PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#801Translate WordPress with ConveyThis – AI Multilingual Plugin261592971k+Non-prefixed global variable
#802CP Multi View Events Calendar2686439900Non-prefixed global variable
#803Cyclone Demo Importer261,77844810k+Text Domain Mismatch
#804WP Frontend Admin – Display WP Admin Pages in the Frontend26347337400Non Singular String Literal Domain
#805Accept Donations with PayPal & Stripe2691657210k+Unsafe printing function
#806Easy Post Views Count265341,1802k+Non-prefixed global variable
#807ELEX WooCommerce Google Shopping (Google Product Feed)262262421k+Text Domain Mismatch
#808ezCache2612728810k+Direct Query
#809FlagShip WooCommerce Shipping26495188400Non Singular String Literal Domain
#810Fluent Support – Helpdesk & Customer Support Ticket System269227210k+Direct Query
#811Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager2611359790k+Non-prefixed global variable
#812FV Antispam26332239900Output is not escaped
#813Translate WordPress – Google Language Translator26200317100k+Non-prefixed global variable
#814GPTranslate – Multilingual AI Translation for WordPress: Automatically Translate Websites26286216500badly named files
#815Hide Admin Bar Based on User Roles265491,34520k+Non-prefixed global variable
#816Ibtana – WordPress Website Builder2617340910k+Non-prefixed global variable
#817Kadence Central – Site Management, Backups, Security, and Reporting2646221330k+Text Domain Mismatch
#818Login Widget With Shortcode263351986k+wp function not compatible with requires wp
#819Omise Payments263582562k+Output is not escaped
#820Online Contact Widget-多合一在线客服插件2670880800Non Singular String Literal Domain
#821Open User Map – Interactive Leaflet Maps2689598810k+Non-prefixed global variable
#822Organic Builder Widgets – Simple WordPress Page Builder261,0341254k+Output is not escaped
#823Paytium: Mollie payment forms & donations265065513k+Unsafe printing function
#824LoginWP (Formerly Peter's Login Redirect)2640127890k+Output is not escaped
#825Crowdsignal Dashboard – Polls, Surveys & more26481491200k+Unsafe printing function
#826Post List Designer – Category Post, Recent Post, Post List265421,3201k+Non-prefixed global variable
#827Premmerce User Roles265971,357600Non-prefixed global variable
#828Role Based Pricing for Woo by Meow Crew265481,3542k+Non-prefixed global variable
#829Send Users Email – Email Subscribers, Email Marketing Newsletter261884155k+Non-prefixed global variable
#830SP Move Login268812156k+Text Domain Mismatch
#831Sliced Invoices – WordPress Invoice Plugin266844555k+Output is not escaped
#832Video Gallery – Vimeo and YouTube Gallery265617946k+Non-prefixed global variable
#833Carousel, Recent Post Slider and Banner Slider265281,4098k+Non-prefixed global variable
#834StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart261254202k+Non-prefixed global variable
#835SV Proven Expert26747380900Output is not escaped
#836Tag Groups is the Advanced Way to Display Your Taxonomy Terms263512323k+Unsafe printing function
#837Theater for WordPress26348344600Output is not escaped
#838Ultimate Reviews26515345500Output is not escaped
#839User Avatar261041734k+Non-prefixed constant
#840User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch
#841Parcel Pro26171220600Output is not escaped
#842Premmerce SEO for WooCommerce265501,2851k+Non-prefixed global variable
#843Set Price Note (Units, Offers, Editions) for WooCommerce265961,307800Non-prefixed global variable
#844Shipping Method Display Style for WooCommerce265291,3082k+Non-prefixed global variable
#845XL NMI Gateway for WooCommerce266954361k+Text Domain Mismatch
#846Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)262,6522,09310k+Text Domain Mismatch
#847WPCOM Member264326381k+Non Singular String Literal Domain
#848Divi Torque Lite – Divi Modules for the Divi Builder & Theme2714627450k+Non-prefixed global variable
#849Amazon Product in a Post Plugin27362416800Output is not escaped
#850Apollo13 Framework Extensions2717127320k+Non-prefixed global variable