Custom link destinations change where visitors go when they open a WordPress entry or follow its title. Page Links To version 3.4.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65715. The review focused on post editing permissions, destination URL validation, saved link metadata, redirect behavior, and output of replacement links.
| Name of | Page Links To |
| Version | 3.4.1 |
| Active installations | 100,000+ |
| Description | Lets a post, page, or custom post type link to a chosen URL and redirects visits to its original WordPress URL to that destination. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Awarded PSC-2026-65715 through the CleanTalk Plugin Security Certification program for version 3.4.1. |
| Additional Information | Use destinations you trust, verify the resulting redirect, and review external links when ownership or content changes. Restrict editing rights for entries that serve as important navigation points. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkMake security review part of your plugin development process and give WordPress site owners a clear certification reference.
Key Features
Page Links To gives an entry a custom destination while keeping it available within the WordPress content structure. A page can point to another area of the same site or to an external resource, and visitors to the original URL are redirected to the configured destination. This supports navigation entries, links to content published elsewhere, and short memorable URLs for longer addresses.
Security Assurance
The evaluation covered permission checks when changing an entry destination, validation and storage of the supplied URL, and the values used for generated links and redirects. The review also considered how those settings appear in the editing interface. Destinations are intentionally configurable, so the choice of an external site remains part of the editorial workflow.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
Page Links To version 3.4.1 receives PSC-2026-65715 for its link replacement and redirect functionality. The certification scope includes destination input, editing access, saved metadata, and public link output. Review configured URLs during migrations and after structural changes so visitors continue to reach the intended content.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
