WordPress.WP.AlternativeFunctions.curl_curl_init

curl curl init

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#501WP Dynamic Keywords Injector34442051k+Nonce verification recommended
#502Insert Headers And Footers3483113300k+Non-prefixed global variable
#503WP LinkedIn Auto Publish34165568k+Output is not escaped
#504WP Notes Widget3421736700Output is not escaped
#505WP Twitter Feeds34202822k+Output is not escaped
#506Ad Widget for WordPress3568142k+Output is not escaped
#507Antideo Email Validator353898800Missing nonce verification
#508Connect WooCommerce to ActiveCampaign by EqualServing35135891k+Text Domain Mismatch
#509WP2Social Auto Publish356432159k+Unsafe printing function
#510Movylo Marketing Automation353888700error log print r
#511Meta pixel for WordPress359040400k+Exception output is not escaped
#512OT Flatsome Vertical Menu351262610k+Text Domain Mismatch
#513Paytm Payment Gateway35921043k+Missing Arg Domain
#514Accept Cryptocurrencies with Plisio3537471k+Text Domain Mismatch
#515Poptin – Email Marketing Automation, Newsletter & Exit Pop Ups, Email Popups351682920k+Output is not escaped
#516Publitio354726400curl curl setopt
#517SHOPVOTE356458400curl curl setopt
#518Sprout Invoices – Client Invoicing & Estimates35401,7981k+Non-prefixed hook name
#519WC Moneris Payment Gateway3510428900Text Domain Mismatch
#520Converter for Media – Optimize images | Convert WebP & AVIF3513353500k+curl curl setopt
#521Backend Payments for WooCommerce356342900Exception output is not escaped
#522Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing354923050k+Non-prefixed hook name
#523Kybernaut IČO DIČ3579683k+Missing nonce verification
#524WP Cassify35106143800Missing nonce verification
#525WP All Import – Property Import for WP Residence354132700Output is not escaped
#526WPElemento Importer351261239k+Text Domain Mismatch
#527Age Verification for your checkout page. Verify your customer's identity36155238500Output is not escaped
#528Custom Database Applications by Caspio363263400Input is not sanitized
#529Endora3653721k+Output is not escaped
#530Optimize Social Share36203613k+Unsafe printing function
#531Lara's Google Analytics (GA4)36303579k+Unsafe printing function
#532Legal Text Connector of the IT-Recht Kanzlei36454610k+Exception output is not escaped
#533Simple Banner – Easily add multiple Banners/Bars/Notifications/Announcements to the top or bottom of your website362165050k+Output is not escaped
#534Stripe Tax – Sales tax automation for WooCommerce36976130k+Exception output is not escaped
#535Wanderlust OCA para WooCommerce3615755500Text Domain Mismatch
#536Widget Indicadores Económicos (Chile)365320500Output is not escaped
#537Agreeable374067800Unsafe printing function
#538Async JavaScript373577970k+Unsafe printing function
#539Banhammer – Monitor Site Traffic, Block Bad Users and Bots371041741k+Output is not escaped
#540CryptAPI Payment Gateway for WooCommerce3718729400Text Domain Mismatch
#541Duo Two-Factor Authentication3744613k+Missing nonce verification
#542Gmail SMTP37847310k+Unsafe printing function
#543Images to WebP3739509k+curl curl setopt
#544JS Help Desk – AI-Powered Support & Ticketing System37174067k+Missing nonce verification
#545POEditor3778140500Output is not escaped
#546Piraeus Bank WooCommerce Payment Gateway371461043k+Non Singular String Literal Domain
#547Viva Payments – Viva Wallet WooCommerce Payment Gateway3733331k+curl curl setopt
#548Hustle – Email Marketing, Lead Generation, Optins, Popups374,8745,94290k+Non-prefixed global variable
#549WP-Cron Control3754221k+Output is not escaped
#550FundEngine – Donation and Crowdfunding Platform379091k+Exception output is not escaped