PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#152InfiniteWP Client222,2861,812200k+Exception output is not escaped
#153JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#154JCH Optimize221,1431364k+Output is not escaped
#155LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3463,34170k+Non-prefixed global variable
#156Custom Login Page Customizer – Login Designer225881,45530k+Non-prefixed global variable
#157Mail Baby SMTP22385699600SQL query is not prepared
#158MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#159MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,844800Non-prefixed global variable
#160Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#161Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#162Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#163myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards222,3441,320400Output is not escaped
#164WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#165oik224891802k+Non Singular String Literal Domain
#166PagBank / PagSeguro Connect para WooCommerce225047574k+Non-prefixed global variable
#167Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#168Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#169Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#170Pronamic Pay222581,0772k+Non-prefixed global variable
#171PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#172Quick Contact Form222606231k+Non-prefixed function
#173RealPress – Real Estate Plugin226041,167500Non-prefixed global variable
#174Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non-prefixed global variable
#175ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#176Simple Job Board226341,35510k+Non-prefixed global variable
#177Slick Popup: Contact Form 7 Popup Plugin222,3223162k+Text Domain Mismatch
#178Slim Jetpack222,5861,9472k+Text Domain Mismatch
#179SportsPress – Sports Club & League Manager224602,24610k+Non-prefixed global variable
#180SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60210k+Non-prefixed global variable
#181Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output is not escaped
#182SVG Flags – Beautiful Scalable Flags For All Countries!227551,2512k+Non-prefixed global variable
#183Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#184Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#18510Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non-prefixed global variable
#186Theme Editor2279868550k+Output is not escaped
#187Ultimate Carousel For Divi225901,566800Non-prefixed global variable
#188Ultimeter227511,3441k+Non-prefixed global variable
#189Unlimited Elements Blocks Library227081,822400Non-prefixed global variable
#190Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#191UpStream: a Project Management Plugin for WordPress22683703600Non-prefixed global variable
#192URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non-prefixed global variable
#193Welcart e-Commerce2210,37810,93110k+Text Domain Mismatch
#194Walker Core221,3511,436800Non-prefixed global variable
#195WCFM – Frontend Manager for WooCommerce224,7545,05420k+Non-prefixed global variable
#196WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9341,96610k+Non-prefixed global variable
#197WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#198Fraud Prevention For WooCommerce and EDD225721,3945k+Non-prefixed global variable
#199WooCommerce221,3596,1727m+Non-prefixed global variable
#200Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch