WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
wp redirect wp redirect
Plugin Check reported a security-sensitive coding pattern that needs review.
Why It Shows Up
The finding came from a security-focused WordPress coding standard or Plugin Check rule.
Why It Matters
Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.
How to Fix
- Identify the untrusted value or privileged action involved.
- Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
- Rerun Plugin Check after the code path is fixed.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #451 | Easy Modal | 24 | 564 | 299 | 7k+ | Unsafe printing function | ||
| #452 | E-cab Taxi Booking Manager for Woocommerce | 24 | 356 | 1,462 | 2k+ | Non-prefixed global variable | ||
| #453 | eCommerce Product Catalog Plugin for WordPress | 24 | 621 | 3,177 | 7k+ | Non-prefixed function | ||
| #454 | ELEX WooCommerce Request a Quote | 24 | 398 | 266 | 2k+ | Request data is not unslashed | ||
| #455 | EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents | 24 | 711 | 1,588 | 100k+ | Output is not escaped | ||
| #456 | Enable Media Replace | 24 | 212 | 276 | 600k+ | Output is not escaped | ||
| #457 | Event Tickets and Registration | 24 | 3,409 | 4,217 | 90k+ | Non-prefixed global variable | ||
| #458 | Etsy Integration For WooCommerce | 24 | 1,246 | 4,643 | 900 | Non-prefixed global variable | ||
| #459 | FeedWordPress | 24 | 496 | 319 | 9k+ | Missing Arg Domain | ||
| #460 | Fix Alt Text | 24 | 544 | 346 | 1k+ | Non Singular String Literal Domain | ||
| #461 | FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution | 24 | 193 | 753 | 80k+ | Direct Query | ||
| #462 | Food Store – Online Food Delivery & Pickup | 24 | 862 | 1,941 | 1k+ | Non-prefixed global variable | ||
| #463 | Force Sell for WooCommerce | 24 | 697 | 455 | 600 | Text Domain Mismatch | ||
| #464 | Formidable PRO2PDF | 24 | 218 | 477 | 1k+ | Non-prefixed global variable | ||
| #465 | Fuse Social Floating Sidebar | 24 | 1,838 | 1,578 | 10k+ | Non-prefixed global variable | ||
| #466 | FV Simpler SEO | 24 | 766 | 308 | 2k+ | Text Domain Mismatch | ||
| #467 | GD Mail Queue | 24 | 502 | 582 | 700 | Output is not escaped | ||
| #468 | Cookie Banner for GDPR / CCPA – WPLP Cookie Consent | 24 | 1,214 | 1,924 | 9k+ | Non-prefixed global variable | ||
| #469 | Genealogical Tree – Family Tree & Ancestry for WordPress | 24 | 560 | 1,641 | 600 | Non-prefixed global variable | ||
| #470 | GEO my WP | 24 | 554 | 2,091 | 3k+ | Non-prefixed hook name | ||
| #471 | Connector Wizard (formerly LC Wizard) | 24 | 249 | 448 | 1k+ | Non-prefixed function | ||
| #472 | Assets manager, dequeue scripts, dequeue styles for WordPress | 24 | 592 | 255 | 2k+ | Output is not escaped | ||
| #473 | ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) | 24 | 158 | 436 | 300k+ | Nonce verification recommended | ||
| #474 | Simple Calendar – Google Calendar Plugin | 24 | 2,053 | 592 | 50k+ | Missing direct file access protection | ||
| #475 | Grid/List View for WooCommerce | 24 | 1,116 | 546 | 2k+ | Output is not escaped | ||
| #476 | GS Behance Portfolio – Display Projects, Gallery & Slider | 24 | 855 | 1,617 | 400 | Non-prefixed global variable | ||
| #477 | Hide Shipping Method For WooCommerce | 24 | 946 | 1,447 | 10k+ | Non-prefixed global variable | ||
| #478 | HT Mega Addons for Elementor – Elementor Widgets & Template Builder | 24 | 12,352 | 1,474 | 70k+ | Text Domain Mismatch | ||
| #479 | Import and export users and customers | 24 | 1,040 | 357 | 70k+ | Unsafe printing function | ||
| #480 | Infinite Uploads – Offload Media and Video to Cloud Storage | 24 | 586 | 722 | 800 | Direct Query | ||
| #481 | Social Slider Feed – Social Media Feed & Gallery Widgets | 24 | 929 | 707 | 20k+ | Non-prefixed global variable | ||
| #482 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | Output is not escaped | ||
| #483 | Joli Table Of Contents | 24 | 653 | 1,755 | 7k+ | Non-prefixed global variable | ||
| #484 | Kenta Blocks – Responsive Blocks and block templates library | 24 | 564 | 1,405 | 2k+ | Non-prefixed global variable | ||
| #485 | Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress | 24 | 1,855 | 953 | 100k+ | Output is not escaped | ||
| #486 | LearnPress – Backup & Migration Tool | 24 | 385 | 469 | 5k+ | Output is not escaped | ||
| #487 | LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes | 24 | 414 | 1,176 | 10k+ | Non-prefixed global variable | ||
| #488 | Load More Products for WooCommerce | 24 | 731 | 459 | 20k+ | Text Domain Mismatch | ||
| #489 | Local Delivery Drivers for WooCommerce | 24 | 1,832 | 1,483 | 900 | Non-prefixed global variable | ||
| #490 | Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets | 24 | 969 | 2,140 | 7k+ | Non-prefixed global variable | ||
| #491 | Generate Images (AI) – Magic Post Thumbnail | 24 | 1,940 | 1,761 | 6k+ | Non-prefixed global variable | ||
| #492 | Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails | 24 | 4,696 | 1,480 | 5k+ | Text Domain Mismatch | ||
| #493 | Mailchimp for WooCommerce | 24 | 523 | 663 | 200k+ | Non-prefixed global variable | ||
| #494 | MailerPress – Newsletter, email marketing & AI automation | 24 | 805 | 3,931 | 1k+ | Direct Query | ||
| #495 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | Unsafe printing function | ||
| #496 | Admin Tweaks | 24 | 1,507 | 206 | 900 | Text Domain Mismatch | ||
| #497 | Mass Pages/Posts Creator | 24 | 736 | 1,364 | 1k+ | Non-prefixed global variable | ||
| #498 | Media Library Folders | 24 | 889 | 807 | 10k+ | Text Domain Mismatch | ||
| #499 | Min and Max Quantity for WooCommerce | 24 | 603 | 459 | 20k+ | Text Domain Mismatch | ||
| #500 | Receive customer payments on Woocommerce | 24 | 549 | 1,419 | 1k+ | Non-prefixed global variable |
