PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#701Bulk Page Generator – LPagery256701,9263k+Non-prefixed global variable
#702M Chart255581,4653k+Non-prefixed global variable
#703Media Cloud Sync251,0952741k+Exception output is not escaped
#704Minimum and Maximum Quantity for WooCommerce255561,4363k+Non-prefixed global variable
#705Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce25492216400Text Domain Mismatch
#706MyFatoorah – WooCommerce25191893k+Output is not escaped
#707All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements2535259740k+Non-prefixed global variable
#708NOWPayments for WooCommerce – Crypto Payment Gateway255341,3064k+Non-prefixed global variable
#709Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content256811,517300k+Non-prefixed global variable
#710Paymob for WooCommerce254433505k+Text Domain Mismatch
#711PDF Invoice for WooCommerce + Drag and Drop Template Builder251,008216400wp function not compatible with requires wp
#712Piotnet Forms251873743k+Alternative PHP tag found
#713Plover Kit – Blocks, Patterns, Responsive Layout and Gutenberg Editor Enhancements256881,3833k+Non-prefixed global variable
#714Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls254891,4137k+Non-prefixed global variable
#715Post Carousel Divi256861,3012k+Non-prefixed global variable
#716Post Snippets – Custom WordPress Code Snippets Customizer258081,65420k+Non-prefixed global variable
#717Premmerce257121,411500Non-prefixed global variable
#718Premmerce Redirect Manager257561,407500Non-prefixed global variable
#719Premmerce Product Search for WooCommerce255961,350900Non-prefixed global variable
#720Premmerce Wholesale Pricing for WooCommerce256351,377400Non-prefixed global variable
#721QuadMenu – Mega Menu252,12845510k+Output is not escaped
#722Qyrr – simply and modern QR-Code creation255311,3132k+Non-prefixed global variable
#723Rate limiting for Contact Form 7255471,306500Non-prefixed global variable
#724Really Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products258111,4945k+Non-prefixed global variable
#725Restrict – membership, site, content and user access restrictions for WordPress255391,4012k+Non-prefixed global variable
#726Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor2599825k+Non-prefixed global variable
#727BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript252045464k+Non-prefixed global variable
#728Secure Copy Content Protection and Content Locking2595879920k+Output is not escaped
#729Sensei LMS – Online Courses, Quizzes, & Learning25569289k+Nonce verification recommended
#730Seo Optimized Images255261,31610k+Non-prefixed global variable
#731Simple Link Directory – AI Powered251334202k+Non-prefixed global variable
#732SimpLy Gallery255321,42240k+Non-prefixed global variable
#733Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2595873860k+Text Domain Mismatch
#734Sitemap by click5252861326k+Unsafe printing function
#735Affiliate Program Suite — SliceWP Affiliates251,2912,08910k+Output is not escaped
#736Smart Image Resize for WooCommerce255824047k+Text Domain Mismatch
#737Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management2536792310k+SQL query is not prepared
#738Smart phone field for Gravity Forms255401,3166k+Non-prefixed global variable
#739Spice Blocks255361,3001k+Non-prefixed global variable
#740STAGGS – Product Configurator Toolkit256262,180400Non-prefixed global variable
#741Survey Maker by AYS255672,3976k+Non-prefixed global variable
#742TablePress – Tables in WordPress made easy258472,174600k+Non-prefixed global variable
#743Tamara Checkout256012282k+Exception output is not escaped
#744Tax Exemption for WooCommerce255521,402700Non-prefixed global variable
#745TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder257051,58710k+Non-prefixed global variable
#746Themify Event Post253971433k+Output is not escaped
#747Timeline Express255311479k+Text Domain Mismatch
#748Toocheke Companion254211,1321k+Non-prefixed global variable
#749Travelly – Tour & Travel Booking Manager for WooCommerce | Tour & Hotel Booking Plugin251737261k+Non-prefixed global variable
#750Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental WordPress Plugin251192,7042k+Non-prefixed global variable