RM Smart Redirects Security & Risk Analysis

wordpress.org/plugins/rm-smart-redirects

An intelligent SEO-focused redirect manager with hierarchical fallback and auto-slug monitoring.

0 active installs v3.1.0 PHP 7.2+ WP 5.0+ Updated Feb 14, 2026
404broken-linksredirectseourl-management
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is RM Smart Redirects Safe to Use in 2026?

Generally Safe

Score 100/100

RM Smart Redirects has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "rm-smart-redirects" plugin v3.1.0 exhibits a generally strong security posture, with all identified entry points properly authenticated and authorized. The code demonstrates excellent adherence to secure coding practices, including 100% output escaping and a high percentage (88%) of SQL queries utilizing prepared statements. The plugin also implements a robust 17 nonce checks and 13 capability checks, further strengthening its defenses. The absence of known CVEs and past vulnerabilities suggests a history of secure development and maintenance.

Key Concerns

  • Flows with unsanitized paths found
  • High severity taint flow detected
  • Two file operations detected
Vulnerabilities
None known

RM Smart Redirects Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

RM Smart Redirects Code Analysis

Dangerous Functions
0
Raw SQL Queries
9
68 prepared
Unescaped Output
0
153 escaped
Nonce Checks
17
Capability Checks
13
File Operations
2
External Requests
0
Bundled Libraries
0

SQL Query Safety

88% prepared77 total queries

Output Escaping

100% escaped153 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

10 flows3 with unsanitized paths
execute_redirect (includes\class-interceptor.php:209)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

RM Smart Redirects Attack Surface

Entry Points10
Unprotected0

AJAX Handlers 10

authwp_ajax_rmsmart_save_redirectadmin\class-ajax.php:16
authwp_ajax_rmsmart_delete_redirectadmin\class-ajax.php:19
authwp_ajax_rmsmart_bulk_deleteadmin\class-ajax.php:22
authwp_ajax_rmsmart_accept_pendingadmin\class-ajax.php:25
authwp_ajax_rmsmart_discard_pendingadmin\class-ajax.php:28
authwp_ajax_rmsmart_delete_404admin\class-ajax.php:31
authwp_ajax_rmsmart_bulk_delete_404admin\class-ajax.php:34
authwp_ajax_rmsmart_get_statsadmin\class-ajax.php:37
authwp_ajax_rmsmart_test_redirectadmin\class-ajax.php:40
authwp_ajax_rmsmart_check_slugadmin\class-ajax.php:43
WordPress Hooks 10
actionadmin_menuadmin\class-menu.php:16
actionadmin_noticesadmin\class-menu.php:19
actionadmin_noticesadmin\class-menu.php:22
actionadmin_enqueue_scriptsadmin\class-menu.php:25
actionadmin_initadmin\class-menu.php:28
actiontemplate_redirectincludes\class-interceptor.php:13
actionpost_updatedincludes\class-watcher.php:16
actionwp_trash_postincludes\class-watcher.php:19
actionuntrashed_postincludes\class-watcher.php:22
actionplugins_loadedrm-smart-redirects.php:33
Maintenance & Trust

RM Smart Redirects Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 14, 2026
PHP min version7.2
Downloads132

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

RM Smart Redirects Developer Profile

Razib Marketing

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect RM Smart Redirects

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/rm-smart-redirects/admin/assets/style.css/wp-content/plugins/rm-smart-redirects/admin/assets/admin.js
Script Paths
/wp-content/plugins/rm-smart-redirects/admin/assets/admin.js
Version Parameters
rm-smart-redirects/admin/assets/style.css?ver=rm-smart-redirects/admin/assets/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
update-pluginscount-plugin-count
Data Attributes
data-actiondata-iddata-nonce
JS Globals
rmsmartAjax
FAQ

Frequently Asked Questions about RM Smart Redirects