WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351Omise Payments263582562k+Output is not escaped
#352Online Contact Widget-多合一在线客服插件2670880800Non Singular String Literal Domain
#353Barion Payment Gateway for WooCommerce26712216k+Non-prefixed global variable
#354Pressidium Cookie Consent262039510k+Exception output is not escaped
#355Related Posts Thumbnails Plugin for WordPress2638219820k+Output is not escaped
#356User Avatar261041734k+Non-prefixed constant
#357User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch
#358Parcel Pro26171220600Output is not escaped
#359WP Flashy Marketing Automation264321862k+Text Domain Mismatch
#360Duplicate Post27447274300k+Unsafe printing function
#361CM Tooltip Glossary276111887k+Output is not escaped
#362Foxtool All-in-One: Contact chat button, Custom login, Media optimize images271,6293607k+Unsafe printing function
#363Login for Google Apps271398510k+Exception output is not escaped
#364Gravity Forms + Stripe27368210600Output is not escaped
#365GSpeech TTS – WordPress Text To Speech Plugin278423333k+Output is not escaped
#366iQ Block Country2716424520k+Request data is not unslashed
#367Online Booking & Scheduling Calendar for WordPress by vcita274731611k+Output is not escaped
#368Nextend Social Login and Register271,668243200k+Output is not escaped
#369Robokassa payment gateway for Woocommerce27952113k+Non-prefixed global variable
#370Sign-up Sheets273253631k+Output is not escaped
#371Simple Download Monitor2721827320k+Output is not escaped
#372Speed Booster Pack ⚡ PageSpeed Optimization Suite271081879k+Missing Translators Comment
#373Stream Video Player27220135600Output is not escaped
#374Transbank Webpay2719821110k+Non-prefixed global variable
#375Under Construction, Coming Soon & Maintenance Mode2740114810k+Output is not escaped
#376Whols – Wholesale Prices and B2B Store Solution for WooCommerce272282352k+Output is not escaped
#377WPBase Cache271891132k+Text Domain Mismatch
#378AForms — Form Builder for Price Calculator & Cost Estimation28564953k+Text Domain Mismatch
#379Void Contact Form 7 Widget For Elementor Page Builder282796610k+Text Domain Mismatch
#380Expand Divi28911001k+Non-prefixed global variable
#381Friends281646701k+Non-prefixed global variable
#382گیت‌لند | درگاه پرداخت هوشمند گیت‌لند283272352k+Output is not escaped
#383GTmetrix for WordPress28109708k+Output is not escaped
#384Kama Thumbnail2880479k+Output is not escaped
#385Laposta Signup Basic28276672k+Output is not escaped
#386WP to LinkedIn Auto Publish28734250900Unsafe printing function
#387درگاه پرداخت بانک ملت ووکامرس28611302k+Request data is not unslashed
#388My auctions allegro28483235500Non Singular String Literal Domain
#389Notification for Telegram28189934k+Output is not escaped
#390ووکامرس فارسی2815721590k+Output is not escaped
#391افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری2813119020k+Missing nonce verification
#392PHP Browser Detection286849600Non-prefixed function
#393Podcast Importer SecondLine283561694k+Text Domain Mismatch
#394PushAlert – Web Push Notifications for WordPress and WooCommerce28196631k+curl curl setopt
#395Redis Object Cache28151103400k+Exception output is not escaped
#396PayZen for WooCommerce28258214600Output is not escaped
#397WP Mapbox GL JS Maps281041191k+Output is not escaped
#398Connect Matomo – Analytics Dashboard for WordPress2810010260k+Missing Translators Comment
#399WhyDonate – FREE Donate button – Crowdfunding – Fundraising28216328800Non-prefixed global variable
#400WP YouTube Lyte2820417830k+Non-prefixed global variable