PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_error

curl curl error

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#2JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#3RestroPress – Online Food Ordering System175353,2341k+Non-prefixed global variable
#4Administrator Z182,061799400Output is not escaped
#5Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#6Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#7Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#8Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#9Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#10SendPress Newsletters192,2931,4221k+Output is not escaped
#11WP Email Template193443452k+Exception output is not escaped
#12WPOSS阿里云对象存储19269315900Non-prefixed namespace
#13WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#14Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#15Download Monitor204231,36780k+Non-prefixed hook name
#16Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8781,9881m+Non-prefixed global variable
#17Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#18Shipping for Nova Poshta20598923400Output is not escaped
#19پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#20Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#21Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#22Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#23WP Compress – Instant Performance & Speed Optimization204,2923,69110k+Non Singular String Literal Domain
#24Premium Packages – Sell Digital Products Securely202,0432,2992k+Non-prefixed global variable
#25Backup Migration219991,08180k+Non-prefixed global variable
#26Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#27Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#28Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6732,18010k+Direct Query
#29Spam protection, Honeypot, Anti-Spam by CleanTalk218351,146200k+Missing nonce verification
#30Eupago Gateway For Woocommerce215762332k+Output is not escaped
#31FileOrganizer – WordPress File Manager21549261200k+unlink unlink
#32Front End Users217192,759400Non-prefixed global variable
#33AI Infographic Maker211,311456600Output is not escaped
#34Mergado Pack212,323588700Output is not escaped
#35MultiParcels Shipping For WooCommerce212454264k+Request data is not unslashed
#36OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#37Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9138k+Non-prefixed global variable
#38Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9945,33110k+Non-prefixed hook name
#39Razorpay for Gravity Forms2141147500Exception output is not escaped
#40Razorpay Quick Payments21399632k+Exception output is not escaped
#41Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#42Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#43Seamless Donations is Sunset216005142k+Text Domain Mismatch
#44SeatReg213521,862300Missing nonce verification
#45Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#46Accept Stripe Payments2137389120k+Missing nonce verification
#47Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125443520k+Non-prefixed hook name
#48Buckaroo Payments for WooCommerce216923512k+Exception output is not escaped
#49WCFM Marketplace – Multivendor Marketplace for WooCommerce211,9482,10810k+Non-prefixed global variable
#50Peach Payments Gateway213351441k+Non Singular String Literal Domain