PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#501MT Addons for Elementor243,0731,4422k+Text Domain Mismatch
#502Musician's Pack for Elementor – Music Website Widgets & Templates241,725228500Text Domain Mismatch
#503Music Player for Elementor – Audio Player & Podcast Player246081,30210k+Non-prefixed global variable
#504New User Approve246521,41520k+Non-prefixed global variable
#505Newsletter – Send awesome emails from WordPress248982,219200k+Non-prefixed global variable
#506Newsletter Subscription Form – User Subscriptions Form, Capture Email243858291k+Non-prefixed global variable
#507Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2417575910k+Nonce verification recommended
#508Ninja Forms – The Contact Form Builder That Grows With You247491,533600k+Nonce verification recommended
#509NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar2426740440k+Non-prefixed hook name
#510Opt-Out for Google Analytics (DSGVO / GDPR)242901,9783k+Non-prefixed global variable
#511Overlay Image Divi Module245761,3012k+Non-prefixed global variable
#512Pagar.me para WooCommerce245491165k+Text Domain Mismatch
#513Page Builder: Pagelayer – Drag and Drop website builder24769556400k+Output is not escaped
#514Pagination Styler for WooCommerce247994481k+Output is not escaped
#515Participants Database249508947k+SQL query is not prepared
#516PayPal Brasil para WooCommerce245543291k+Unsafe printing function
#517PDF for Gravity Forms + Drag And Drop Template Builder241,457260400wp function not compatible with requires wp
#518Database Manager – WP Adminer241,0052,75220k+Non-prefixed global variable
#519PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1762,416500k+Non-prefixed namespace
#520Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider245991,53210k+Non-prefixed global variable
#521Product Catalog Simple241,5551,9821k+Output is not escaped
#522Premmerce Brands for WooCommerce247001,3442k+Non-prefixed global variable
#523Premmerce Product Filter for WooCommerce248171,4862k+Non-prefixed global variable
#524Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More242,1544,8331k+Non-prefixed global variable
#525Product Tabs Manager for WooCommerce246344822k+Text Domain Mismatch
#526Product Watermark for WooCommerce246854592k+Text Domain Mismatch
#527Products Compare for WooCommerce241,0226951k+Output is not escaped
#528ProfileGrid – User Profiles, Groups and Communities244842,4615k+Non-prefixed global variable
#529Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors2436982020k+Nonce verification recommended
#530reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#531Registrations for the Events Calendar – Event Registration Plugin244049447k+Non-prefixed global variable
#532PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes2442158310k+Missing Translators Comment
#533RS WP Book Showcase – A Complete Book Catalogue & Library System249103431k+Text Domain Mismatch
#534RSFirewall!245635214k+Output is not escaped
#535RSVP and Event Management243456243k+Direct Query
#536Sales Report for WooCommerce246594511k+Output is not escaped
#537Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#538SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress242393041k+Direct Query
#539SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit246059281k+Non-prefixed global variable
#540SEO Ultimate2443726910k+Output is not escaped
#541Sequential Order Numbers for WooCommerce246984721k+Text Domain Mismatch
#542Servebolt Optimizer241,9586811k+Text Domain Mismatch
#543Service Box Slider246181,410500Non-prefixed global variable
#544Share This Image247441,5821k+Non-prefixed global variable
#545ShiftController Employee Shift Scheduling24358196700Output is not escaped
#546Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#547ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization2492632210k+Output is not escaped
#548Simple Membership242,2971,73440k+Unsafe printing function
#549Simple Social Media Share Buttons – Social Sharing for Everyone2446810120k+Output is not escaped
#550Sitepact's Contact Form 7 Extension For Klaviyo245411,412500Non-prefixed global variable