PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#651PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus253621,586100k+Non-prefixed global variable
#652GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time256141,43140k+Non-prefixed global variable
#653Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#654Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode25991,040700k+Non-prefixed global variable
#655Coinbase Business Gateway for WooCommerce255691,317800Non-prefixed global variable
#656Conditional Payment Methods for WooCommerce255481,3981k+Non-prefixed global variable
#657Contact Form DB Divi255331,2993k+Non-prefixed global variable
#658Contact Form Email254098989k+Non-prefixed global variable
#659Coupon Creator256984121k+Output is not escaped
#660CP Contact Form with PayPal25466936800Unsafe printing function
#661CSS & JavaScript Toolbox2515561710k+Non-prefixed class
#662Docket Cache – Object Cache Accelerator2533348120k+Output is not escaped
#663ELEX WooCommerce Dynamic Pricing and Discounts25478748800Text Domain Mismatch
#664WEB-Translation – eTranslation Multilingual252171,057400Non-prefixed function
#665Show Eventbrite Events – Event Feed for Eventbrite255951,525800Non-prefixed global variable
#666Event Genius – Event Management, Events Calendar, Registration, and RSVP251811,579500Non-prefixed global variable
#667Events Made Easy255216,3241k+Non-prefixed function
#668F4 Post Tree255361,332500Non-prefixed global variable
#669FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler253194547k+Non-prefixed global variable
#670Lightbox & Modal Popup WordPress Plugin – FooBox256101,365100k+Non-prefixed global variable
#671Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non-prefixed global variable
#672Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database257161,50910k+Non-prefixed global variable
#673FunnelKit – Funnel Builder for WooCommerce Checkout253,1642,62430k+Text Domain Mismatch
#674Gallery Images Ape255883411k+Output is not escaped
#675Photo Gallery by Ays – Responsive Image Gallery254668201k+Output is not escaped
#676GD Rating System251,5111,0431k+Output is not escaped
#677GD Security Headers254075211k+Output is not escaped
#678GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content25888636k+Non-prefixed global variable
#679Genesis Club Lite25513317900Output is not escaped
#680Simple Giveaways – Grow your business, email lists and traffic with contests259562,384400Non-prefixed global variable
#681WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#682Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation2578931330k+Text Domain Mismatch
#683Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More251,7842,2222k+Non-prefixed global variable
#684Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews256451,5851k+Non-prefixed global variable
#685Cool Author Box – For Widget and Post Content258531,379600Non-prefixed global variable
#686HT Contact Form – Drag & Drop Form Builder for WordPress2516059710k+Non-prefixed global variable
#687Hydra Booking — Appointment Scheduling & Booking Calendar252356992k+Non-prefixed global variable
#688Image SEO – AI-Driven Image SEO Optimizer253503281k+Text Domain Mismatch
#689Independent Analytics – WordPress Analytics Plugin251,1482,293100k+Non-prefixed global variable
#690Instantio — Side Cart & One-Page Checkout for WooCommerce25568369700Output is not escaped
#691IP Location Block2552162410k+Output is not escaped
#692JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin251,5411,5781k+Non-prefixed global variable
#693JoomSport – for Sports: Team & League, Football, Hockey & more255231,7471k+Direct Query
#694kk Star Ratings – Rate Post & Collect User Feedbacks257721,38870k+Non-prefixed global variable
#695Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0191,2652k+Text Domain Mismatch
#696Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256176141m+Unsafe printing function
#697Live Composer – Free WordPress Website Builder251,21642710k+Output is not escaped
#698Local Pickup for WooCommerce255471,3891k+Non-prefixed global variable
#699Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid256561,5065k+Non-prefixed global variable
#700Bulk Page Generator – LPagery256651,9223k+Non-prefixed global variable