|
#59585
|
Unchecked variable creates fatal error in wp-includes/class-wp-user-query.php
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
10/10/2023
|
1
|
#49345
|
User with admin privileges cannot edit some pages/posts
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
02/02/2020
|
1
|
#49287
|
Users with no page deletion capabilities can delete homepage in multisite
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/24/2020
|
|
#46440
|
WP_Roles data doesn't load correctly when 'switch_to_blog' is called in a multisite.
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/08/2019
|
1
|
#45879
|
WP_User::set_role() does not remove previous roles
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/09/2019
|
7
|
#36376
|
current_user_can/has_cap fails when user has multiple roles
|
dd32*
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
01/14/2019
|
2
|
#38997
|
delete_private_posts capability doesn't prevent user from deleting private posts
|
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
05/25/2019
|
4
|
#47338
|
is_super_admin() should check a different capability
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
11/14/2024
|
|
#42136
|
manage_links should be a custom capability not a default
|
|
Role/Capability
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
|
10/07/2017
|
2
|
#40197
|
meta cap 'publish_post' is not being used
|
johnbillion
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
10/25/2024
|
4
|
#38303
|
register_meta and capabilities aren't working as expected
|
rmccue
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
06/25/2017
|
23
|
#22895
|
user_can_admin_menu() is Type-Insensitive for Users who Can't Create Pages
|
johnbillion*
|
Role/Capability
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
02/19/2023
|
1
|
#40950
|
wp_terms_checklist() does not pass $post_id to current_user_can()
|
|
Role/Capability
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/05/2021
|
1
|
#53848
|
'is_feed was called incorrectly' notice if `wp_styles()` is called before the query
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12/14/2021
|
2
|
#37362
|
@font-face errors with dashicons in Microsoft Edge
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12/11/2017
|
|
#59780
|
Add functionality to dequeue a block style added via wp_enqueue_block_style
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/31/2023
|
1
|
#43900
|
Add hint about blocked Javascript as possible error reason in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/02/2018
|
5
|
#51837
|
Adding `add_theme_support` for html5 for scripts, does not remove the type attribute from `wp-emoji-release.min.js`
|
SergeyBiryukov
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
11/13/2024
|
1
|
#49192
|
All plugin style tags are empty after upgrade to 5.3.2
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
01/20/2020
|
1
|
#37756
|
Allow inline scripts on script aliases
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
12/13/2019
|
1
|
#34591
|
BugFix to WP_Scripts::do_item(), remove doubled "//"
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
02/05/2017
|
2
|
#55485
|
Clarify `wp_should_load_separate_core_block_assets()`, `block.json` script expectations
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/25/2023
|
2
|
#59972
|
Clarify description of wp_script_add_data()
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
10/10/2024
|
|
#45106
|
Concerns related to moving mce_external_plugins filter to WP_Scripts::__construct
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/16/2019
|
8
|
#55184
|
Custom style handle attached to a custom block style is never load even if the block is in the page.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
01/13/2025
|
|
#52320
|
Empty entries in WP_Scripts 'extra' field
|
|
Script Loader
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
|
02/23/2021
|
4
|
#17916
|
Enqueued styles are only printed on login_footer in wp-login.php
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
08/10/2018
|
|
#61233
|
Executing the Script before DOM ready.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/16/2024
|
|
#61828
|
Global Styles: Refactor wp_add_inline_style() to use HTML API
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
08/08/2024
|
|
#45008
|
Inconsistent use of 'script_loader_src' and 'style_loader_src' filters when performing concatenation
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
09/27/2018
|
2
|
#59114
|
Infinite loop after upgrading from WordPress 6.1.3 to 6.2
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
08/30/2023
|
1
|
#54993
|
Inline output using wp_enqueue_block_style adds unnecessary paths
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/30/2022
|
|
#40134
|
Invalid data for scripts in footer
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/12/2017
|
|
#60850
|
Localize script not working in WordPress 6.5-RC3-57856
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
03/27/2024
|
3
|
#46089
|
Memory exhaustion when setting script translations on `wp-i18n`
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
02/04/2021
|
3
|
#47789
|
NGINX: Request for media-view.js leads to "zero size buf in writer"
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/20/2019
|
11
|
#49742
|
No longer able to enqueue multiple Google Fonts with wp_enqueue_style
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/10/2021
|
4
|
#62435
|
Preload script modules and enqueue script modules in wrong order
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
12/02/2024
|
|
#61657
|
Script "in_footer" => false with "defer" will make all dependencies that are not deferred load in head
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/16/2024
|
|
#15833
|
Script concatenation fails to take external dependencies into account.
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
05/21/2019
|
|
#49470
|
Script loader: simplify maintenance
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
07/21/2020
|
|
#40737
|
Script tags inside unclosed HTML comment in value passed to WP_Script->localize() breaks page
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
06/01/2017
|
3
|
#61435
|
Style dependencies are not inlined
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
06/15/2024
|
2
|
#61625
|
Styles enqueued from block.json are not correctly configured for RTL
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/11/2024
|
1
|
#52879
|
The SCRIPT_DEBUG constant is ignored when concatenating scripts
|
|
Script Loader
|
normal
|
minor
|
Future Release
|
defect (bug)
|
needs-refresh
|
04/27/2022
|
|
#42440
|
Uncaught TypeError: $(...).wpColorPicker is not a function
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/06/2017
|
|
#61755
|
Use WPINC constant in script-loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/25/2024
|
3
|
#54956
|
[5.9] wp_block_type args - "style" and "script" are always loaded on Frontend
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
07/19/2022
|
|
#55695
|
error on script_loader.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
05/07/2022
|
2
|
#39991
|
jQuery UI Datepicker Localization Error with PHP date 'S'
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
10/25/2018
|
|
#54777
|
passing empty object to wp_localize_script will convert it to empty array instead of empty object
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/10/2022
|
|
#47322
|
scenario based-bug in the file load-style.php
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/20/2019
|
1
|
#62265
|
wp-admin honors style-sheet <=> 'SCRIPT_DEBUG' is true.
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/21/2024
|
2
|
#53741
|
wp-admin/css/common.min.css is loading on the front-end
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-docs
|
11/02/2021
|
|
#41990
|
wp_add_inline_script() does not print if the handler has already processed
|
|
Script Loader
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
04/12/2023
|
1
|
#55030
|
wp_enqueue_script( 'jquery-ui-autocomplete' ) - is enqueueing a bunch of extra scripts I don't need
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
02/18/2022
|
1
|
#58075
|
wp_enqueue_scripts action not firing at the right time with block themes
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
05/26/2023
|
1
|
#46334
|
wp_localize_script did not output anything in wp_print_footer_scripts hook although document suggested that it should be working
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
02/24/2019
|
|
#59539
|
wp_register_style and wp_register_script adds ver incorrectly
|
|
Script Loader
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
10/04/2023
|
|
#61942
|
Add "no-store" to Cache-Control header to prevent unexpected cache behavior
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
12/06/2024
|
|
#61640
|
Issues in edit_link Function: Inconsistent Return Values, Insufficient Permission Error Handling, and Data Sanitization
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
has-patch
|
07/31/2024
|
|
#52333
|
Lack of the : entity on the list of allowed entity names in kses.php
|
|
Security
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
has-patch
|
01/20/2021
|
1
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/24/2017
|
|
#59824
|
PHP Warning raised in pluggable.php when passing NULL instead of a string
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/07/2023
|
3
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
03/22/2019
|
2
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
08/04/2021
|
2
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
08/24/2021
|
5
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
11/19/2024
|
|
#60864
|
URL sanitizing strips valid characters instead of encoding, documented use is invalid
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
04/03/2024
|
4
|
#50828
|
Update ca-bundle.crt and remove expired certificates
|
SergeyBiryukov
|
Security
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
11/10/2021
|
11
|
#48955
|
WP 5.3.1 changes cause potential backwards compatibility breakage with kses
|
|
Security
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
08/12/2020
|
5
|
#53973
|
WordPress <= 5.8 - Authenticated Persistent XSS (User role name)
|
|
Security
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
06/15/2024
|
|
#62693
|
check if chmod is available to prevent Fatal Errors
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12/14/2024
|
6
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
10/30/2023
|
|
#57447
|
wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
01/11/2023
|
|
#31686
|
wp_authenticate_username_password() should check for a WP_Error object
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
08/06/2019
|
|
#56521
|
wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by /
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
has-patch
|
09/06/2022
|
|
#58174
|
A shortcode block that evaluates to nothing, renders as a space in the HTML
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10/26/2023
|
1
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
04/02/2024
|
|
#58469
|
Changeset 55832 broke shortcodes saved in block attributes and rendered serverside
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
06/07/2023
|
|
#49877
|
Content enclosed by (content enclosing) shortcode gets stripped from excerpt
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
07/24/2020
|
5
|
#47863
|
Fix odd, unexpected output from shortcode_parse_attts
|
SergeyBiryukov
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
02/24/2020
|
1
|
#51377
|
Front End elements break after too many shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
09/24/2020
|
2
|
#43725
|
Multiple instances of opening / closing shortcode only works when closing tag is provided
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
07/16/2020
|
1
|
#57790
|
Parsing of Shortcode Attributes: bug locating a final attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
02/28/2023
|
1
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
06/27/2018
|
31
|
#58366
|
Shortcode Support Regained but Content Filters are messing with Shortcode HTML
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
10/27/2024
|
1
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
08/24/2024
|
|
#59509
|
Shortcode attributes named 0 are ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
10/25/2024
|
|
#49955
|
Shortcode escaping not correctly handled when followed by enclosing shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
07/16/2020
|
2
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
06/09/2023
|
|
#38713
|
Shortcodes and utf-8 no-break whitespace (\xc2\xa0)
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/25/2019
|
|
#43686
|
Shortcodes containing asterisks may create invalid regex breaking the editor
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
01/16/2019
|
|
#55406
|
Shortcodes don't work inside srcset attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
04/08/2022
|
|
#58397
|
Shortcodes in patterns are not rendered in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/24/2023
|
2
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
05/25/2023
|
|
#45377
|
Video Shortcode Ajax Issue
|
|
Shortcodes
|
normal
|
minor
|
Future Release
|
defect (bug)
|
|
12/06/2018
|
3
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
07/10/2020
|
4
|
#35022
|
WP allows Unicode 0x00a0 spaces in editor but shortcode parser can't handle them
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
02/06/2017
|
4
|
#43456
|
`wp_html_split` <script>
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
03/02/2018
|