[wp-trac] [WordPress Trac] #64198: Notes are accessible to any authenticated user with `edit_posts` capability using query args

WordPress Trac noreply at wordpress.org
Fri Nov 7 18:55:06 UTC 2025


#64198: Notes are accessible to any authenticated user with `edit_posts` capability
using query args
--------------------------+------------------------------
 Reporter:  desrosj       |       Owner:  adamsilverstein
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  6.9
Component:  Comments      |     Version:  trunk
 Severity:  normal        |  Resolution:  fixed
 Keywords:  has-patch     |     Focuses:
--------------------------+------------------------------
Changes (by adamsilverstein):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"61183" 61183]:
 {{{
 #!CommitTicketReference repository="" revision="61183"
 Comments: ensure notes never show on the comments page.

 Fix an issue where adding comment_type=note as a query parameter to the
 wp-admin/edit-comments.php page would unexpectedly cause notes to show.
 Notes are different from comments - prevent them from showing on the
 comment list table.

 Props adamsilverstein, desros, soyebsalar01j.
 Fixes #64198.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64198#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list