WordPress.WP.AlternativeFunctions.curl_curl_getinfo
curl curl getinfo
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Why It Shows Up
Plugin Check found `curl_*` calls in plugin code.
Why It Matters
The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.
How to Fix
- Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
- Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
- If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #201 | Breeze Cache | 25 | 219 | 802 | 300k+ | Non-prefixed global variable | ||
| #202 | Kognetiks Chatbot for WordPress | 25 | 681 | 1,510 | 600 | Non-prefixed global variable | ||
| #203 | CheckoutWC Lite – Conversion optimized WooCommerce checkout | 25 | 1,420 | 857 | 2k+ | Text Domain Mismatch | ||
| #204 | Smart Online Order for Clover | 25 | 1,744 | 1,148 | 1k+ | Text Domain Mismatch | ||
| #205 | HIPAA FORMS | 25 | 414 | 416 | 800 | Request data is not unslashed | ||
| #206 | DecaLog | 25 | 943 | 236 | 1k+ | Exception output is not escaped | ||
| #207 | Demo Importer Plus | 25 | 58 | 239 | 10k+ | Non-prefixed hook name | ||
| #208 | WEB-Translation – eTranslation Multilingual | 25 | 217 | 1,057 | 400 | Non-prefixed function | ||
| #209 | Events Made Easy | 25 | 538 | 6,376 | 1k+ | Non-prefixed function | ||
| #210 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,318 | 242 | 5m+ | Missing direct file access protection | ||
| #211 | Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin | 25 | 608 | 207 | 20k+ | Text Domain Mismatch | ||
| #212 | GPTranslate – Multilingual AI Translation for WordPress: Translate Websites with AI Agents | 25 | 286 | 223 | 500 | badly named files | ||
| #213 | Hardcore Google Fonts Localizer | 25 | 331 | 261 | 800 | Text Domain Mismatch | ||
| #214 | Kadence Central – Site Management, Backups, Security, and Reporting | 25 | 451 | 214 | 30k+ | Text Domain Mismatch | ||
| #215 | Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention | 25 | 617 | 614 | 1m+ | Unsafe printing function | ||
| #216 | Loginizer | 25 | 820 | 502 | 1m+ | Output is not escaped | ||
| #217 | MyFatoorah – WooCommerce | 25 | 191 | 89 | 2k+ | Output is not escaped | ||
| #218 | Object Sync for Salesforce | 25 | 192 | 296 | 500 | Non-prefixed global variable | ||
| #219 | phpinfo() WP – Site Health, PHP Compatibility & Server Audit | 25 | 993 | 776 | 3k+ | Unsafe printing function | ||
| #220 | reSmush.it : The original free image compressor and optimizer plugin | 25 | 155 | 69 | 100k+ | Output is not escaped | ||
| #221 | BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript | 25 | 204 | 556 | 4k+ | Non-prefixed global variable | ||
| #222 | ShopMagic – email automation for WordPress | 25 | 228 | 148 | 10k+ | Exception output is not escaped | ||
| #223 | Social Media Share Buttons & Social Sharing Icons | 25 | 2,432 | 1,365 | 100k+ | Unsafe printing function | ||
| #224 | Social Share Icons & Social Share Buttons | 25 | 2,365 | 1,357 | 10k+ | Output is not escaped | ||
| #225 | VikAppointments Services Booking Calendar | 25 | 9,759 | 5,209 | 500 | Output is not escaped | ||
| #226 | VikBooking Hotel Booking Engine & PMS | 25 | 13,251 | 8,316 | 8k+ | Output is not escaped | ||
| #227 | VikRentCar Car Rental Management System | 25 | 5,537 | 5,048 | 4k+ | Non-prefixed global variable | ||
| #228 | VikRentItems Flexible Rental Management System | 25 | 4,767 | 4,640 | 600 | Non-prefixed global variable | ||
| #229 | VikRestaurants Table Reservations and Take-Away | 25 | 11,644 | 4,932 | 600 | Output is not escaped | ||
| #230 | PDF Ink Lite – Free PDF Watermark & Password Protection | 25 | 207 | 595 | 2k+ | Non-prefixed global variable | ||
| #231 | SlimStat Analytics | 25 | 1,177 | 870 | 70k+ | Exception output is not escaped | ||
| #232 | WP Statistics – Simple, privacy-friendly Google Analytics alternative | 25 | 612 | 2,469 | 600k+ | Non-prefixed global variable | ||
| #233 | WPvivid Backup for MainWP | 25 | 852 | 1,798 | 10k+ | Missing nonce verification | ||
| #234 | WPvivid — Backup, Migration & Staging | 25 | 903 | 1,461 | 900k+ | Non-prefixed namespace | ||
| #235 | Bus Ticket Booking with Seat Reservation | 26 | 211 | 398 | 800 | Non-prefixed global variable | ||
| #236 | Accept Donations with PayPal & Stripe | 26 | 913 | 573 | 10k+ | Unsafe printing function | ||
| #237 | RSS Redirect & Feedburner Alternative | 26 | 277 | 272 | 1k+ | Output is not escaped | ||
| #238 | FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) | 26 | 594 | 418 | 2k+ | Exception output is not escaped | ||
| #239 | FV Antispam | 26 | 332 | 239 | 900 | Output is not escaped | ||
| #240 | Translate WordPress – Google Language Translator | 26 | 200 | 317 | 100k+ | Non-prefixed global variable | ||
| #241 | Import from YML | 26 | 68 | 299 | 400 | Non-prefixed global variable | ||
| #242 | Integrate Razorpay for Contact Form 7 | 26 | 152 | 97 | 500 | curl curl setopt | ||
| #243 | Landing Page Cat – Coming Soon & Maintenance Pages | 26 | 91 | 180 | 600 | Non-prefixed class | ||
| #244 | My auctions allegro | 26 | 484 | 258 | 500 | Non Singular String Literal Domain | ||
| #245 | Pressidium Cookie Consent | 26 | 203 | 95 | 10k+ | Exception output is not escaped | ||
| #246 | User Avatar | 26 | 104 | 173 | 4k+ | Non-prefixed constant | ||
| #247 | Parcel Pro | 26 | 171 | 220 | 600 | Output is not escaped | ||
| #248 | WP Flashy Marketing Automation | 26 | 432 | 186 | 2k+ | Text Domain Mismatch | ||
| #249 | Translate WordPress with ConveyThis – AI Multilingual Plugin | 27 | 159 | 298 | 1k+ | Non-prefixed global variable | ||
| #250 | CM Tooltip Glossary | 27 | 611 | 188 | 7k+ | Output is not escaped |
