PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201WP Affiliate Disclosure221,3581,5041k+Non-prefixed global variable
#202Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#203Master Accordion ( Former WP Awesome FAQ Plugin )221,7741,286700Non-prefixed global variable
#204WP Easy Pay – Payment and Donation form Builder for Square229101,8351k+Non-prefixed global variable
#205WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222756835k+Nonce verification recommended
#206WP Umbrella: Update Backup Restore & Monitoring2292191970k+Exception output is not escaped
#207Wp-Insert2226730110k+Output is not escaped
#208NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#209User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration222871,43220k+Non-prefixed global variable
#210WP-WebAuthn229573962k+Exception output is not escaped
#211WPBITS Addons For Elementor Page Builder229961,3992k+Non-prefixed global variable
#212WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell226,0022,7905k+Text Domain Mismatch
#213WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#214WUPO Group Attributes for WooCommerce225921,391400Non-prefixed global variable
#215ЮKassa для WooCommerce225901689k+Short PHP open tag found
#216Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#217Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce231,1851,0271k+Text Domain Mismatch
#218Gutenberg Blocks – ACF Blocks Suite231,0971,449400Non-prefixed global variable
#219Advanced Custom Fields: Extended231,885329100k+Text Domain Mismatch
#220Frontend Admin by DynamiApps235,9383,2089k+Text Domain Mismatch
#221Custom WooCommerce Checkout Fields Editor237551,3862k+Non-prefixed global variable
#222Admin and Site Enhancements (ASE)23136331200k+Nonce verification recommended
#223Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily235451,397400Non-prefixed global variable
#224Advanced Form Integration — Connect Forms to 200+ Apps235,7834,68710k+wp function not compatible with requires wp
#225Advanced Product Labels for WooCommerce2392155920k+Text Domain Mismatch
#226AI Engine – The Chatbot, AI Framework & MCP for WordPress23408539100k+error log error log
#227Fullscreen Menu235371,2872k+Non-prefixed global variable
#228AR for WordPress23151499400Non-prefixed global variable
#229Autocomplete Address and Location Picker for WooCommerce236301,2992k+Non-prefixed global variable
#230Autoptimize23288191800k+Output is not escaped
#231Shortcodes and extra features for Phlox theme2341242490k+Output is not escaped
#232B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More231,34740910k+Text Domain Mismatch
#233BA Book Everything231,1841,08610k+Output is not escaped
#234Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#235BSK PDF Manager231,5766257k+Text Domain Mismatch
#236BuddyDrive237221,5971k+Non-prefixed global variable
#237Builderall for WordPress234,7821,3081k+Text Domain Mismatch
#238Announcement & Notification Banner – Bulletin239301,5762k+Non-prefixed global variable
#239Business Directory Plugin – Easy Listing Directories for WordPress236111,06310k+Non-prefixed global variable
#240Cart Notices for WooCommerce236394742k+Text Domain Mismatch
#241Products Suggestions for WooCommerce23707505700Output is not escaped
#242Grid & Styler For Contact Form 7 And Divi235481,341500Non-prefixed global variable
#243All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more.237501,35960k+Non-prefixed global variable
#244Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#245CLUEVO LMS, E-Learning Platform231,8431,176400Text Domain Mismatch
#246Content Aware Sidebars – Fastest Widget Area Plugin239931,73830k+Non-prefixed global variable
#247Content Egg – Affiliate Product Importer & Price Comparison231,2451,27510k+Non-prefixed global variable
#248Content Views – Post Grid & Filter, Recent Posts, Category Posts … (Shortcode, Gutenberg Blocks, and Widgets for Elementor)23306587100k+Dynamic hook name
#249Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31526,6441k+Non-prefixed global variable
#250Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets)237912,331400Non-prefixed global variable