WordPress.Security.SafeRedirect.wp_redirect_wp_redirect
wp redirect wp redirect
Plugin Check reported a security-sensitive coding pattern that needs review.
Why It Shows Up
The finding came from a security-focused WordPress coding standard or Plugin Check rule.
Why It Matters
Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.
How to Fix
- Identify the untrusted value or privileged action involved.
- Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
- Rerun Plugin Check after the code path is fixed.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #301 | Media Library File Download | 23 | 615 | 1,286 | 1k+ | Non-prefixed global variable | ||
| #302 | Media Library Assistant | 23 | 1,131 | 3,759 | 70k+ | Nonce verification recommended | ||
| #303 | Menu Image, Icons made easy | 23 | 591 | 1,406 | 100k+ | Non-prefixed global variable | ||
| #304 | Order Bump for WooCommerce | 23 | 1,720 | 1,562 | 600 | Output is not escaped | ||
| #305 | MotoPress Appointment Booking | 23 | 2,362 | 857 | 2k+ | Text Domain Mismatch | ||
| #306 | Restaurant Menu and Food Ordering | 23 | 385 | 853 | 2k+ | Non-prefixed global variable | ||
| #307 | MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar | 23 | 4,065 | 488 | 20k+ | Text Domain Mismatch | ||
| #308 | MStore API – Create Native Android & iOS Apps On The Cloud | 23 | 618 | 764 | 3k+ | SQL query is not prepared | ||
| #309 | MultiParcels Shipping For WooCommerce | 23 | 197 | 389 | 4k+ | Mixed line endings | ||
| #310 | MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO | 23 | 485 | 580 | 2k+ | Missing nonce verification | ||
| #311 | Simple Newsletter Plugin – Noptin | 23 | 71 | 593 | 10k+ | Non-prefixed global variable | ||
| #312 | NicheTable – Responsive Comparison Table Block | 23 | 683 | 1,307 | 700 | Non-prefixed global variable | ||
| #313 | Nirweb support | 23 | 254 | 617 | 800 | Request data is not unslashed | ||
| #314 | Ocean Extra | 23 | 1,494 | 2,107 | 500k+ | Non-prefixed global variable | ||
| #315 | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | 23 | 4,159 | 1,553 | 100k+ | Output is not escaped | ||
| #316 | Gallery PhotoBlocks | 23 | 904 | 1,345 | 3k+ | Non-prefixed global variable | ||
| #317 | ExpressTechSoftwares Discord Add-on for Paid Memberships Pro | 23 | 454 | 449 | 700 | Text Domain Mismatch | ||
| #318 | AI Popup | 23 | 1,224 | 636 | 400 | Text Domain Mismatch | ||
| #319 | Post to Google My Business (Google Business Profile) | 23 | 845 | 1,452 | 10k+ | Non-prefixed global variable | ||
| #320 | PowerPress Podcasting plugin by Blubrry | 23 | 4,815 | 2,452 | 20k+ | Output is not escaped | ||
| #321 | Primary Addon for Elementor | 23 | 765 | 1,306 | 7k+ | Non-prefixed global variable | ||
| #322 | Print My Blog – Print, PDF, & eBook Converter WordPress Plugin | 23 | 1,077 | 1,660 | 8k+ | Non-prefixed global variable | ||
| #323 | Protect Admin | 23 | 606 | 1,300 | 2k+ | Non-prefixed global variable | ||
| #324 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | Non-prefixed global variable | ||
| #325 | Read More Without Refresh | 23 | 955 | 1,347 | 20k+ | Non-prefixed global variable | ||
| #326 | Read More WP | 23 | 570 | 1,311 | 1k+ | Non-prefixed global variable | ||
| #327 | Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder | 23 | 908 | 1,377 | 10k+ | Non-prefixed global variable | ||
| #328 | Redirection | 23 | 523 | 457 | 100k+ | Non-prefixed global variable | ||
| #329 | Request a Quote – Quote Forms for Any WordPress Site | 23 | 240 | 1,099 | 900 | Non-prefixed hook name | ||
| #330 | Restaurant & Cafe Addon for Elementor | 23 | 889 | 1,326 | 1k+ | Non-prefixed global variable | ||
| #331 | Robo Gallery – Photo & Image Slider | 23 | 1,291 | 530 | 40k+ | Output is not escaped | ||
| #332 | Manago AI & Leadoo AI | 23 | 644 | 429 | 1k+ | Unsafe printing function | ||
| #333 | Schema | 23 | 1,173 | 245 | 40k+ | Text Domain Mismatch | ||
| #334 | SecuPress with Simple SSL – Simple and Performant Security | 23 | 1,697 | 1,601 | 40k+ | Non-prefixed global variable | ||
| #335 | Seriously Simple Podcasting | 23 | 548 | 629 | 30k+ | Non-prefixed hook name | ||
| #336 | Tag, Category, and Taxonomy Manager – Autotagger Automatically Add Terms | 23 | 405 | 869 | 50k+ | Nonce verification recommended | ||
| #337 | Site Reviews | 23 | 1,626 | 604 | 60k+ | Output is not escaped | ||
| #338 | Slider by 10Web – Responsive Image Slider | 23 | 5,814 | 976 | 10k+ | Output is not escaped | ||
| #339 | Smart Marketing SMS and Newsletters Forms | 23 | 2,232 | 1,015 | 1k+ | Text Domain Mismatch | ||
| #340 | Smart Slider 3 | 23 | 261 | 268 | 800k+ | Non-prefixed global variable | ||
| #341 | SportsPress – Sports Club & League Manager | 23 | 459 | 2,246 | 10k+ | Non-prefixed global variable | ||
| #342 | StreamWeasels Twitch Integration | 23 | 555 | 1,465 | 1k+ | Non-prefixed global variable | ||
| #343 | Strong Testimonials | 23 | 194 | 393 | 90k+ | Nonce verification recommended | ||
| #344 | Super Video player – Fully Customizable Video Player with Playlist | 23 | 1,135 | 1,634 | 2k+ | Non-prefixed global variable | ||
| #345 | The Events Calendar | 23 | 3,509 | 3,850 | 700k+ | Text Domain Mismatch | ||
| #346 | The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid | 23 | 105 | 1,013 | 100k+ | Non-prefixed global variable | ||
| #347 | Travelpayouts | 23 | 769 | 110 | 6k+ | Output is not escaped | ||
| #348 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | Non-prefixed global variable | ||
| #349 | Ultimate Fields | 23 | 371 | 458 | 600 | Alternative PHP tag found | ||
| #350 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | Output is not escaped |
