Issues

• Do not throw WordPress.Security.EscapeOutput.OutputNotEscaped on apply_shortcodes()

  WordPress/WordPress-Coding-Standards#2781 · Filter by author tbradsha opened on Oct 13, 2026

• ContextHelper::is_token_namespaced() method: be stricter about accepted tokens

  Component: HelpersType: Chores/Cleanup
  WordPress/WordPress-Coding-Standards#2778 · Filter by author jrfnl opened on Sep 25, 2026

• WPDBTrait::is_wpdb_method_call(): false positive for a method call on a non-wpdb object

  Component: HelpersPriority: LowType: Bug
  WordPress/WordPress-Coding-Standards#2759 · Filter by author rodrigoprimo opened on Jul 10, 2026

• Evaluate switching from branch protection rules to branch rulesets

  Type: Chores/Cleanup
  WordPress/WordPress-Coding-Standards#2751 · Filter by author GaryJones opened on Jul 6, 2026
  1

• InputNotSanitized / MissingUnslash: (int) ( $_GET['x'] ?? 0 ) not recognised as cast-sanitised

  Component: ExtraType: Bug
  WordPress/WordPress-Coding-Standards#2723 · Filter by author dd32 opened on Apr 20, 2026
  1

• DB/PreparedSQLPlaceholders: false negatives for namespaced and method calls to sprintf()

  Component: CoreFocus: DBType: Bug
  WordPress/WordPress-Coding-Standards#2720 · Filter by author rodrigoprimo opened on Apr 6, 2026
  1

• 4.0 | Arrays/ArrayDeclarationSpacing: remove the deprecated allow_single_item_single_line_associative_arrays property

  Component: CoreType: Chores/Cleanup
  WordPress/WordPress-Coding-Standards#2705 · Filter by author rodrigoprimo opened on Feb 25, 2026 · 4.0.0

• Last 3.x minor | Arrays/ArrayDeclarationSpacing: hard-deprecate the allow_single_item_single_line_associative_arrays property

  Component: CoreType: Chores/Cleanup
  WordPress/WordPress-Coding-Standards#2704 · Filter by author rodrigoprimo opened on Feb 25, 2026 · 3.x Last
  2

• 4.0 | Arrays/ArrayDeclarationSpacing: rename the AssociativeArrayFound error code

  Component: Core
  WordPress/WordPress-Coding-Standards#2692 · Filter by author rodrigoprimo opened on Feb 3, 2026 · 4.0.0

• Security/EscapeOutput: incorrect handling of namespaced functions named like array walking functions

  Component: ExtraPriority: LowType: Bug
  WordPress/WordPress-Coding-Standards#2674 · Filter by author rodrigoprimo opened on Dec 16, 2025

• Review/Improve case-insensitive handling of custom function lists

  Component: HelpersType: Bug
  WordPress/WordPress-Coding-Standards#2670 · Filter by author jrfnl opened on Dec 9, 2025
  2

• ContextHelper::is_in_function_call(): bug when namespaced function matches name of a valid function

  Component: HelpersType: Bug
  WordPress/WordPress-Coding-Standards#2665 · Filter by author rodrigoprimo opened on Dec 4, 2025

• DB/PreparedSQL: incorrect error identification for namespaced function calls

  Focus: DBType: Bug
  WordPress/WordPress-Coding-Standards#2648 · Filter by author rodrigoprimo opened on Nov 17, 2025

• WP/CronInterval: incorrect handling of namespaced first-class callables

  Component: ExtraFocus: Modern PHPType: Bug
  WordPress/WordPress-Coding-Standards#2644 · Filter by author rodrigoprimo opened on Nov 11, 2025
  1

• NamingConventions/ValidVariableName: how should promoted properties be handled?

  Component: CoreFocus: Modern PHP
  WordPress/WordPress-Coding-Standards#2639 · Filter by author rodrigoprimo opened on Nov 3, 2025
  2

• Should WordPress.PHP.DevelopmentFunctions.error_log_print_r be relaxed a little?

  Status: Awaiting feedback
  WordPress/WordPress-Coding-Standards#2635 · Filter by author thomas-price opened on Oct 21, 2025
  3

• WordPress.Utils.I18nTextDomainFixer and PHPCS 4.0

  WordPress/WordPress-Coding-Standards#2634 · Filter by author rodrigoprimo opened on Oct 17, 2025
  5

• Don't allow input type="password" to have a value

  WordPress/WordPress-Coding-Standards#2632 · Filter by author kkmuffme opened on Oct 16, 2025

• Is WordPressCS compatible with PHPCS 4.0.0 ?

  Type: Question
  WordPress/WordPress-Coding-Standards#2622 · Filter by author epigeyre opened on Sep 23, 2025
  4

• Advance notice: strategy for dropping support for PHPCS 3.x

  Meta: Repo
  WordPress/WordPress-Coding-Standards#2607 · Filter by author jrfnl opened on Sep 11, 2025 · 4.0.0

• WP/AlternativeFunctions: fails to detect namespaced and class-based function/constant calls

  Component: ExtraStatus: Requirement not metType: Bug
  WordPress/WordPress-Coding-Standards#2603 · Filter by author rodrigoprimo opened on Sep 9, 2025 · Future Release
  1

• WP/AlternativeFunctions: remove invalid STDIN/STDOUT/STDERR resource handling

  Component: ExtraStatus: Needs investigationType: Enhancement
  WordPress/WordPress-Coding-Standards#2602 · Filter by author rodrigoprimo opened on Sep 9, 2025
  3

• wp_send_json/wp_send_json_error/wp_send_json_success XSS/should require escaping

  WordPress/WordPress-Coding-Standards#2582 · Filter by author kkmuffme opened on Aug 23, 2025

• Meta: Add sniffs for coding standards within this repo

  Meta: RepoStatus: Close candidateType: Chores/Cleanup
  WordPress/WordPress-Coding-Standards#2577 · Filter by author johnbillion opened on Aug 20, 2025
  1

• Flag any manual construction of inline <script> tags

  Component: CoreFocus: SecurityType: Enhancement
  Enhancement

  WordPress/WordPress-Coding-Standards#2575 · Filter by author westonruter opened on Aug 16, 2025
  2