WordPress.WP.AlternativeFunctions.curl_curl_getinfo
curl curl getinfo
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Why It Shows Up
Plugin Check found `curl_*` calls in plugin code.
Why It Matters
The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.
How to Fix
- Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
- Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
- If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,702 | 8,486 | 40k+ | Non-prefixed namespace | ||
| #102 | Essential Real Estate | 23 | 529 | 5,060 | 7k+ | Non-prefixed global variable | ||
| #103 | Fastcache by Host.it | 23 | 1,327 | 207 | 900 | Text Domain Mismatch | ||
| #104 | Flexmls® IDX Plugin | 23 | 1,268 | 957 | 1k+ | Output is not escaped | ||
| #105 | FV Flowplayer Video Player | 23 | 1,280 | 1,456 | 10k+ | Output is not escaped | ||
| #106 | GAinWP Google Analytics Integration for WordPress | 23 | 525 | 176 | 8k+ | Output is not escaped | ||
| #107 | Photo Gallery – Responsive Image Galleries by Supsystic | 23 | 214 | 72 | 20k+ | Text Domain Mismatch | ||
| #108 | Heureka | 23 | 534 | 237 | 400 | Exception output is not escaped | ||
| #109 | Houzez Property Feed | 23 | 1,416 | 1,585 | 1k+ | Text Domain Mismatch | ||
| #110 | InfiniteWP Client | 23 | 2,379 | 1,844 | 200k+ | Exception output is not escaped | ||
| #111 | Link Whisper Free | 23 | 3,944 | 5,456 | 30k+ | Text Domain Mismatch | ||
| #112 | MailPoet – Newsletters, Email Marketing, and Automation | 23 | 956 | 721 | 500k+ | Exception output is not escaped | ||
| #113 | Order Bump for WooCommerce | 23 | 1,720 | 1,562 | 700 | Output is not escaped | ||
| #114 | Restaurant Menu and Food Ordering | 23 | 385 | 853 | 2k+ | Non-prefixed global variable | ||
| #115 | MyWorks Sync for WooCommerce & QuickBooks Online | 23 | 2,292 | 9,101 | 5k+ | Non-prefixed global variable | ||
| #116 | PowerPress Podcasting plugin by Blubrry | 23 | 4,789 | 2,452 | 20k+ | Output is not escaped | ||
| #117 | Redirection | 23 | 523 | 457 | 100k+ | Non-prefixed global variable | ||
| #118 | Seraphinite Post .DOCX Source | 23 | 1,156 | 110 | 900 | Output is not escaped | ||
| #119 | Image Optimizer, Resizer and CDN – Sirv | 23 | 614 | 1,004 | 1k+ | Output is not escaped | ||
| #120 | Smart Marketing SMS and Newsletters Forms | 23 | 2,231 | 1,015 | 1k+ | Text Domain Mismatch | ||
| #121 | Trinity Audio – Text to Speech AI audio player to convert content into audio | 23 | 119 | 227 | 2k+ | Non-prefixed global variable | ||
| #122 | Directory Listings WordPress plugin – uListing | 23 | 947 | 1,573 | 1k+ | Non-prefixed global variable | ||
| #123 | W3 Total Cache | 23 | 307 | 678 | 900k+ | Non-prefixed global variable | ||
| #124 | Cart PDF for WooCommerce | 23 | 531 | 172 | 1k+ | Exception output is not escaped | ||
| #125 | WHMCS Bridge | 23 | 247 | 472 | 4k+ | Nonce verification recommended | ||
| #126 | PostFinance Checkout | 23 | 995 | 221 | 900 | Text Domain Mismatch | ||
| #127 | ManageWP Worker | 23 | 501 | 570 | 1m+ | Non-prefixed class | ||
| #128 | Clone | 23 | 244 | 262 | 40k+ | Output is not escaped | ||
| #129 | WP Easy Pay – Payment and Donation Form Builder for Square | 23 | 908 | 1,820 | 1k+ | Non-prefixed global variable | ||
| #130 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | Non-prefixed global variable | ||
| #131 | Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions | 23 | 1,112 | 1,871 | 9k+ | Output is not escaped | ||
| #132 | Lead Form Data Collection to CRM | 23 | 211 | 1,698 | 400 | Non-prefixed global variable | ||
| #133 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | Non-prefixed global variable | ||
| #134 | Comments – wpDiscuz | 23 | 659 | 1,177 | 70k+ | Non-prefixed global variable | ||
| #135 | Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | 23 | 2,317 | 1,714 | 5k+ | Output is not escaped | ||
| #136 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | Direct Query | ||
| #137 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | Non-prefixed global variable | ||
| #138 | Booking for Appointments and Events Calendar – Amelia | 24 | 1,565 | 549 | 90k+ | Exception output is not escaped | ||
| #139 | Auto-Install Free SSL – Generate & Install Free SSL Certificates | 24 | 985 | 1,496 | 8k+ | Non-prefixed global variable | ||
| #140 | Backuply – Backup, Restore, Migrate and Clone | 24 | 711 | 556 | 600k+ | Non-prefixed global variable | ||
| #141 | Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) | 24 | 1,865 | 1,089 | 1k+ | Text Domain Mismatch | ||
| #142 | Broken Link Checker | 24 | 693 | 629 | 500k+ | Output is not escaped | ||
| #143 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | Text Domain Mismatch | ||
| #144 | Church Admin | 24 | 1,556 | 4,200 | 800 | Direct Query | ||
| #145 | Spam protection, Honeypot, Anti-Spam by CleanTalk | 24 | 826 | 1,126 | 200k+ | Missing nonce verification | ||
| #146 | CM Pop-Up – Create engaging popups to capture attention and boost interaction | 24 | 466 | 408 | 8k+ | Output is not escaped | ||
| #147 | Custom CSS | 24 | 703 | 657 | 1k+ | Output is not escaped | ||
| #148 | Customer Reviews for WooCommerce | 24 | 2,201 | 2,437 | 80k+ | Output is not escaped | ||
| #149 | Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load) | 24 | 209 | 521 | 600 | Direct Query | ||
| #150 | Enable Media Replace | 24 | 212 | 276 | 600k+ | Output is not escaped |
