VS Custom Redirects Security & Risk Analysis

wordpress.org/plugins/very-simple-custom-redirects

With this lightweight plugin you can set a custom page redirect for the default Login, Logout, Register and Lost Password feature.

10 active installs v3.4 PHP 7.4+ WP 6.0+ Updated Jan 16, 2026
classicpresslogin-redirectlogout-redirectredirectredirection
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is VS Custom Redirects Safe to Use in 2026?

Generally Safe

Score 100/100

VS Custom Redirects has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "very-simple-custom-redirects" v3.4 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of any identified entry points like AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces its attack surface. Furthermore, all identified outputs are properly escaped, and there are no dangerous function calls, file operations, or external HTTP requests, indicating good coding practices in these areas. The plugin also has no recorded vulnerability history, which is a positive sign.

Key Concerns

  • Raw SQL queries without prepared statements
  • No nonce checks for entry points
  • No capability checks for entry points
Vulnerabilities
None known

VS Custom Redirects Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

VS Custom Redirects Release Timeline

v3.4Current
v3.3
v3.2
v3.1
v3.0
v2.9
v2.8
v2.7
v2.6
v2.5
v2.4
v2.3
v2.2
v2.1
v2.0
v1.9
v1.8
Code Analysis
Analyzed Mar 17, 2026

VS Custom Redirects Code Analysis

Dangerous Functions
0
Raw SQL Queries
1
0 prepared
Unescaped Output
0
29 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

0% prepared1 total queries

Output Escaping

100% escaped29 total outputs
Attack Surface

VS Custom Redirects Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_menuvscr-options.php:11
actionadmin_initvscr-options.php:69
filterlogin_redirectvscr.php:80
filterlogout_redirectvscr.php:135
filterlostpassword_urlvscr.php:145
filterregister_urlvscr.php:155
Maintenance & Trust

VS Custom Redirects Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 16, 2026
PHP min version7.4
Downloads3K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

VS Custom Redirects Developer Profile

Guido

20 plugins · 24K total installs

76
trust score
Avg Security Score
95/100
Avg Patch Time
341 days
View full developer profile
Detection Fingerprints

How We Detect VS Custom Redirects

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about VS Custom Redirects