Does Primary Redirect have any unpatched vulnerabilities?

No. All known vulnerabilities in Primary Redirect have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Primary Redirect compatible with WordPress 6.8.5?

According to WordPress.org data, Primary Redirect 2.0.2 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is Primary Redirect compatible with PHP 7.4+?

Primary Redirect requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Primary Redirect updated?

Primary Redirect was last updated on Jul 25, 2025. Frequent updates are generally a positive security signal.

What is Primary Redirect's security score?

Primary Redirect has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Primary Redirect Security & Risk Analysis

wordpress.org/plugins/primary-redirect

Redirects users to a custom URL or their primary blog's dashboard after login, replacing the default WordPress behavior.

10 active installs v2.0.2 PHP 7.4+ WP 5.0+ Updated Jul 25, 2025

loginmultisiteprimaryredirectredirection

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Primary Redirect Safe to Use in 2026?

Generally Safe

Score 100/100

Primary Redirect has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8mo ago

Risk Assessment

The primary-redirect plugin v2.0.2 exhibits a generally strong security posture based on the static analysis and vulnerability history provided. The absence of any dangerous functions, raw SQL queries, file operations, external HTTP requests, or identified taint flows suggests a well-written and secure codebase. The use of prepared statements for all SQL queries and a high percentage of properly escaped outputs are positive indicators of good development practices. Furthermore, the lack of any known vulnerabilities (CVEs) is highly encouraging.

Key Concerns

Missing nonce checks on AJAX
Unescaped output
Lack of capability checks
No critical or high severity taint flows
No raw SQL queries
No dangerous functions used
No known CVEs

Vulnerabilities

None known

Primary Redirect Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Primary Redirect Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

5 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

83% escaped6 total outputs

Data Flows

All sanitized

Data Flow Analysis

1 flows

<primary-redirect> (primary-redirect.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Primary Redirect Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 6

actionplugins_loadedprimary-redirect.php:74

filterlogin_redirectprimary-redirect.php:75

actionwpmu_optionsprimary-redirect.php:78

actionupdate_wpmu_optionsprimary-redirect.php:79

actionadmin_initprimary-redirect.php:81

actioninitprimary-redirect.php:333

Maintenance & Trust

Primary Redirect Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedJul 25, 2025

PHP min version7.4

Downloads3K

Community Trust

Rating100/100

Number of ratings2

Active installs10

Alternatives

Primary Redirect Alternatives

Safe Redirect Manager

safe-redirect-manager

100

Safely manage your website's HTTP redirects.

40K 1 CVE

Inactive Logout

inactive-logout

Automatically logout idle user sessions, with logout redirections and concurrent limit logins all in one place.

20K 3 CVEs

Simple Membership After Login Redirection

simple-membership-after-login-redirection

An addon for the simple membership plugin to configure after login redirection to a specific page based on the member's level.

10K 1 CVE

LH Private Content Login

lh-private-content-login

Redirects non-logged users to the login page when they follow a link to a post, page, or cpt which is protected by post status.

300 No CVEs

BP Login Redirect

buddypress-login-redirect

Allows to decide buddypress website admins where their users should land after log in.

100 No CVEs

Developer Profile

Primary Redirect Developer Profile

Mustafa Uysal

9 plugins · 20K total installs

trust score

Avg Security Score

92/100

Avg Patch Time

1 days

View full developer profile

Detection Fingerprints

How We Detect Primary Redirect

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/primary-redirect/js/admin.js

Script Paths