Device-Based Redirect Security & Risk Analysis

wordpress.org/plugins/device-based-redirect

Redirect users to your app pages in app store or play store based on their device type with custom URLs and page-specific redirects.

300 active installs v1.2.1 PHP 7.2+ WP 5.0+ Updated May 27, 2025
androidiosmobile-redirectredirectredirection
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Device-Based Redirect Safe to Use in 2026?

Generally Safe

Score 100/100

Device-Based Redirect has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "device-based-redirect" plugin v1.2.1 exhibits a generally good security posture, with no reported CVEs and adherence to several security best practices. The static analysis indicates that all identified entry points (AJAX handlers and REST API routes) have appropriate authentication and permission checks. The code also demonstrates strong practices regarding SQL queries (93% prepared statements), 100% output escaping, and the absence of dangerous functions, file operations, and external HTTP requests. Nonce and capability checks are also present.

Key Concerns

  • Taint flow with unsanitized paths
  • High severity taint flow with unsanitized paths
Vulnerabilities
None known

Device-Based Redirect Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Device-Based Redirect Code Analysis

Dangerous Functions
0
Raw SQL Queries
3
43 prepared
Unescaped Output
0
33 escaped
Nonce Checks
2
Capability Checks
6
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

93% prepared46 total queries

Output Escaping

100% escaped33 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

3 flows2 with unsanitized paths
<device-based-redirect> (device-based-redirect.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Device-Based Redirect Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 2

authwp_ajax_save_device_redirect_settingsdevice-based-redirect.php:106
authwp_ajax_dbre_dismiss_reviewdevice-based-redirect.php:111

REST API Routes 4

GET/wp-json/device-redirect/v1/validate-slugdevice-based-redirect.php:366
GET/wp-json/device-redirect/v1/redirectsdevice-based-redirect.php:381
POST/wp-json/device-redirect/v1/deletedevice-based-redirect.php:412
GET/wp-json/device-redirect/v1/entrydevice-based-redirect.php:435
WordPress Hooks 11
actionplugins_loadeddevice-based-redirect.php:23
actionadmin_menudevice-based-redirect.php:101
actionadmin_enqueue_scriptsdevice-based-redirect.php:102
actiontemplate_redirectdevice-based-redirect.php:103
actionparse_requestdevice-based-redirect.php:104
actioninitdevice-based-redirect.php:105
filterwp_unique_post_slugdevice-based-redirect.php:107
filtertemplate_includedevice-based-redirect.php:347
actionrest_api_initdevice-based-redirect.php:365
filtertemplate_includedevice-based-redirect.php:617
filterredirect_canonicaldevice-based-redirect.php:640
Maintenance & Trust

Device-Based Redirect Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 27, 2025
PHP min version7.2
Downloads2K

Community Trust

Rating100/100
Number of ratings3
Active installs300
Developer Profile

Device-Based Redirect Developer Profile

Nithin

1 plugin · 300 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Device-Based Redirect

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/device-based-redirect/build/index.js
Version Parameters
device-based-redirect/build/index.js?ver=

HTML / DOM Fingerprints

JS Globals
deviceRedirectData
REST Endpoints
/wp-json/dbre/v1/redirects
FAQ

Frequently Asked Questions about Device-Based Redirect