WP HealthKit's independent audit rates Hrefix overall risk as HIGH with a report-card grade of B.

How many vulnerabilities does Hrefix have?

The audit found 28 findings: 0 critical, 2 high, 9 medium severity.

Based on the latest audit (grade B, risk HIGH), review the 28 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Hrefix

Audited at release

v1.0.0WordPress PluginAudited Today

Broken link checker and redirect fixer that runs 100% on your own site.

HIGH

Total Findings

Security Grade

Security Findings

Critical0

High2

Medium9

Low15

Info2

Executive Summary

Is Hrefix secure? In WP HealthKit's independent 2026 audit, Hrefix received an overall risk of HIGH and a report-card grade of B across 28 findings (0 critical, 2 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PerformanceDatabaseHook WiringInternationalizationPlugin LifecycleSecurityCoding StandardsWordPress Compatibilitycompatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Hrefix security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/hrefix)](https://wphealthkit.com/directory/hrefix)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Audit Your Plugin

Get a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.

Start Free Audit

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

PerformanceDatabaseHook WiringInternationalizationPlugin LifecycleSecurityCoding StandardsWordPress Compatibilitycompatibility