ago
|
|
|
#55695
|
error on script_loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
4 years ago
|
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
| 1
|
#63043
|
script-loader 'colors' src true invalid argument
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
17 months ago
|
| 1
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
21 months ago
|
| 1
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 1
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 2
|
#63693
|
wp_should_load_block_assets_on_demand doing it wrong too early
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 months ago
|
|
|
#61356
|
Add $is_module as an extra strategy argument when enqueueing js script.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
2 years ago
|
|
|
#65607
|
Add font-display: swap option when enqueuing/loading Google or local fonts on the frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
9 days ago
|
| 3
|
#47350
|
Add method to get JSON from a file without using file_get_contents()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
| 3
|
#38548
|
Add new filters on wp_script_is/wp_style_is
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
11 months ago
|
| 4
|
#51200
|
Consider a better way to deprecate JavaScript code
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
|
#59132
|
Create two filters in wp_scripts() and wp_styles().
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
reporter-feedback
|
3 years ago
|
|
|
#60734
|
Deregistering Open Sans
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
| 4
|
#55639
|
Implement Async CSS
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
13 months ago
|
|
|
#59076
|
Proposal for removing the version numbers of the JS and CSS files when SCRIPT_DEBUG is set to true
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
close
|
11 months ago
|
| 2
|
#43825
|
Style/script loading infrastructure: Etag header as a hash of script/style handles and their corresponding versions
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#38800
|
add WP_ADMIN_URL and WP_INCLUDES_URL constants
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
9 years ago
|
| 1
|
#43781
|
adding apply_filters on $handle in localize
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 2
|
#40276
|
enhancement: add a $type parameter to wp_add_inline_script()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
8 weeks ago
|
|
|
#56425
|
wp_localize_script assign to const and freeze instead of var to avoid reassignments
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
4 years ago
|
| 5
|
#37162
|
wp_style_add_data and wp_script_add_data should accept SRI information
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
|
#44211
|
Add cookie domain to `userSettings` script localize
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
close
|
11 months ago
|
| 2
|
#40485
|
Add function for retrieving metadata from registered script
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
dev-feedback
|
11 months ago
|
| 7
|
#47285
|
Better Management of External Asset Dependencies
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
feature request
|
|
2 years ago
|
| 1
|
#56993
|
I want to put a filter in the wp_enqueue_block_support_styles function.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
3 years ago
|
| 1
|
#55618
|
combine/concatenate enqueued relative js/css
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
4 years ago
|
| 2
|
#65054
|
$_GET['pagenow'] and $_GET['widget'] unsanitized in dashboard AJAX handler
|
rajeshcp
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
22 hours ago
|
|
|
#52333
|
Lack of the : entity on the list of allowed entity names in kses.php
|
|
Security
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
| 1
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 3
|
#65052
|
Nonce check order flaw in post-quickdraft-save
|
rajeshcp
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 months ago
|
| 3
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 years ago
|
| 2
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
| 1
|
#63940
|
Prevent POST flood cache bypass attacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
| 2
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 2
|
#63259
|
Replace zxcvbn with zxcvbn-ts
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
15 months ago
|
| 5
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
20 months ago
|
|
|
#60864
|
URL sanitizing strips valid characters instead of encoding, documented use is invalid
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 months ago
|
|
|
#65574
|
Unsafe usage of href attribute in wp-admin/js/common.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
45 hours ago
|
|
|
#65573
|
Unsafe usage of href attribute in wp-admin/js/link.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 weeks ago
|
|
|
#65572
|
Unsafe usage of href attribute in wp-admin/js/post.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 weeks ago
|
|
|
#63457
|
WordPress 6.8 will fail creating bcrypt when entropy sources are not available
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
14 months ago
|
|
|
#62693
|
check if chmod is available to prevent Fatal Errors
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
19 months ago
|
| 7
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
|
|
#57447
|
wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
|
#31686
|
wp_authenticate_username_password() should check for a WP_Error object
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
7 years ago
|
|
|
#56521
|
wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by /
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 years ago
|
|
|
#62384
|
.htaccess lacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
20 months ago
|
| 6
|
#63727
|
A new function to sanitize an array
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
12 months ago
|
| 8
|
#37757
|
Add `allowed_classes` to `maybe_unserialize` When WordPress is running on PHP 7+
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
15 months ago
|
| 14
|
#23165
|
Admin validation errors on form nonce element IDs (_wpnonce)
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
5 years ago
|
| 3
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
| 5
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
|
#51611
|
Escape echoing Core functions
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
| 1
|
#64481
|
Explore Sec-Fetch Headers as a Core-Supported CSRF Mitigation Mechanism
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
| 1
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
Security
|
low
|
minor
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
| 2
|
#62949
|
HttpOnly flag for the post password cookie
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
17 months ago
|
| 7
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
| 7
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
| 2
|
#61706
|
Support for storing and getting encrypted options
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
dev-feedback
|
17 months ago
|
| 1
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
|
#63329
|
Use check_ajax_referer() instead of check_admin_referer() for AJAX requests in media form handling.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
has-patch
|
15 months ago
|
| 1
|
#65448
|
Use the new Uri\Rfc3986\Uri::parse in wp_parse_url() if PHP 8.5 is available
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
changes-requested
|
4 weeks ago
|
| 5
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
19 months ago
|
| 6
|
#55514
|
2FA by default for WordPress
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
3 years ago
|
| 1
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
8 months ago
|
| 2
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
2 years ago
|
| 4
|
#62202
|
allow plugin versions to be flagged as security updates
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
close
|
22 months ago
|
|
|
#58174
|
A shortcode block that evaluates to nothing, renders as a space in the HTML
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 1
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
|
#58469
|
Changeset 55832 broke shortcodes saved in block attributes and rendered serverside
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#49877
|
Content enclosed by (content enclosing) shortcode gets stripped from excerpt
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
6 years ago
|
| 1
|
#51377
|
Front End elements break after too many shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
6 years ago
|
| 1
|
#57790
|
Parsing of Shortcode Attributes: bug locating a final attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
16 months ago
|
| 1
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 years ago
|
| 1
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
23 months ago
|
|
|
#59509
|
Shortcode attributes named 0 are ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
21 months ago
|
|
|
#49955
|
Shortcode escaping not correctly handled when followed by enclosing shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 3
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#38713
|
Shortcodes and utf-8 no-break whitespace (\xc2\xa0)
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#55406
|
Shortcodes don't work inside srcset attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 1
|
#58397
|
Shortcodes in patterns are not rendered in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 3
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 3
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
6 years ago
|
| 4
|
#43456
|
`wp_html_split` <script>
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
| 1
|
#43457
|
`wp_html_split` valid HTML attributes issues
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
| 2
|
#44571
|
force_balance_tags breaks JavaScript
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
22 months ago
|
| 4
|
#40958
|
force_balance_tags breaks Ninjaforms and probably other plugins that output html within js.
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
17 months ago
|
|
|
#57267
|
wp_enqueue_style is not working under shortcode
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
4 years ago
|
| 1
|
#46412
|
Make shortcode attributes case-insensitive? shortcode_parse_atts
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
|
|
#60200
|
Search functionality does not search shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
