PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#601WP-Appbox244183902k+Missing Arg Domain
#602Auto Affiliate Links243764073k+Output is not escaped
#603WP Contact Slider – Contact Form Slider Widget241,3552,5899k+Non-prefixed global variable
#604WP Discourse241031141k+Nonce verification recommended
#605WP Frontend Delete Account245371,3784k+Non-prefixed global variable
#606WP Helper Premium243,9091,5171k+Text Domain Mismatch
#607WP Hotel Booking249011,5327k+Non-prefixed global variable
#608WP Job Portal – AI-Powered Recruitment System for Company or Job Board website24781,1588k+Missing Version
#609WP Layouts243491463k+Text Domain Mismatch
#610WP Meta and Date Remover246651,31490k+Non-prefixed global variable
#611WP Notification Bell247361,591700Non-prefixed global variable
#612WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars248611,57310k+Non-prefixed global variable
#613WP Recipe Maker2449494250k+Non-prefixed global variable
#614WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77739440k+Text Domain Mismatch
#615WP School Calendar241,3611,721400Non-prefixed global variable
#616WSMS (formerly WP SMS) – SMS & MMS Notifications with OTP and 2FA for WooCommerce24911,7257k+Non-prefixed hook name
#617WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#618WP Travel – Ultimate Travel Booking System, Tour Management Engine242271,9544k+Non-prefixed hook name
#619WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0125,68920k+Non-prefixed global variable
#620Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5812,109100k+Output is not escaped
#621WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#622WPAdverts – Classifieds Plugin241,3084964k+Output is not escaped
#623WPeMatico RSS Feed Fetcher241,37858710k+Output is not escaped
#624WPGSI: Spreadsheet Integration247841,5872k+Non-prefixed global variable
#625WPIDE – File Manager & Code Editor246121,39940k+Non-prefixed global variable
#626WpStream – Live Streaming, Video on Demand, Pay Per View241,7257423k+Text Domain Mismatch
#627XT Variation Swatches for WooCommerce241,0331,809500Non-prefixed global variable
#628Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#6293DPrint Lite251751,029700Non-prefixed global variable
#630Adminify – White Label, Admin Menu Editor, Login Customizer255461,3797k+Non-prefixed global variable
#631AdRotate Banner Manager251,36384620k+Unsafe printing function
#632Advanced Floating Content Lite256431,3487k+Non-prefixed global variable
#633AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing256651,48610k+Non-prefixed global variable
#634Affiliates256891,4832k+Output is not escaped
#635AliExpress Dropshipping Plugin for WooCommerce Stores255557344k+Text Domain Mismatch
#636All 404 Redirect to Homepage25140301200k+date date
#637Booking for Appointments and Events Calendar – Amelia251,48748090k+Exception output is not escaped
#638Animated Number Counters254631,9322k+Non-prefixed global variable
#639Appointment Booking Calendar253271,0551k+Non-prefixed global variable
#640bbp style pack251,4191,7916k+Output is not escaped
#641Beaver Builder Page Builder – Drag and Drop Website Builder254,4631,819100k+Text Domain Mismatch
#642BlockSpare – Gutenberg Post Grid Blocks for News, Magazine & Blog Websites251,3271,71410k+Non-prefixed global variable
#643Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non-prefixed global variable
#644Booking Activities251,0361,4693k+Output is not escaped
#645Booking Calendar Contact Form25371884500Input is not validated
#646Bookit — Booking & Appointment Calendar255651,4584k+Non-prefixed global variable
#647Online Scheduling and Appointment Booking System – Bookly251,08888860k+SQL query is not prepared
#648Broken Link Checker25727600500k+Output is not escaped
#649BuddyPress Docs252844217k+Nonce verification recommended
#650Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor251,0411,0164k+Text Domain Mismatch