WordPress.WP.AlternativeFunctions.curl_curl_error

curl curl error

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#2JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#3RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#4Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#5Podlove Podcast Publisher182,3541,4333k+Output is not escaped
#6Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#7AI Infographic Maker191,383599600Output is not escaped
#8Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#9Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#10Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#11Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#12SendPress Newsletters192,2931,4221k+Output is not escaped
#13WP Email Template193443452k+Exception output is not escaped
#14WPOSS阿里云对象存储19269315900Non-prefixed namespace
#15WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#16Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#17Download Monitor204231,36480k+Non-prefixed hook name
#18Leaky Paywall20322789600Nonce verification recommended
#19Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#20Shipping for Nova Poshta20598923500Output is not escaped
#21پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#22Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#23Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#24Razorpay for WooCommerce20975859100k+Non-prefixed function
#25Premium Packages – Sell Digital Products Securely202,0322,1902k+Non-prefixed global variable
#26Backup Migration219811,09380k+Non-prefixed global variable
#27Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#28Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#29Eupago Gateway For Woocommerce215762332k+Output is not escaped
#30FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#31Front End Users217192,759400Non-prefixed global variable
#32Mergado Pack212,323588700Output is not escaped
#33OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#34Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#35Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#36Razorpay for Gravity Forms2141147600Exception output is not escaped
#37Razorpay Quick Payments21399632k+Exception output is not escaped
#38Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#39Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#40Seamless Donations is Sunset216005142k+Text Domain Mismatch
#41SeatReg213121,637400Missing nonce verification
#42Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#43Accept Stripe Payments2137389220k+Missing nonce verification
#44Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#45Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#46Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#47WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#48WP-Lister Lite for eBay216,6965,1282k+Output is not escaped
#49wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#50WebTotem Security211,110213800Text Domain Mismatch