Skip Navigation

[Closed] WordPress 4.2.3 update breaks shortcodes

This support ticket is created 7 years, 8 months ago. There's a good chance that you are reading advice that it now obsolete.

This is the technical support forum for Toolset - a suite of plugins for developing WordPress sites without writing PHP.

Everyone can read this forum, but only Toolset clients can post in it. Toolset support works 6 days per week, 19 hours per day.

This topic contains 208 replies, has 94 voices.

Last updated by Amir 7 years, 7 months ago.


jackR-3 is correct - although I found a simpler method was to just wrap elements in span tags, so



<span> > </span>


Still seems to be causing errors with other shortcodes though .




Here are two examples of what is not working for me (basically most of the shortcodes that output an image url):

1. Image raw output - if I type this in the view:

<img src="[wpv-post-featured-image raw="true"]" style="width:150px;border:2px solid #ededed;"/>

It becomes this on inspecting the final page output:

<img src="[wpv-post-featured-image raw=" true"]"="" style="width:150px;border:2px solid #ededed;">

2. Div background - if I type this in the view:

 <div style="background:url('[types field="link-thumbnail" output="raw"][/types]');background-size:cover;"></div>

it becomes this on the final page:

<div style="background:url('[types field=" link-thumbnail"="" output="raw" ][="" types]');background-size:cover;"=""></div>

I tried adjusting the quotation marks a few times but couldn't get it to work.
What an awful mess of a wordpress update!



Did you try it without the "raw" attribute. This might mess it up more but removing that for me did the trick earlier today but I was using a custom field and not the featured image field.

<img src="[wpv-post-featured-image]" style="width:150px;border:2px solid #ededed;"/>

No, without the raw it becomes:

<img src="//" class="attachment-thumbnail wp-post-image" alt="u1" />" style="width:150px;border:2px solid #ededed;">

hej toolset.

single quotes works fine for wpcf.
unfortunately all custom functions and evaluation are still suspended at my site even with single quotes!
any ideas?



I think I would just prefer a tool to fix all the content to be compliant with the current standards, but then I'm not a php wizard so what do I know 🙂



All of our developers are online now and we're seeing what can be done. Our first priority it to provide a patch to WordPress core, which will resolve the security exploit, without breaking the shortcodes functionality. I very much hope this works.

I suggest not to mess with site content. There's a chance that we'll restore the previous functionality in WordPress.

I'll update here as soon as we know more. We are working on it right now.

Please give us a bit of time, because we have to reverse engineer all these changes between WordPress 4.2.2 and 4.2.3. Then, try to recreate them in a more sensitive way.


Hey guys,

Appreciate the work you're doing to get this sorted.

@peterh-7 : "Some of my shortcodes inside HTML worked again when I changed the double quotes to single quotes. Anyone else have success with this?"

Yes- that's also worked for me.

I've been able to fix all of our img src tags by changing from double quotes to single quotes.

I'm not having any luck with an iframe embed though if anyone has any ideas/suggestions there... definitely let me know.



Thanks Amir please keep us posted.


Appreciate if you keep us posted.




When setting an image as background the code is not working:

<div class="heroimage" style="background-image:url([wpv-post-featured-image size='slider' raw='true'])"></div>

But setting it just as an ordinary image the same code is working fine:

<div class="heroimage"><img src="[wpv-post-featured-image size='slider' raw='true']" /> </div>

Unfortunately I need the image as a background-image. 🙁


I have exactly the same problem. Types and Views stopped render URL from shortcode in background-image:url([shortcode]); after WP 4.2.3 update.

The topic ‘[Closed] WordPress 4.2.3 update breaks shortcodes’ is closed to new replies.