WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
wp redirect wp redirect
Plugin Check reported a security-sensitive coding pattern that needs review.
Why It Shows Up
The finding came from a security-focused WordPress coding standard or Plugin Check rule.
Why It Matters
Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.
How to Fix
- Identify the untrusted value or privileged action involved.
- Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
- Rerun Plugin Check after the code path is fixed.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #2051 | Remove Checkout Fields for Woocommerce | 88 | 51 | 2 | 900 | Text Domain Mismatch | ||
| #2052 | Transferito: WP Migration | 88 | 16 | 115 | 500 | Non-prefixed global variable | ||
| #2053 | CJdropshipping | 89 | 4 | 2 | 3k+ | Missing Arg Domain | ||
| #2054 | Coupon & Discount Code Reveal Button | 89 | 37 | 10 | 1k+ | wp function not compatible with requires wp | ||
| #2055 | Disable WP Registration Page | 89 | 4 | 9 | 2k+ | trademarked term | ||
| #2056 | FV Clone Screen Options | 89 | 16 | 3 | 1k+ | wp function not compatible with requires wp | ||
| #2057 | Superb Table (SEO Optimized Tables With Schema) | 89 | 44 | 12 | 2k+ | wp function not compatible with requires wp | ||
| #2058 | Turn Off Comments — Hide Comment Box and Stop Spam | 89 | 3 | 4 | 1k+ | Non-prefixed function | ||
| #2059 | Disable User Login | 89 | 1 | 20 | 500 | Direct Query | ||
| #2060 | Flipdish Ordering System | 90 | 5 | 11 | 400 | Non-prefixed function | ||
| #2061 | ShareThis Dashboard for Google Analytics | 90 | 4 | 272 | 80k+ | Non-prefixed global variable | ||
| #2062 | LH Force Lowercase URLs | 90 | 4 | 3 | 2k+ | Input is not validated or sanitized | ||
| #2063 | Smooth Page Scroll Up/Down Buttons | 91 | 1 | 5 | 2k+ | Non-prefixed function | ||
| #2064 | WP SSL Redirect | 91 | 1 | 8 | 700 | trademarked term | ||
| #2065 | Convert WPBakery to Elementor | 92 | 1 | 16 | 500 | Non-prefixed global variable | ||
| #2066 | OTP Login With Phone Number, OTP Verification | 92 | 3 | 23 | 900 | Non-prefixed hook name | ||
| #2067 | Propovoice: All-in-One Client Management System | 92 | 13 | 41 | 900 | Non-prefixed global variable | ||
| #2068 | Revision Manager TMC | 92 | 40 | 14 | 1k+ | Text Domain Mismatch | ||
| #2069 | SmartEmailing | 92 | 7 | 3 | 600 | Missing direct file access protection | ||
| #2070 | Multi Currency, Currency Switcher, Exchange Rates for WooCommerce – Mudra | 92 | 2 | 9 | 1k+ | Non-prefixed hook name | ||
| #2071 | Menu Cart for WooCommerce | 92 | 102 | 16 | 80k+ | Text Domain Mismatch | ||
| #2072 | WP Quick Post Duplicator | 92 | 3 | 10 | 3k+ | trademarked term | ||
| #2073 | EasyMega | 93 | 1 | 22 | 6k+ | Non-prefixed hook name | ||
| #2074 | Feed For TikTok Shop | 93 | 11 | 4 | 400 | wp function not compatible with requires wp | ||
| #2075 | Single Category Permalink | 93 | 5 | 12 | 400 | Non-prefixed global variable | ||
| #2076 | WP Disable Site Health | 93 | 4 | 4 | 1k+ | trademarked term | ||
| #2077 | WP Menu Cart | 93 | 11 | 15 | 7k+ | Non-prefixed hook name | ||
| #2078 | 404 Redirection | 94 | 4 | 2 | 7k+ | Missing direct file access protection | ||
| #2079 | 404 to Home | 94 | 6 | 1 | 1k+ | wp function not compatible with requires wp | ||
| #2080 | Better 404 Redirect To Homepage | 94 | 3 | 3 | 600 | Missing direct file access protection | ||
| #2081 | Disable woocommerce logout confirmation | 94 | 3 | 3 | 700 | trademarked term | ||
| #2082 | GHL Contact Form 7 Bridge – Send Contact Form 7 leads to GHL CRM | 94 | 6 | 16 | 400 | Non-prefixed global variable | ||
| #2083 | Post Category Prev-Next Link Fix | 94 | 3 | 4 | 1k+ | Missing direct file access protection | ||
| #2084 | WC Minimum Order Amount | 94 | 7 | 6 | 3k+ | Text Domain Mismatch | ||
| #2085 | Disable Comments | 94 | 2 | 4 | 9k+ | trademarked term | ||
| #2086 | ContentProtector – password protect your page, post or text | 95 | 1 | 3 | 2k+ | Non-prefixed class | ||
| #2087 | Daisy Comments — Disable Comments & Stop Spam | 95 | 1 | 3 | 1k+ | Non-prefixed class | ||
| #2088 | Enhanced Autoload Manager | 95 | 2 | 4 | 500 | wp function not compatible with requires wp | ||
| #2089 | Functionality | 95 | 6 | 2 | 1k+ | date date | ||
| #2090 | Arvow AI SEO Writer | 95 | 1 | 6 | 1k+ | Non-prefixed global variable | ||
| #2091 | Postname Permalink Auto Redirect | 95 | 2 | 3 | 600 | Missing direct file access protection | ||
| #2092 | Redirect 404 Error Page to Homepage | 95 | 1 | 2 | 6k+ | outdated tested upto header | ||
| #2093 | SX No Homepage Pagination | 95 | 2 | 2 | 1k+ | outdated tested upto header | ||
| #2094 | Improved External Products for WooCommerce | 95 | 1 | 8 | 1k+ | Non-prefixed class | ||
| #2095 | WP Remove Category Base | 95 | 1 | 4 | 8k+ | trademarked term | ||
| #2096 | Customer Reviews Collector for WooCommerce | 96 | 5 | 1 | 5k+ | Missing direct file access protection | ||
| #2097 | Interactions – Create Interactive Experiences in the Block Editor | 96 | 2 | 2 | 400 | Missing Translators Comment | ||
| #2098 | MyServerInfo – Memory Usage, PHP Version, Memory Limit, Execution Time, CPU Usage, Disk Usage | 96 | 1 | 2 | 700 | mismatched plugin name | ||
| #2099 | WP Post Page Clone | 96 | 5 | 80k+ | trademarked term | |||
| #2100 | Quick Copy – Duplicate Posts & Pages | 97 | 3 | 1k+ | Discouraged text-domain loading |
