PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060957700k+Missing Translators Comment
#52Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#53Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6252,04010k+Direct Query
#54SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#55Comet Cache2185724520k+Output is not escaped
#56Free Downloads WooCommerce214303594k+Output is not escaped
#57Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#58Envo Extra2187760020k+Text Domain Mismatch
#59Eupago Gateway For Woocommerce215762332k+Output is not escaped
#60Filter Everything — WordPress & WooCommerce Filters2164393350k+Non-prefixed global variable
#61Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,118300k+Non-prefixed global variable
#62Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#63Front End Users217192,759400Non-prefixed global variable
#64Ibtana – Ecommerce Product Addons211,5481,7186k+Non Singular String Literal Domain
#65JCH Optimize212,2922774k+Output is not escaped
#66LA-Studio Element Kit for Elementor218,4031,88210k+Text Domain Mismatch
#67Leyka212573,4462k+Request data is not unslashed
#68Mapster WP Maps213,4402,8943k+Text Domain Mismatch
#69Mergado Pack212,323588700Output is not escaped
#70MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#71Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4813,34410k+Non-prefixed global variable
#72Oasis Workflow21775575600Text Domain Mismatch
#73OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#74Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#75Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9915,32310k+Non-prefixed hook name
#76User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor217361,50640k+Nonce verification recommended
#77PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output is not escaped
#78Quill Forms | Conversational Multi Step Forms, Surveys & quizzes214013703k+Text Domain Mismatch
#79Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#80Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#81Royal Addons for Elementor – Addons and Templates Kit for Elementor2112,9912,414600k+Text Domain Mismatch
#82Seamless Donations is Sunset216005142k+Text Domain Mismatch
#83SeatReg213121,637400Missing nonce verification
#84Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#85Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#86Accept Stripe Payments2137389220k+Missing nonce verification
#87ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#88TotalPoll for Polls and Contests211,3661551k+Text Domain Mismatch
#89Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#90Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#91URL Shortify – Simple and Easy URL Shortener211,5072,66510k+Non-prefixed global variable
#92Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#93BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569800Non-prefixed global variable
#94WebP Express21160427300k+Non-prefixed global variable
#95Wise Chat214705065k+Output is not escaped
#96Pay For Post with WooCommerce219581,4771k+Non-prefixed global variable
#97PPOM – Product Addons & Custom Fields for WooCommerce213361,31920k+Non-prefixed global variable
#98Wordfence Security – Firewall, Malware Scan, and Login Security211,8183,2365m+Output is not escaped
#99WP-Lister Lite for eBay216,7015,1322k+Output is not escaped
#100WP phpMyAdmin214,5286,43540k+Missing Arg Domain