|
#55618
|
combine/concatenate enqueued relative js/css
|
|
Script Loader
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
4 years ago
|
|
#41391
|
Links to media in password protected pages
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
9 years ago
|
|
#63940
|
Prevent POST flood cache bypass attacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
10 months ago
|
|
#53994
|
REST API requests with session cookies but an invalid/missing nonce are considered authenticated for most of the request
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
5 years ago
|
|
#63259
|
Replace zxcvbn with zxcvbn-ts
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
15 months ago
|
|
#62134
|
Security Issue in WordPress Core
|
|
Security
|
normal
|
normal
|
|
defect (bug)
|
|
21 months ago
|
|
#56860
|
Sodium Compat library is improperly loaded
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
20 months ago
|
|
#65573
|
Unsafe usage of href attribute in wp-admin/js/link.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 weeks ago
|
|
#65572
|
Unsafe usage of href attribute in wp-admin/js/post.js
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 weeks ago
|
|
#62693
|
check if chmod is available to prevent Fatal Errors
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
19 months ago
|
|
#58679
|
meta key field in usermeta table should NOT use accent insensitive collations
|
|
Security
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
11 months ago
|
|
#57447
|
wp_ajax_inline_save function does not check if post has "public" or "show_ui" enabled
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
#62384
|
.htaccess lacks
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
20 months ago
|
|
#58636
|
Automatic Sanitization of Nonces in wp_verify_nonce
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
|
#40237
|
Educate users about modern password best-practices
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#51611
|
Escape echoing Core functions
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
#64481
|
Explore Sec-Fetch Headers as a Core-Supported CSRF Mitigation Mechanism
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
|
#43320
|
Harden API requests against man-in-the-middle attacks
|
|
Security
|
low
|
minor
|
Awaiting Review
|
enhancement
|
|
8 years ago
|
|
#44058
|
Include security sniffs in PHPCS ruleset
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
8 years ago
|
|
#51159
|
Let's expand our context specific escaping methods for wp_json_encode().
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 months ago
|
|
#36087
|
Migration plan from insecure RNG fallback
|
|
Security
|
normal
|
normal
|
Future Release
|
enhancement
|
|
6 years ago
|
|
#57424
|
Specific hook for Content Security Policy
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#60470
|
Use `filter_input` instead of superglobals where possible
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
#36177
|
default htaccess should include security measures
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
19 months ago
|
|
#55514
|
2FA by default for WordPress
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
3 years ago
|
|
#43215
|
Allow wp_kses to pass allowed CSS properties
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
8 months ago
|
|
#53902
|
Automating the creation of inline javascript and inline stylesheet nonces or hashes
|
|
Security
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
2 years ago
|
|
#58174
|
A shortcode block that evaluates to nothing, renders as a space in the HTML
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#60887
|
After upgrade to WordPress 6.4.3, do_shortcode no longer works in page templates
|
|
Shortcodes
|
normal
|
critical
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
#58469
|
Changeset 55832 broke shortcodes saved in block attributes and rendered serverside
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#33134
|
Complex Nested Shortcodes Inside of Attributes Are Not Processed Left-to-Right
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#43725
|
Multiple instances of opening / closing shortcode only works when closing tag is provided
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
6 years ago
|
|
#34814
|
Presence of "Less than sign" < adds additional closing shortcode tag.
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#37238
|
Right-aligned captions with embedded iframes get removed in Visual mode
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#61007
|
Shortcode aren't paste inline in paragraphs
|
|
Shortcodes
|
normal
|
major
|
Awaiting Review
|
defect (bug)
|
|
23 months ago
|
|
#49955
|
Shortcode escaping not correctly handled when followed by enclosing shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
6 years ago
|
|
#58386
|
Shortcode generated by a block element is not executed in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#38713
|
Shortcodes and utf-8 no-break whitespace (\xc2\xa0)
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
#55406
|
Shortcodes don't work inside srcset attribute
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
#58397
|
Shortcodes in patterns are not rendered in templates
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#52567
|
Shortcodes in separate <p> tags appear on same line in browser
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#35545
|
Unexpected behavior of wp.shortcode.regexp
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#45377
|
Video Shortcode Ajax Issue
|
|
Shortcodes
|
normal
|
minor
|
Future Release
|
defect (bug)
|
|
8 years ago
|
|
#25820
|
[embed] shortcode can't be escaped like others
|
|
Shortcodes
|
normal
|
minor
|
|
defect (bug)
|
|
7 years ago
|
|
#43456
|
`wp_html_split` <script>
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
8 years ago
|
|
#44571
|
force_balance_tags breaks JavaScript
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
22 months ago
|
|
#40958
|
force_balance_tags breaks Ninjaforms and probably other plugins that output html within js.
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
17 months ago
|
|
#33213
|
has_shortcode spec in 4.3
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#34983
|
shortcodes not working in input fields
|
|
Shortcodes
|
normal
|
normal
|
|
defect (bug)
|
|
7 years ago
|
|
#6984
|
wpautop() formats the the contents of shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
7 years ago
|
|
#46412
|
Make shortcode attributes case-insensitive? shortcode_parse_atts
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
|
#60200
|
Search functionality does not search shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
|
#29661
|
Should Shortcode Attributes Allow HTML Special Characters?
|
|
Shortcodes
|
normal
|
normal
|
|
enhancement
|
|
7 years ago
|
|
#36958
|
extending has_shortcode to allow searching in custom fields
|
|
Shortcodes
|
normal
|
normal
|
|
enhancement
|
|
7 years ago
|
|
#35179
|
playlist shortcode needs an option to not loop
|
|
Shortcodes
|
normal
|
normal
|
|
enhancement
|
|
7 years ago
|
|
#41086
|
Conditional loading of CSS files from (for example) shortcodes
|
|
Shortcodes
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
9 years ago
|
|
#58819
|
Critical error on this website
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
3 years ago
|
|
#50895
|
False information about writable files in Site Health Info
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
|
#48399
|
Recovery mode can stick the admin in a bad state
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
7 years ago
|
|
#51830
|
Site Health Themes checkout isn't correct about automatic usage of default theme or themes condition in case of a broken theme
|
|
Site Health
|
normal
|
normal
|
Future Release
|
defect (bug)
|
|
6 years ago
|
|
#63058
|
Site Health: Directory size stuck in loading state
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
15 months ago
|
|
#55280
|
Unsupported operand types in Site Health
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
2 years ago
|
|
#61577
|
health check count display bug
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
12 days ago
|
|
#52011
|
'The REST API encountered an unexpected result' should be a critical error
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#62994
|
Add a site health check for global table schemas
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
17 months ago
|
|
#50055
|
Add more user-actionable information to the timezone health check
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
#56376
|
Add wp_is_ini_value_changeable( 'memory_limit' ) yes or no to class WP_Debug_Data
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#53230
|
Allow nested arrays to be displayed in site health.
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#61743
|
Capture and inform users when plugins or themes are `_doing_it_wrong()`
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
#52014
|
Change the phrase 'Learn more about debugging in WordPress.' for a clearer instruction such as 'Follow this guide to find out the source of the problem'.
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#54116
|
Check ImageMagick version 6/7
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
#52652
|
Check for display_errors in Site Health
|
|
Site Health
|
normal
|
normal
|
Future Release
|
enhancement
|
|
3 years ago
|
|
#56276
|
Check hosting compatibility for Mobile Application to work with the site
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
3 years ago
|
|
#52799
|
Easy HTTPS Redirects in WordPress Dashboard
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
5 years ago
|
|
#47765
|
Email from improved fatal error protection
|
|
Site Health
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
|
#56035
|
Error logging improvements
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#63634
|
Expand servehappy to detect MariaDB/MySQL versions with very short support periods
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
13 months ago
|
|
#50770
|
Facilitate async debug entries in Site Health Info
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#51816
|
Implement auto recovery mode during auto update cron
|
|
Site Health
|
normal
|
normal
|
Future Release
|
enhancement
|
|
6 years ago
|
|
#48051
|
Keeping default theme but removing inactive themes?
|
|
Site Health
|
normal
|
trivial
|
Awaiting Review
|
enhancement
|
|
7 years ago
|
|
#53024
|
List https functionality health check failures as critical
|
|
Site Health
|
normal
|
normal
|
Future Release
|
enhancement
|
|
5 years ago
|
|
#50272
|
Move current admin footer reminder when running development version to Site Health
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#49817
|
Simple Site Health Improvement to Check for Plugin Compatibility wiith Latest WP Version Release
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
#54338
|
Site Health dashboard: "insecure PHP"
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
2 years ago
|
|
#47426
|
Site Health should check for incompatible plugins and plugins no longer maintained
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
#54584
|
Site Health should flag PHP versions in the dev-stable branch
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
4 years ago
|
|
#51326
|
Site Health: Add all constants used by core
|
|
Site Health
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
|
15 months ago
|
|
#62304
|
Site Health: Allow dismissing warnings
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
21 months ago
|
|
#50018
|
Site Health: is_writable() check when there are more than 1 theme directories
|
|
Site Health
|
normal
|
normal
|
Future Release
|
enhancement
|
|
4 years ago
|
|
#50745
|
Visualisation of site health could be better
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
6 years ago
|
|
#52916
|
can_perform_loopback() should not rely on wp-cron.php check
|
|
Site Health
|
normal
|
minor
|
Awaiting Review
|
enhancement
|
|
5 years ago
|
|
#54039
|
site health can probably do better job at detecting if imagick supports PDF
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
|
5 years ago
|
|
#56258
|
Add IPv6 availability check in Site Health
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
2 years ago
|
|
#60508
|
Add a plugin dependency section to Site Health
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
2 years ago
|
|
#54017
|
Add an Update Log (to site health?)
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
5 years ago
|
|
#61967
|
Allow site health managment
|
|
Site Health
|
normal
|
normal
|
Awaiting Review
|
feature request
|
|
8 months ago
|
|
#53572
|
An "acknowledged" category for site health check for things managed outside of WordPress
|
|
Site Health
|
normal
|
trivial
|
Awaiting Review
|
feature request
|
|
5 years ago
|
|
#53014
|
Health check should list all feature flags in core and show which features the current theme supports
|
|
Site Health
|
normal
|
normal
|
Future Release
|
feature request
|
|
3 years ago
|
|
#50787
|
Consolidate the logic for displaying WP & PHP compatibility messages for themes
|
SergeyBiryukov*
|
Site Health
|
normal
|
normal
|
Future Release
|
task (blessed)
|
|
5 years ago
|
|
#54010
|
Redirect from /sitemap.xml to /wp-sitemap.xml needs to be 301 and not 302
|
|
Sitemaps
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
|
4 years ago
|
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png){kind=logo}
