Redirect To WP Security & Risk Analysis

wordpress.org/plugins/redirect-to-wp

This will help you sync redirects while creating or updating your site posts or pages, This will sync to the redirection plugin or htaccess.

10 active installs v1.0 PHP + WP 4.0+ Updated May 4, 2015
301htaccessredirectredirection
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Redirect To WP Safe to Use in 2026?

Generally Safe

Score 85/100

Redirect To WP has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago
Risk Assessment

The "redirect-to-wp" v1.0 plugin exhibits a generally strong security posture based on the static analysis. It demonstrates excellent adherence to secure coding practices by not utilizing dangerous functions, exclusively using prepared statements for SQL queries, and properly escaping all output. The presence of a nonce check and the limited file operation also contribute positively. However, the analysis did identify two flows with unsanitized paths, which, while not classified as critical or high severity in this report, represent a potential area of concern that warrants further investigation to ensure proper sanitization and validation of any user-supplied data involved in these flows.

The plugin's vulnerability history is a significant strength, with zero known CVEs, indicating a mature and well-maintained codebase with respect to past security issues. This pattern suggests a developer who is either very cautious or diligent in addressing security vulnerabilities promptly. Despite the minor concern raised by the unsanitized path flows, the overall lack of critical vulnerabilities and strong adherence to secure coding practices make this plugin appear relatively secure. The absence of a large attack surface, external HTTP requests, and reliance on capability checks also reduce its potential for exploitation.

Key Concerns

  • Flows with unsanitized paths
Vulnerabilities
None known

Redirect To WP Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Redirect To WP Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
1
Capability Checks
0
File Operations
1
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
save_post (redirect.php:85)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Redirect To WP Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadd_meta_boxesredirect.php:34
actionsave_postredirect.php:35
Maintenance & Trust

Redirect To WP Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39
Last updatedMay 4, 2015
PHP min version
Downloads1K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

Redirect To WP Developer Profile

yehudah

6 plugins · 2K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Redirect To WP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

HTML Comments
<!-- Copyright (C) 2015 Yehuda Hassine This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License, version 2, as published by the Free Software Foundation. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA --><!-- Add an nonce field so we can check for it later. --><!-- * Use get_post_meta() to retrieve an existing value * from the database and use the value for the form. -->
Data Attributes
name="sr_meta_box_nonce"name="do_redirect"name="source_redirect"id="source_redirect"
FAQ

Frequently Asked Questions about Redirect To WP