WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
wp redirect wp redirect
Plugin Check reported a security-sensitive coding pattern that needs review.
Why It Shows Up
The finding came from a security-focused WordPress coding standard or Plugin Check rule.
Why It Matters
Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.
How to Fix
- Identify the untrusted value or privileged action involved.
- Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
- Rerun Plugin Check after the code path is fixed.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1701 | Smoove connector for Elementor forms | 41 | 22 | 60 | 600 | Nonce verification recommended | ||
| #1702 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | Output is not escaped | ||
| #1703 | Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress | 41 | 27 | 168 | 2k+ | Request data is not unslashed | ||
| #1704 | Feedback Company | 41 | 63 | 36 | 800 | Output is not escaped | ||
| #1705 | Theme Blvd Importer | 41 | 25 | 58 | 500 | Missing nonce verification | ||
| #1706 | Unbloater | 41 | 57 | 18 | 5k+ | Output is not escaped | ||
| #1707 | Visibility Logic for Elementor | 41 | 27 | 43 | 30k+ | Output is not escaped | ||
| #1708 | WaveSurfer-WP | 41 | 83 | 22 | 400 | Unsafe printing function | ||
| #1709 | WP Lorem ipsum | 41 | 37 | 29 | 500 | Unsafe printing function | ||
| #1710 | WP Router | 41 | 29 | 13 | 800 | Exception output is not escaped | ||
| #1711 | WPS Hide Login | 41 | 34 | 72 | 2m+ | Nonce verification recommended | ||
| #1712 | Admin Options Pages | 42 | 3 | 284 | 500 | Nonce verification recommended | ||
| #1713 | Affiliate Link Tracker | 42 | 24 | 49 | 500 | Request data is not unslashed | ||
| #1714 | AweSplash – Just Splash Page | 42 | 39 | 34 | 400 | Output is not escaped | ||
| #1715 | BP Auto Group Join | 42 | 55 | 55 | 700 | Output is not escaped | ||
| #1716 | CCAvenue Payment Gateway for WooCommerce | 42 | 53 | 40 | 3k+ | Text Domain Mismatch | ||
| #1717 | Change Background Color for Pages, Posts, Widgets | 42 | 35 | 7 | 500 | Text Domain Mismatch | ||
| #1718 | Comment Blacklist Updater | 42 | 45 | 15 | 1k+ | Output is not escaped | ||
| #1719 | Confetti | 42 | 136 | 17 | 3k+ | Unsafe printing function | ||
| #1720 | Cookie Notify | 42 | 15 | 54 | 400 | Input is not validated | ||
| #1721 | Custom Fields for Gutenberg | 42 | 24 | 24 | 1k+ | Output is not escaped | ||
| #1722 | Delete Expired Transients | 42 | 49 | 65 | 5k+ | Direct Query | ||
| #1723 | Disable Recaptcha – CF7 | 42 | 73 | 5 | 2k+ | Output is not escaped | ||
| #1724 | Simple HTML Sitemap | 42 | 42 | 20 | 1k+ | Text Domain Mismatch | ||
| #1725 | Duplicate Page or Post | 42 | 122 | 11 | 9k+ | Text Domain Mismatch | ||
| #1726 | Easy Demo Import for Omega Themes | 42 | 33 | 41 | 400 | Output is not escaped | ||
| #1727 | Lock Down Admin | 42 | 30 | 20 | 3k+ | Unsafe printing function | ||
| #1728 | GA Google Analytics – Connect Google Analytics to WordPress | 42 | 46 | 30 | 400k+ | Output is not escaped | ||
| #1729 | Geo Blocker – Control Site Access by Region and IP | 42 | 10 | 64 | 1k+ | Direct Query | ||
| #1730 | iyzico for WooCommerce | 42 | 34 | 54 | 10k+ | Unsafe printing function | ||
| #1731 | LH Page Links To | 42 | 25 | 38 | 500 | Output is not escaped | ||
| #1732 | NS Remove Related Products for WooCommerce | 42 | 95 | 43 | 3k+ | Output is not escaped | ||
| #1733 | OnPay.io for WooCommerce | 42 | 238 | 37 | 1k+ | Text Domain Mismatch | ||
| #1734 | PAYDUNYA WOOCOMMERCE PAR | 42 | 54 | 32 | 600 | Text Domain Mismatch | ||
| #1735 | Polylang Theme Strings | 42 | 119 | 30 | 6k+ | Output is not escaped | ||
| #1736 | Prismatic | 42 | 61 | 29 | 2k+ | Output is not escaped | ||
| #1737 | reCAPTCHA for WooCommerce | 42 | 80 | 31 | 40k+ | Output is not escaped | ||
| #1738 | Sendcloud Shipping | 42 | 78 | 56 | 5k+ | Output is not escaped | ||
| #1739 | SEO Backlink Monitor | 42 | 86 | 105 | 700 | Output is not escaped | ||
| #1740 | Simple Download Counter | 42 | 58 | 46 | 2k+ | Output is not escaped | ||
| #1741 | Sticky Floating Button (Book Now, Contact, Call To Action…) | 42 | 95 | 26 | 900 | Missing Arg Domain | ||
| #1742 | ThemeZee Widget Bundle | 42 | 211 | 58 | 5k+ | Output is not escaped | ||
| #1743 | Ultimate Coming Soon Page, Maintenance Mode & Under Construction – Gutenberg Block Builder & Landing Page | 42 | 15 | 89 | 9k+ | Non-prefixed global variable | ||
| #1744 | UPI QR Code Payment Gateway | 42 | 179 | 28 | 1k+ | Text Domain Mismatch | ||
| #1745 | WebPlanex: GST Invoice India | 42 | 63 | 63 | 400 | Text Domain Mismatch | ||
| #1746 | WP Child Theme Generator | 42 | 35 | 66 | 20k+ | Request data is not unslashed | ||
| #1747 | WP Media Category Management | 42 | 10 | 176 | 6k+ | Nonce verification recommended | ||
| #1748 | WP Post Redirect | 42 | 29 | 17 | 3k+ | Unsafe printing function | ||
| #1749 | Advanced All in One Admin Search by WP Spotlight | 42 | 25 | 25 | 900 | Missing Version | ||
| #1750 | Yandex.Metrika | 42 | 15 | 20 | 900 | Unsafe printing function |
