PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51WPJAM Basic203283564k+Output is not escaped
#52School Management System – WPSchoolPress203535,2751k+Non-prefixed global variable
#53Backup Migration219811,09380k+Non-prefixed global variable
#54Forumax – AI Powered Advanced Community Forum Plugin214,9364,357600Text Domain Mismatch
#55Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#56CallTrackingMetrics219232863k+Unsafe printing function
#57Smart Grid-Layout Design for Contact Form 7211,12673410k+Output is not escaped
#58SMS Extension for Contact Form 7217201,387400Non-prefixed global variable
#59Comet Cache2185724520k+Output is not escaped
#60Daily Prayer Time219471,7801k+Non-prefixed global variable
#61Free Downloads WooCommerce214303594k+Output is not escaped
#62Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#63Envo Extra2187860020k+Text Domain Mismatch
#64ERP: Complete HR, Recruitment, Accounting & CRM Suite with WooCommerce CRM Support218295,9665k+Direct Query
#65Eupago Gateway For Woocommerce216123202k+Output is not escaped
#66EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non-prefixed global variable
#67Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable
#68Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#69Front End Users217192,759400Non-prefixed global variable
#70Frontend Dashboard21384945500Non-prefixed function
#71If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe printing function
#72JCH Optimize219531334k+Output is not escaped
#73LA-Studio Element Kit for Elementor218,3901,96410k+Text Domain Mismatch
#74MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non-prefixed global variable
#75Mapster WP Maps213,4402,9033k+Text Domain Mismatch
#76Mergado Pack212,323588700Output is not escaped
#77MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#78Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non-prefixed global variable
#79Oasis Workflow21775575700Text Domain Mismatch
#80OneLogin SAML SSO215083307k+wp function not compatible with requires wp
#81Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non-prefixed global variable
#82Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non-prefixed hook name
#83User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Nonce verification recommended
#84PublishPress Planner – Editorial Calendar, Marketing Content, Kanban Board216038906k+Output is not escaped
#85Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#86Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#87Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#88Seamless Donations is Sunset216005142k+Text Domain Mismatch
#89SeatReg213121,637400Missing nonce verification
#90Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#91Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#92Accept Stripe Payments2137388220k+Missing nonce verification
#93ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#94TotalPoll for Polls and Contests211,3661551k+Text Domain Mismatch
#95Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non-prefixed hook name
#96Buckaroo Woocommerce Payments Plugin215843262k+Exception output is not escaped
#97BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages216681,569900Non-prefixed global variable
#98WebP Express21160427300k+Non-prefixed global variable
#99Wise Chat214705065k+Output is not escaped
#100Paysera Payment Gateway for WooCommerce211,8661957k+Exception output is not escaped