Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

WordPress/wordpress-develop

              trunk @ 049287a
            

274

Fixes

CVEs

CRITICAL

Peak severity

14.7%

Coverage

Highlights

Auth Bypass: 54 prior fixes. Scrutinize any change in this area.

wp-includes/pluggable.php: most-fixed (9 issues). Treat as high-risk during review.

176 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Reflected/Stored XSS: Dozens of fixes address missing output escaping in admin screens, feeds, widgets, and block serialization; recurring bypasses via entity encoding and protocol validation indicate systemic gaps in context-aware escaping.

Auth Bypass / Privilege Escalation: Frequent missing or incorrect capability checks (e.g., edit_others_posts, assign_term, manage_network_users) across multiple APIs and admin handlers allow unauthorized data access or privilege escalation.

Path Traversal / Arbitrary File Inclusion: Multiple fixes target path validation (UNC, '..', percent signs, realpath checks) but across different sinks (validate_file, include, upload), indicating inconsistent enforcement of path allowlists.