PluginScore

WordPress.Security.SafeRedirect.wp_redirect_wp_redirect

wp redirect wp redirect

Plugin Check reported a security-sensitive coding pattern that needs review.

critical weight

Why It Shows Up

The finding came from a security-focused WordPress coding standard or Plugin Check rule.

Why It Matters

Security findings often involve trust boundaries: request input, browser output, redirects, database access, capabilities, or filesystem behavior.

How to Fix

  • Identify the untrusted value or privileged action involved.
  • Add validation, sanitization, escaping, nonce checks, capability checks, or prepared SQL as appropriate.
  • Rerun Plugin Check after the code path is fixed.

References

WordPress validating, sanitizing, and escapingWordPress escaping functionsWordPress nonces

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#401Affiliates Manager241,2686538k+Unsafe printing function
#402All Embed – Multi-Source Embed Widgets for Elementor247291,310600Non-prefixed global variable
#403All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#404Multi Page Auto Advance for Gravity Forms246531,3352k+Non-prefixed global variable
#405Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non-prefixed global variable
#406TermsFeed AutoTerms: Privacy Policy Generator, Cookie Consent, GDPR, CCPA, Terms & Conditions, Disclaimers, Cookies Policy, EULA2493916170k+Non Singular String Literal Domain
#407AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress241,7051,3937k+Text Domain Mismatch
#408Awesome Support – WordPress HelpDesk & Support Plugin242251,2396k+Non-prefixed global variable
#409Popup Box – Create Countdown, Coupon, Video, Contact Form Popups244821,25350k+Non-prefixed global variable
#410bBlocks – Essential Gutenberg Blocks & Patterns Collection246561,511700Non-prefixed global variable
#411Banner Management For WooCommerce248651,8622k+Non-prefixed global variable
#412Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8651,0891k+Text Domain Mismatch
#413Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,3173,37510k+slow db query meta key
#414Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More243429306k+Non-prefixed global variable
#415BlockMeister – Block Pattern Builder245801,4051k+Non-prefixed global variable
#416Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News246991,69330k+Non-prefixed global variable
#417Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment242621,7181k+Non-prefixed global variable
#418Branda – White Label & Branding, Free Login Page Customizer243,17482020k+Text Domain Mismatch
#419Brands for WooCommerce247736936k+Text Domain Mismatch
#420Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content2423729120k+error log print r
#421BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor244,3131,425500Text Domain Mismatch
#422Builderall for WordPress244,7781,3071k+Text Domain Mismatch
#423Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder245761,34470k+Non-prefixed global variable
#424Captivate Sync241735571k+Non-prefixed global variable
#425Categorify – WordPress Media Library Category & File Manager245731,3851k+Non-prefixed global variable
#426Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#427Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#428WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms245341,5593k+Non-prefixed global variable
#429Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#430Church Admin241,5544,207900Direct Query
#431CleanTalk Anti-Spam. Spam Firewall & Bot protection248181,092200k+Missing nonce verification
#432Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#433CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#434CMP – Coming Soon & Maintenance Plugin by NiteoThemes249491,336200k+Non-prefixed global variable
#435Complianz – GDPR/CCPA Cookie Consent244874031m+Missing Arg Domain
#436RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress248283,665500Request data is not unslashed
#437CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7241,0341,396300k+Non-prefixed global variable
#438Contact Widgets For Elementor all the contact links you need in one place249081,188500Non-prefixed global variable
#439WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#440CRM Perks Forms – WordPress Form Builder248195771k+Output is not escaped
#441WP Customer Area243,30694110k+Text Domain Mismatch
#442Customer Reviews for WooCommerce242,2022,44580k+Output is not escaped
#443WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments245871,43020k+Non-prefixed global variable
#444WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)248452,6434k+Non-prefixed global variable
#445Democracy Poll243874367k+Short PHP open tag found
#446Deployer for Git245411,336500Non-prefixed global variable
#447DFX Automatic Role Changer for WooCommerce245971,308400Non-prefixed global variable
#448Digital License Manager24295670800Non-prefixed hook name
#449Drop Shadow Boxes246421,2904k+Non-prefixed global variable
#450Dynamic Widgets2463181210k+Non-prefixed global variable