WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non-prefixed global variable
#202AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress241,7051,3937k+Text Domain Mismatch
#203Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#204Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8651,0891k+Text Domain Mismatch
#205Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,3173,37510k+slow db query meta key
#206Captivate Sync241735571k+Non-prefixed global variable
#207Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#208Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#209Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#210Church Admin241,5544,207900Direct Query
#211CleanTalk Anti-Spam. Spam Firewall & Bot protection248181,092200k+Missing nonce verification
#212Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#213CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#214Complianz – GDPR/CCPA Cookie Consent244874031m+Missing Arg Domain
#215RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress248283,665500Request data is not unslashed
#216Custom CSS247036571k+Output is not escaped
#217Customer Reviews for WooCommerce242,2022,44580k+Output is not escaped
#218Enable Media Replace24212276600k+Output is not escaped
#219Export WordPress Pages to Static HTML & PDF — Static Site Export245093044k+Text Domain Mismatch
#220Etsy Integration For WooCommerce241,2464,643900Non-prefixed global variable
#221F12 Profiler24282451500Direct Query
#222Featured Post with thumbnail24158122400Output is not escaped
#223FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#224Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#225FV Simpler SEO247663082k+Text Domain Mismatch
#226Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#227Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#228Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#229Import from YML2497306400Non-prefixed global variable
#230InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#231Dynamics 365 Integration24383166600Output is not escaped
#232Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets249692,1407k+Non-prefixed global variable
#233Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non-prefixed global variable
#234Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#235Mailjet Email Marketing2443520610k+Unsafe printing function
#236Mang Board WP241,2134,7209k+Non-prefixed global variable
#237Marketing Automation24440677600Non-prefixed global variable
#238Musician's Pack for Elementor – Music Website Widgets & Templates241,725228400Text Domain Mismatch
#239MxChat – AI Chatbot & Content Generation for WordPress243,2301,4052k+Text Domain Mismatch
#240Newsletter Subscription Form – User Subscriptions Form, Capture Email243858291k+Non-prefixed global variable
#241Paymob for WooCommerce243482885k+Text Domain Mismatch
#242PayPal Brasil para WooCommerce245543291k+Unsafe printing function
#243PDF Generator for WordPress Elementor245132711k+Exception output is not escaped
#244PeproDev Ultimate Invoice243792344k+Output is not escaped
#245PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1762,416500k+Non-prefixed namespace
#246Post Affiliate Pro24293335500Nonce verification recommended
#247Premium Blocks – Gutenberg Blocks, Patterns & Templates241403082k+Non-prefixed function
#248reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#249Sailthru for WordPress242392662k+Non-prefixed global variable
#250Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes24235330600Non-prefixed global variable