WordPress.WP.AlternativeFunctions.curl_curl_init
curl curl init
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Why It Shows Up
Plugin Check found `curl_*` calls in plugin code.
Why It Matters
The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.
How to Fix
- Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
- Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
- If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Mergado Pack | 21 | 2,323 | 588 | 700 | Output is not escaped | ||
| #52 | Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred | 21 | 1,469 | 3,333 | 10k+ | Non-prefixed global variable | ||
| #53 | OneLogin SAML SSO | 21 | 507 | 330 | 7k+ | wp function not compatible with requires wp | ||
| #54 | Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages | 21 | 1,173 | 2,983 | 9k+ | Non-prefixed global variable | ||
| #55 | Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction | 21 | 1,918 | 5,065 | 10k+ | Non-prefixed hook name | ||
| #56 | Razorpay for Gravity Forms | 21 | 411 | 47 | 600 | Exception output is not escaped | ||
| #57 | Razorpay Quick Payments | 21 | 399 | 63 | 3k+ | Exception output is not escaped | ||
| #58 | Five Star Restaurant Reservations – WordPress Booking Plugin | 21 | 1,099 | 1,147 | 10k+ | Output is not escaped | ||
| #59 | Rocket Maintenance Mode & Coming Soon Page | 21 | 1,176 | 1,406 | 4k+ | Non-prefixed global variable | ||
| #60 | Seamless Donations is Sunset | 21 | 600 | 514 | 2k+ | Text Domain Mismatch | ||
| #61 | SeatReg | 21 | 312 | 1,637 | 400 | Missing nonce verification | ||
| #62 | Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic | 21 | 327 | 181 | 10k+ | Output is not escaped | ||
| #63 | Accept Stripe Payments | 21 | 373 | 882 | 20k+ | Missing nonce verification | ||
| #64 | Revive Social – Social Media Auto Post and Scheduling Automation Plugin | 21 | 255 | 425 | 20k+ | Non-prefixed hook name | ||
| #65 | Buckaroo Woocommerce Payments Plugin | 21 | 584 | 326 | 2k+ | Exception output is not escaped | ||
| #66 | Wise Chat | 21 | 470 | 506 | 5k+ | Output is not escaped | ||
| #67 | Paysera Payment Gateway for WooCommerce | 21 | 1,866 | 195 | 7k+ | Exception output is not escaped | ||
| #68 | Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools | 21 | 786 | 3,395 | 30k+ | Non-prefixed global variable | ||
| #69 | WP Compress – Instant Performance & Speed Optimization | 21 | 3,358 | 3,271 | 10k+ | Non Singular String Literal Domain | ||
| #70 | WP-Lister Lite for eBay | 21 | 6,697 | 5,129 | 2k+ | Output is not escaped | ||
| #71 | WP phpMyAdmin | 21 | 4,528 | 6,435 | 50k+ | Missing Arg Domain | ||
| #72 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin | 21 | 1,811 | 1,432 | 70k+ | Output is not escaped | ||
| #73 | Premium Packages – Sell Digital Products Securely | 21 | 2,765 | 2,444 | 3k+ | Output is not escaped | ||
| #74 | WebTotem Security | 21 | 1,110 | 213 | 900 | Text Domain Mismatch | ||
| #75 | 12 Step Meeting List | 22 | 156 | 593 | 900 | Non-prefixed global variable | ||
| #76 | All-in-One Video Gallery | 22 | 911 | 2,892 | 20k+ | Non-prefixed global variable | ||
| #77 | Booking for Appointments and Events Calendar – Amelia | 22 | 1,489 | 480 | 90k+ | Exception output is not escaped | ||
| #78 | ANAC XML Bandi di Gara | 22 | 294 | 244 | 600 | Output is not escaped | ||
| #79 | Better WordPress Minify | 22 | 412 | 484 | 8k+ | Non Singular String Literal Domain | ||
| #80 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | Text Domain Mismatch | ||
| #81 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login | 22 | 3,654 | 5,061 | 8k+ | Non-prefixed global variable | ||
| #82 | Data Tables Generator by Supsystic | 22 | 157 | 150 | 10k+ | Exception output is not escaped | ||
| #83 | Database Access with Adminer | 22 | 983 | 2,553 | 1k+ | Non-prefixed global variable | ||
| #84 | Falang multilanguage for WordPress | 22 | 716 | 769 | 1k+ | Output is not escaped | ||
| #85 | File Manager Pro – Filester | 22 | 565 | 391 | 100k+ | Request data is not unslashed | ||
| #86 | FireBox Popups – Increase Sales and Grow Your Email List | 22 | 153 | 812 | 7k+ | Non-prefixed global variable | ||
| #87 | Five Star Restaurant Menu and Food Ordering | 22 | 752 | 609 | 5k+ | Output is not escaped | ||
| #88 | FunnelKit Payment Gateway for Stripe WooCommerce | 22 | 244 | 321 | 20k+ | Input is not sanitized | ||
| #89 | HeadSpace2 SEO | 22 | 940 | 360 | 3k+ | Text Domain Mismatch | ||
| #90 | Heureka | 22 | 557 | 254 | 400 | Exception output is not escaped | ||
| #91 | Számlázz.hu integráció WooCommerce-hez | 22 | 1,169 | 460 | 7k+ | Text Domain Mismatch | ||
| #92 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | Exception output is not escaped | ||
| #93 | JCC Payment Gateway for Woocommerce | 22 | 2,273 | 1,136 | 600 | Text Domain Mismatch | ||
| #94 | MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. | 22 | 2,625 | 2,458 | 10k+ | Output is not escaped | ||
| #95 | MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution | 22 | 1,131 | 1,844 | 800 | Non-prefixed global variable | ||
| #96 | Motors – Car Dealership & Classified Listings Plugin | 22 | 5,340 | 5,958 | 9k+ | Text Domain Mismatch | ||
| #97 | myCred Toolkit with AI Assistant – Scale Your Loyalty & Gamification Rewards With Integrations | 22 | 1,588 | 1,172 | 400 | Output is not escaped | ||
| #98 | Newsletters | 22 | 2,968 | 2,248 | 2k+ | Text Domain Mismatch | ||
| #99 | Packeta | 22 | 801 | 333 | 8k+ | Exception output is not escaped | ||
| #100 | PAYCOMET for WooCommerce | 22 | 1,206 | 423 | 2k+ | Text Domain Mismatch |
