PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#751TrackShip for WooCommerce254059546k+Non-prefixed global variable
#752TranslatePress – Translate Multilingual sites with AI Translation254991,639400k+Non-prefixed hook name
#753TrueBooker – Appointment Booking and Scheduler System255292,746600Non-prefixed global variable
#754Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor256911,58150k+Non-prefixed global variable
#755Ultimate Bootstrap Elements for Elementor256,3261226k+Text Domain Mismatch
#756Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#757Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#758VikAppointments Services Booking Calendar259,7535,207500Output is not escaped
#759VikBooking Hotel Booking Engine & PMS2513,2518,3168k+Output is not escaped
#760VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#761VikRestaurants Table Reservations and Take-Away2511,6444,932600Output is not escaped
#7623D viewer by Visody258321,3221k+Non-prefixed global variable
#763WC Disable Zoom / Lightbox features255291,297700Non-prefixed global variable
#764Product Customer List for WooCommerce256101,3349k+Non-prefixed global variable
#765weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot252795184k+Non-prefixed global variable
#766Advanced Shipment Tracking for WooCommerce2549970460k+Non-prefixed global variable
#767Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins259071,41810k+Non-prefixed global variable
#768Bulk Edit Products for WooCommerce – WP Sheet Editor2595796810k+Text Domain Mismatch
#769Digital Goods (Checkout Field Editor) for WooCommerce Checkout255391,4793k+Non-prefixed global variable
#770Dynamic Pricing and Discount Rules for WooCommerce255311,569600Non-prefixed global variable
#771Bulk Edit Coupons for WooCommerce – WP Sheet Editor251,022982500Text Domain Mismatch
#772Flat Rate Shipping Method for WooCommerce251,2421,7785k+Non-prefixed global variable
#773Product Table for WooCommerce251838965k+Non-prefixed global variable
#774Pay with Vipps and MobilePay for WooCommerce258465145k+Output is not escaped
#775WP 2FA – Two-factor authentication for WordPress25283716100k+Non-prefixed global variable
#776Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#777WP Coupons and Deals – WordPress Coupon Plugin259141,4601k+Non-prefixed global variable
#778WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards251,4311,27010k+Output is not escaped
#779WP Review Slider251,1862,2796k+Non-prefixed global variable
#780WP Go Maps – Google Map, OpenStreetMap, Leaflet Map254,9961,008300k+Unsafe printing function
#781WP Google Review Slider251,3662,58430k+Non-prefixed global variable
#782WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, SSL Security258751,76450k+Non-prefixed global variable
#783Nested Pages2567456090k+Non-prefixed global variable
#784Bulk Edit Posts and Products in Spreadsheet259349448k+Text Domain Mismatch
#785Wp Social Login and Register Social Counter258073890k+Non-prefixed global variable
#786WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#787WP Super Cache258009891m+Output is not escaped
#788WP Time Slots Booking Form254391,1371k+Non-prefixed global variable
#789WP TripAdvisor Review Slider251,0632,5828k+Non-prefixed global variable
#790Team Members Showcase255911,4944k+Non-prefixed global variable
#791WPvivid — Backup, Migration & Staging259001,461900k+Non-prefixed namespace
#792XT Quick View for WooCommerce251,0621,798400Non-prefixed global variable
#793Video Gallery – YouTube Gallery, Playlist & Video Grid252751,0662k+Non-prefixed hook name
#794AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available)262862917k+Text Domain Mismatch
#795AI Content Writing Assistant261,069516700Text Domain Mismatch
#796Bangladeshi Payments Mobile – QR Code & Transaction Reports265351,2801k+Non-prefixed global variable
#797Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More269727010k+error log error log
#798Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty26113671400k+Non-prefixed global variable
#799Conditional Logic for Woo Product Add-ons265751,352500Non-prefixed global variable
#800Database for Contact Form 7, WPforms, Elementor forms2631748960k+Non-prefixed global variable