PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#2001FV Clone Screen Options891631k+wp function not compatible with requires wp
#2002ShareThis Dashboard for Google Analytics89627080k+Non-prefixed global variable
#2003Superb Table (SEO Optimized Tables With Schema)8944122k+wp function not compatible with requires wp
#2004Disable User Login89120400Direct Query
#2005Flipdish Ordering System90511400Non-prefixed function
#2006LH Force Lowercase URLs90432k+Input is not validated or sanitized
#2007Smooth Page Scroll Up/Down Buttons91152k+Non-prefixed function
#2008WP SSL Redirect9118600trademarked term
#2009OTP Login With Phone Number, OTP Verification92323900Non-prefixed hook name
#2010Propovoice: All-in-One Client Management System921341800Non-prefixed global variable
#2011Revision Manager TMC9240141k+Text Domain Mismatch
#2012SmartEmailing9273600Missing direct file access protection
#2013Multi Currency, Currency Switcher, Exchange Rates for WooCommerce – Mudra92291k+Non-prefixed hook name
#2014WP Quick Post Duplicator923102k+trademarked term
#2015Convert WPBakery to Elementor9317500Non-prefixed global variable
#2016Feed For TikTok Shop93114400wp function not compatible with requires wp
#2017GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM93726400Non-prefixed global variable
#2018Simple Password Protect9314400wp redirect wp redirect
#2019Single Category Permalink93512400Non-prefixed global variable
#2020WP Disable Site Health9344900trademarked term
#2021404 Redirection94426k+Missing direct file access protection
#2022404 to Home94611k+wp function not compatible with requires wp
#2023Better 404 Redirect To Homepage9433600Missing direct file access protection
#2024Disable woocommerce logout confirmation9433700trademarked term
#2025EasyMega94226k+Non-prefixed hook name
#2026Post Category Prev-Next Link Fix94341k+Missing direct file access protection
#2027WC Minimum Order Amount94763k+Text Domain Mismatch
#2028Disable Comments94249k+trademarked term
#2029ContentProtector – password protect your page, post or text95134k+Non-prefixed class
#2030Daisy Comments — Disable Comments & Stop Spam95131k+Non-prefixed class
#2031Enhanced Autoload Manager9524600wp function not compatible with requires wp
#2032Functionality95621k+date date
#2033Interactions – Animations for Elementor & Gutenberg9534500Missing Translators Comment
#2034Arvow AI SEO Writer95151k+Non-prefixed global variable
#2035Postname Permalink Auto Redirect9523600Missing direct file access protection
#2036Redirect 404 Error Page to Homepage95126k+outdated tested upto header
#2037SX No Homepage Pagination95221k+outdated tested upto header
#2038Improved External Products for WooCommerce95181k+Non-prefixed class
#2039WP Remove Category Base95148k+trademarked term
#2040Customer Reviews Collector for WooCommerce96515k+Missing direct file access protection
#2041MyServerInfo – Memory Usage, PHP Version, Memory Limit, Execution Time, CPU Usage, Disk Usage9612800mismatched plugin name
#2042WP Post Page Clone96580k+trademarked term
#2043Quick Copy – Duplicate Posts & Pages9731k+Discouraged text-domain loading