PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_init

curl curl init

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#551WP-Cron Control3754221k+Output is not escaped
#552FundEngine – Donation and Crowdfunding Platform379091k+Exception output is not escaped
#553AdRoll for WooCommerce Stores384025600Output is not escaped
#554Aplazame383439600Non-prefixed global variable
#555SoftTech-IT bKash, Rocket, Nagad38164816k+Text Domain Mismatch
#556Bot Block – Stop Spam Referrals in Google Analytics382842600Output is not escaped
#557Country Code Selector3891201k+Unsafe printing function
#558imoje38621602k+Nonce verification recommended
#559RDP Wiki Embed386926400Output is not escaped
#560TWIPLA (Visitor Analytics IO) – Privacy-First Website Stats, Session Recordings, Heatmaps, Polls and Surveys387149900Output is not escaped
#561WC-AC Hook3844721k+Missing nonce verification
#562External Store for Shopify3897332k+Output is not escaped
#563Benchmark Email Lite3986231k+Output is not escaped
#564GF Mollie by Indigo398233900Exception output is not escaped
#565Leaflet Map39593230k+Output is not escaped
#566linkPizza-Manager394623700Exception output is not escaped
#567MailChimp Add-On for FormCraft395629800curl curl setopt
#568Virusdie | One-click website security39149662k+Output is not escaped
#569Advanced IP Blocker4094432k+Exception output is not escaped
#570WP All Import – Listings Import for Listify403427400Output is not escaped
#571WP All Import – Job Listing Import for WP Job Manager4035272k+Output is not escaped
#572Heroic Favicon Generator4110476k+Output is not escaped
#573PAYDUNYA WOOCOMMERCE PAR425432600Text Domain Mismatch
#574WC Speed Repair4234741k+Non-prefixed global variable
#575Custom Menu438311400wp function not compatible with requires wp
#576Good Old Twitter Feed Widget4311010400Text Domain Mismatch
#577Trusty Whistleblowing Solution4423416400Text Domain Mismatch
#578WPKoi Templates for Elementor44937255k+Text Domain Mismatch
#579Gateway zibal for Woocommerce4470246k+Text Domain Mismatch
#580reCAPTCHA for Asgaros Forum4521364k+Input is not validated
#581Simple Membership MailChimp Integration4534271k+curl curl setopt
#582Export Import Menus46232810k+Missing nonce verification
#583Gateway AqayePardakht for Woocommerce4772234k+Text Domain Mismatch
#584KCSG Kartra Pages473016500Heredoc Output Not Escaped
#585WC Provincia Canton Distrito48103141k+Text Domain Mismatch
#586Instamojo for WooCommerce4872445k+Text Domain Mismatch
#587Sitemap Generator5060263k+Output is not escaped
#588Veeqo for WooCommerce503017700Missing direct file access protection
#589Menu Icons by Themeisle – Add Icons to Navigation Menus513422100k+Output is not escaped
#590Mintpay511435600Nonce verification recommended
#591POLi Payments for WooCommerce516226500Text Domain Mismatch
#592Yeloni Exit Popup | (Free) GDPR Compliance544112700Output is not escaped
#593AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation5665201k+Text Domain Mismatch
#594Fluent Connect – Connect ThriveCart with your WordPress and FluentCRM563754600curl curl setopt
#595JSON API User5717341k+Non-prefixed hook name
#596Payment Gateway for LiqPay for Woocommerce5984311k+Text Domain Mismatch
#597HelloAsso60132894k+Short PHP open tag found
#598Topic SEO Content Optimization Tool6235151k+curl curl close
#599Satispay for WooCommerce6219127k+Exception output is not escaped
#600XPoster – Share to Bluesky and Mastodon62263610k+Missing nonce verification