WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51All-in-One Video Gallery229112,89220k+Non-prefixed global variable
#52Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception output is not escaped
#53Better WordPress Minify224124848k+Non Singular String Literal Domain
#54RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6545,0618k+Non-prefixed global variable
#55Data Tables Generator by Supsystic2215614410k+Exception output is not escaped
#56Falang multilanguage for WordPress227167691k+Output is not escaped
#57File Manager Pro – Filester22565391100k+Request data is not unslashed
#58FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non-prefixed global variable
#59Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#60FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#61Anti-Malware Security and Brute-Force Firewall22544965100k+Output is not escaped
#62HeadSpace2 SEO229403603k+Text Domain Mismatch
#63Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#64InfiniteWP Client222,2861,812200k+Exception output is not escaped
#65MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#66Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#67Newsletters222,9682,2482k+Text Domain Mismatch
#68PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#69Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#70Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#71Quick Contact Form222606231k+Non-prefixed function
#72RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#73Seraphinite Accelerator2259425550k+Output is not escaped
#74ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#75SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#76Theme Editor2279868550k+Output is not escaped
#77Customize Feeds for Twitter22921714k+Non-prefixed global variable
#78Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#79WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#80WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#81Simple Shopping Cart2279653610k+Unsafe printing function
#82Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#83WP Easy Pay – Payment and Donation form Builder for Square228931,8281k+Non-prefixed global variable
#84WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#85File Manager227405201m+Unsafe printing function
#86WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222766835k+Nonce verification recommended
#87WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception output is not escaped
#88Wp-Insert2226730110k+Output is not escaped
#89WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#90NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#91WP-WebAuthn229573962k+Exception output is not escaped
#92WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#93WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#94YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#95Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#96Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#97B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More231,34740910k+Text Domain Mismatch
#98BlossomThemes Email Newsletter2333723920k+Output is not escaped
#99Booking calendar, Appointment Booking System231,0791,1254k+Output is not escaped
#100Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable