PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1101Restrict Usernames Emails Characters323273671k+Output is not escaped
#1102Showcase IDX Real Estate Search & Lead Capture32123522k+Output is not escaped
#1103Simple Ajax Chat – Add a Fast, Secure Chat Box321082662k+Output is not escaped
#1104Sky Addons for Elementor32853512k+Non-prefixed namespace
#1105Split Test For Elementor32981323k+Non-prefixed global variable
#1106Spoki – Chat Buttons and WooCommerce Notifications321,074260700Unsafe printing function
#1107Stock Sync for WooCommerce323622321k+Text Domain Mismatch
#1108Tainacan Support for Blocksy32244526500Non-prefixed global variable
#1109Theme My Login3225154960k+Non-prefixed function
#1110Thrive Automator32848410k+SQL query is not prepared
#1111TK Google Fonts GDPR Compliant32582341k+Output is not escaped
#1112Unbounce Landing Pages321698610k+Output is not escaped
#1113Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring32196160900Text Domain Mismatch
#1114Easy 3D Viewer323992411k+Text Domain Mismatch
#1115Payment Gateway for Redsys & WooCommerce Lite321257520k+Text Domain Mismatch
#1116WooMS3219958500Output is not escaped
#1117WP 2-step verification32154651k+Output is not escaped
#1118SEOPress – AI SEO Plugin & On-site SEO32138429300k+Non-prefixed global variable
#1119WPCasa – Real Estate for WordPress32854291k+Non-prefixed global variable
#1120Privacy Policy Generator – WPLP Legal Pages322640910k+Non-prefixed global variable
#1121Yoo Slider – Image Slider & Video Slider32744209600Output is not escaped
#1122Advanced Forms for ACF331692783k+Non-prefixed hook name
#1123Affiliate Program & Referral Tracking for WooCommerce & WordPress – Affilia3380172500Nonce verification recommended
#1124Archive Posts Sort Customize3333897600Output is not escaped
#1125Bosta WooCommerce33303180700Text Domain Mismatch
#1126Cargus334864700Input is not sanitized
#1127Nexi XPay334962776k+Text Domain Mismatch
#1128Chartify – WordPress Chart Plugin33764113k+Non-prefixed global variable
#1129Contact Form Plugin33472202k+Non-prefixed function
#1130Chwazi – Delivery & Pickup Scheduling for WooCommerce33563192600Text Domain Mismatch
#1131Easy Upload Files During Checkout33218199500Unsafe printing function
#1132Human Presence – Stop Form Spam Without ReCaptcha3354651k+Request data is not unslashed
#1133Fastly33221661k+Text Domain Mismatch
#1134FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN33513334k+Request data is not unslashed
#1135GetResponse Forms by Optin Cat33681381k+Missing direct file access protection
#1136Comments – GraphComment | AI-Moderated Comment System33191177400Unsafe printing function
#1137HurryTimer – An Scarcity and Urgency Countdown Timer for WordPress & WooCommerce3337713920k+Unsafe printing function
#1138WPZOOM Social Feed Widget & Block3331027860k+Unsafe printing function
#1139JetWidgets for Elementor and WooCommerce331871467k+Text Domain Mismatch
#1140Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid332741063k+Text Domain Mismatch
#1141LWSCache33471046k+Non-prefixed global variable
#1142Forms for Mailchimp by Optin Cat – Grow Your MailChimp List33711332k+Missing direct file access protection
#1143MAS Companies For WP Job Manager33623081k+Non-prefixed hook name
#1144Molongui Post Contributors: Multi-Role Contributor Attribution33240162500Output is not escaped
#1145News Announcement Scroll332372592k+Non-prefixed global variable
#1146Nomad World Map33424191700Text Domain Mismatch
#1147Pastacode337766400Non-prefixed global variable
#1148Payflex Payment Gateway33181611k+Text Domain Mismatch
#1149Post Lists View Custom334621502k+Missing Arg Domain
#1150PublishPress Checklists: Pre-Publishing Approval Checklist – Validate Post Requirements331401823k+Missing Translators Comment