| 1
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 3
|
#65052
|
Nonce check order flaw in post-quickdraft-save
|
rajeshcp
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 months ago
|
| 3
|
#37264
|
Please do not chmod 666 the wp-config.php file on installation.
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 years ago
|
| 2
|
#53869
|
Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
5 years ago
|
| 1
|
#63940
|
Prevent POST flood cache bypass attacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12 months ago
|
| 2
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 2
|
#63259
|
Replace zxcvbn with zxcvbn-ts
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
17 months ago
|
| 5
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
22 months ago
|
|
|
#60864
|
URL sanitizing strips valid characters instead of encoding, documented use is invalid
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 months ago
|
|
|
#65574
|
Unsafe usage of href attribute in wp-admin/js/common.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 weeks ago
|
| 1
|
#65573
|
Unsafe usage of href attribute in wp-admin/js/link.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
|
#65572
|
Unsafe usage of href attribute in wp-admin/js/post.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
7 weeks ago
|
|
|
#63457
|
WordPress 6.8 will fail creating bcrypt when entropy sources are not available
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
16 months ago
|
| 5
|
#53973
|
WordPress <= 5.8 - Authenticated Persistent XSS (User role name)
|
|
Security
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
18 months ago
|
|
|
#62693
|
check if chmod is available to prevent Fatal Errors
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
21 months ago
|
| 7
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
13 months ago
|
|
|
#57447
|
wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
|
#31686
|
wp_authenticate_username_password() should check for a WP_Error object
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
7 years ago
|
|
|
#56521
|
wp_kses wp_kses_hair fails to allow a valueless attribute when is follwed by /
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 years ago
|
|
|
#58174
|
A shortcode block that evaluates to nothing, renders as a space in the HTML
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 1
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
|
#58469
|
Changeset 55832 broke shortcodes saved in block attributes and rendered serverside
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#49877
|
Content enclosed by (content enclosing) shortcode gets stripped from excerpt
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
6 years ago
|
| 5
|
#47863
|
Fix odd, unexpected output from shortcode_parse_attts
|
SergeyBiryukov
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
14 months ago
|
| 1
|
#51377
|
Front End elements break after too many shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
6 years ago
|
| 2
|
#43725
|
Multiple instances of opening / closing shortcode only works when closing tag is provided
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
6 years ago
|
| 1
|
#57790
|
Parsing of Shortcode Attributes: bug locating a final attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
18 months ago
|
| 1
|
#35216
|
Return empty string from wp.shortcode.replace() callback is ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
8 years ago
|
| 34
|
#58366
|
Shortcode Support Regained but Content Filters are messing with Shortcode HTML
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
16 months ago
|
| 1
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
|
#59509
|
Shortcode attributes named 0 are ignored
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
needs-unit-tests
|
23 months ago
|
|
|
#49955
|
Shortcode escaping not correctly handled when followed by enclosing shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 3
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#38713
|
Shortcodes and utf-8 no-break whitespace (\xc2\xa0)
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
|
#43686
|
Shortcodes containing asterisks may create invalid regex breaking the editor
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
8 years ago
|
|
|
#55406
|
Shortcodes don't work inside srcset attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 2
|
#58397
|
Shortcodes in patterns are not rendered in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 weeks ago
|
| 3
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#45377
|
Video Shortcode Ajax Issue
|
|
Shortcodes
|
normal
|
minor
|
Future Release
|
defect (bug)
|
|
8 years ago
|
| 3
|
#42718
|
Video shortcode needs muted attribute for Autoplay to work with Safari 11.0.1+
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
6 years ago
|
| 4
|
#35022
|
WP allows Unicode 0x00a0 spaces in editor but shortcode parser can't handle them
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
10 years ago
|
| 4
|
#43456
|
`wp_html_split` <script>
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
| 1
|
#43457
|
`wp_html_split` valid HTML attributes issues
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
| 1
|
#26649
|
escaped shortcodes should not be expanded during 'get_the_excerpt'
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
7 weeks ago
|
| 2
|
#44571
|
force_balance_tags breaks JavaScript
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
| 4
|
#40958
|
force_balance_tags breaks Ninjaforms and probably other plugins that output html within js.
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
19 months ago
|
|
|
#57267
|
wp_enqueue_style is not working under shortcode
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
4 years ago
|
| 14
|
#6984
|
wpautop() formats the the contents of shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
7 years ago
|
| 2
|
#48153
|
Allow the admin email verification capability to be filtered
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
6 weeks ago
|
| 2
|
#46910
|
Allow wp_die to called after html has started output
|
SergeyBiryukov*
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
7 years ago
|
| 2
|
#54351
|
Checking for temp update directories may throw warnings
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
4 years ago
|
| 1
|
#52977
|
Consider using basic auth in https healh check.
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
3 years ago
|
|
|
#58819
|
Critical error on this website
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
|
#50895
|
False information about writable files in Site Health Info
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 1
|
#47050
|
Recovery Email - Keep consistent newline spacing around ###CAUSE### mergetag
|
|
Site Health
|
normal
|
minor
|
Future Release
|
defect (bug)
|
has-patch
|
5 years ago
|
| 3
|
#48399
|
Recovery mode can stick the admin in a bad state
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
| 1
|
#52343
|
Site Health Page: Inactive theme message is inconsistent
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
6 years ago
|
| 1
|
#51830
|
Site Health Themes checkout isn't correct about automatic usage of default theme or themes condition in case of a broken theme
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
6 years ago
|
| 3
|
#64071
|
Site Health false positive: WP_DEBUG_LOG warning when debug.log is outside wp-content
|
hbhalodia
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
5 weeks ago
|
| 3
|
#65395
|
Site Health falsely reports "Opcode cache is not enabled" on shared hosting (WP 7.0)
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 weeks ago
|
| 1
|
#54598
|
Site Health makes downright wrong and dangerous suggestions
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
18 months ago
|
| 1
|
#62630
|
Site Health plugin information display html tags in plugin name
|
|
Site Health
|
normal
|
trivial
|
Awaiting Review
|
defect (bug)
|
has-patch
|
21 months ago
|
|
|
#63058
|
Site Health: Directory size stuck in loading state
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
17 months ago
|
|
|
#47428
|
Site Health: Remove duplicate code in VCS test
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
5 months ago
|
| 1
|
#46967
|
Site health, info tab: show the current uploads directory info on network installs
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
7 years ago
|
| 1
|
#66060
|
Site health: robots.txt and WordPress in a subdir
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
40 hours ago
|
| 6
|
#47352
|
Take into account the current admin email address when rate limiting the recovery mode email
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
4 years ago
|
| 2
|
#47266
|
Template of shutdown handler for fatal errors should not be displayed for CLI scripts
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
|
|
#53204
|
This means any errors on the site will be written to a file which is potentially available to normal users
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
4 years ago
|
| 3
|
#55280
|
Unsupported operand types in Site Health
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 5
|
#51230
|
WP_DEBUG is flagged when using the development environment type
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
4 weeks ago
|
|
|
#60388
|
WordPress Core error message in my Website
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
| 1
|
#61577
|
health check count display bug
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 months ago
|
|
|
#61534
|
if debug mode is true and go to the site-heath page showing extra margin top at admin-menu
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
2 years ago
|
| 1
|
#52945
|
wp_cache settings not recognized in site health / plugins
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
5 years ago
|
| 2
|
#51004
|
New sitemaps feature work only on root site in a multisite subdirectory setup
|
|
Sitemaps
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
6 years ago
|
|
|
#65375
|
Paginated XML sitemap sub-pages return 404 once paged exceeds the blog post page count
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
3 months ago
|
|
|
#54010
|
Redirect from /sitemap.xml to /wp-sitemap.xml needs to be 301 and not 302
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
| 8
|
#51117
|
Sitemap & XSL requests execute main query for home page.
|
|
Sitemaps
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
2 months ago
|
| 6
|
#51912
|
Sitemap pages 404 with more than one page
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
close
|
6 months ago
|
|
|
#56671
|
Sitemaps not working with almost pretty permalinks
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 3
|
#51136
|
Third-party sitemap plugin returning 404 after disabling core's sitemap
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
has-patch
|
6 years ago
|
| 1
|
#65635
|
provide an alternative to the XSLT stylesheet processing instruction for XML Sitemaps since browsers are phasing out support for it
|
|
Sitemaps
|
normal
|
normal
|
Future Release
|
defect (bug)
|
dev-feedback
|
2 months ago
|
|
|
#55848
|
wp-sitemap.xml fails to load with large number of URLs
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
|
#51280
|
wp_register_sitemap_provider() breaks sitemap functionality if provider name contains a dash (-)
|
pbiron
|
Sitemaps
|
normal
|
minor
|
Future Release
|
defect (bug)
|
|
3 years ago
|
| 1
|
#42422
|
'unique' index not removed from the 'slug' column of the 'wp_terms' table
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#60076
|
200 tags maximum
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
dev-feedback
|
3 years ago
|
|
|
#52975
|
Add "states" to terms list table (for WP_Taxonomy::$default_term)
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
|
#54819
|
Adding Taxonomy with word "media" not showing list in Edit/Create Post
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
| 1
|
#57419
|
Adding terms to a taxonomy with non-latin characters results in PHP notice
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
16 months ago
|
| 30
|
#14691
|
Allow commas in tag names
|
|
Taxonomy
|
normal
|
major
|
Future Release
|
defect (bug)
|
needs-refresh
|
12 months ago
|
| 1
|
#52726
|
Allow default term when a user does not have assign_terms capability
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
| 2
|
#50294
|
Ampersand and other symbols in term_exists do not get encoded properly
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
| 1
|
#38243
|
Attempting to create a term with invalid UTF8 characters creates a blank term
|
|
Taxonomy
|
normal
|
normal
|
Future Release
|
defect (bug)
|
needs-unit-tests
|
7 years ago
|
|
|
#59215
|
Bug in wp_set_post_categories function
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
reporter-feedback
|
3 years ago
|
| 1
|
#44854
|
Bulk action missing/hidden on taxonomies
|
|
Taxonomy
|
normal
|
minor
|
Awaiting Review
|
defect (bug)
|
has-patch
|
2 years ago
|
| 1
|
#64038
|
Cache miss for `WP_Term_Query`
|
|
Taxonomy
|
normal
|
normal
|
Future Release
|
defect (bug)
|
has-patch
|
5 months ago
|
|
|
#42572
|
Can't delete custom taxonomy tags from a post
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
|
#51666
|
Cannot unselect terms for a taxonomy with a default_term
|
|
Taxonomy
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
|
|
#48220
|
Category Dropdown Layout Issue
|
|
Taxonomy
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|