WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#601Bookero.pl – system rezerwacji online821271k+curl curl setopt
#602Japanese Proofreading Preview82115400Nonce verification recommended
#603HHG for TranslatePress844318800curl curl setopt
#604Getnet Argentina para WooCommerce86149500Text Domain Mismatch
#605WP YouTube Live8628241k+Non-prefixed function
#606ImageKit – URL based image manipulation and optimization8747421k+Non-prefixed global variable
#607Genesis Blocks88154940k+Offloaded Content
#608External files in Media Library901668400Direct Query
#609Include Mastodon Feed90113800Non-prefixed global variable
#610getLaw WP API Client91114600curl curl setopt
#611IndieAuth923027400Missing direct file access protection
#612WP Force SSL & HTTPS SSL Redirect92182190k+Non-prefixed global variable
#613Drag and Drop File Upload for Elementor Forms942911k+curl curl setopt