PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351User Menus – Nav Menu Visibility235311,29880k+Non-prefixed global variable
#352UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP236942,43920k+Non-prefixed hook name
#353Product Table & List Builder For WooCommerce231,3622,06010k+Non-prefixed global variable
#354Checkout with Zelle on Woocommerce236371,4043k+Non-prefixed global variable
#355Easy Appointment Booking & Scheduling System – Webba Booking Calendar231,6183,3782k+Non-prefixed global variable
#356WHMCS Bridge232474724k+Nonce verification recommended
#357Widgets on Pages238091,30620k+Non-prefixed global variable
#358Billingo Plus integráció WooCommerce-hez231,119507900Text Domain Mismatch
#359Widgets for WooCommerce Products on Elementor231,6591,4543k+Non-prefixed global variable
#360AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia231,2851,107500Text Domain Mismatch
#361WP All Import – Product Import for WooCommerce231,47520920k+Non Singular String Literal Domain
#362StoreCustomizer – A plugin to Customize all WooCommerce Pages235871,42620k+Non-prefixed global variable
#363ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin237,8802,19990k+Text Domain Mismatch
#364WP BackItUp Community Edition232579896k+Non-prefixed global variable
#365Clone2324426240k+Output is not escaped
#366WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses23590876500Non-prefixed function
#367WP-CRM System – Manage Clients and Projects232971,094800Non-prefixed global variable
#368WP Crowdfunding231991,6292k+Non-prefixed global variable
#369WP Editor2350233520k+Unsafe printing function
#370WP Free SSL237351,3451k+Non-prefixed global variable
#371Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions231,1131,8629k+Output is not escaped
#372WP Hotelier236931,6352k+Non-prefixed global variable
#373Lead Form Data Collection to CRM232111,698400Non-prefixed global variable
#374WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#375WP Mega Menu239927928k+Non-prefixed global variable
#376WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#377Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#378WP STAGING – WordPress Backup, Restore, Migration & Clone231,5041,607100k+Non-prefixed global variable
#379Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#380Track, Analyze & Optimize by WP Tao23895756600Output is not escaped
#381Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode239072,014900Non-prefixed global variable
#382Customer Support Ticket System & Helpdesk231,7191,464400Text Domain Mismatch
#383Divi Gravity Forms (WP Tools)235791,3112k+Non-prefixed global variable
#384WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#385WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,38088820k+Output is not escaped
#386WPMobile.App232,9831,5333k+Output is not escaped
#387WPCal.io – Easy Meeting Scheduler23694595900Direct Query
#388Masonry Gallery & Posts For Divi (WP Tools)237541,450800Non-prefixed global variable
#389WSW – Shopify WooCommerce / WordPress Integration and Migration231,4491,612500Non-prefixed global variable
#390XT Ajax Add To Cart for WooCommerce231,0031,6901k+Non-prefixed global variable
#391XT Quick View for WooCommerce231,0791,829400Non-prefixed global variable
#392XT Variation Swatches for WooCommerce231,0511,834500Non-prefixed global variable
#393Yatra – Travel Booking & Tour Operator Software232,2364,024600Non-prefixed global variable
#394YITH PayPal Express Checkout for WooCommerce233871,4431k+Non-prefixed global variable
#395Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress232,3171,7145k+Output is not escaped
#396Anti Spam and list cleaner – AcyChecker2446288400Output is not escaped
#397AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2341,4647k+Output is not escaped
#398Ivory Search – WordPress Search Plugin241,1731,688100k+Non-prefixed global variable
#399Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#400Advanced iFrame248871,12040k+Non-prefixed global variable