PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_init

curl curl init

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#251Premium Blocks – Gutenberg Blocks, Patterns & Templates241403082k+Non-prefixed function
#252Pz-LinkCard249511,58120k+Non-prefixed global variable
#253reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#254Sailthru for WordPress242392662k+Non-prefixed global variable
#255Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes24235330600Non-prefixed global variable
#256Security Plugin, Firewall & Malware Scanner with Auto Removal241,19176930k+Output is not escaped
#257SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit246059281k+Non-prefixed global variable
#258Simple Membership242,3731,78940k+Unsafe printing function
#259Simple Social Media Share Buttons – Social Sharing for Everyone2446810120k+Output is not escaped
#260SKT Templates – 100% Free Templates for Elementor & Gutenberg245531,35320k+Non-prefixed global variable
#261MoreConvert Wishlist for WooCommerce243,6786299k+Text Domain Mismatch
#262Social Media Auto Publish241,4687136k+Unsafe printing function
#263Spotlight Social Feeds – Block, Shortcode, and Widget2441114760k+Output is not escaped
#264StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More24149482600Non-prefixed global variable
#265Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception output is not escaped
#266TI WooCommerce Wishlist24467546100k+Output is not escaped
#267Ultra Addons for Contact Form 7241,54345260k+Text Domain Mismatch
#268User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder246643,32150k+Non-prefixed global variable
#269VikRentItems Flexible Rental Management System244,7554,639600Non-prefixed global variable
#270PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#271WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247304995k+Output is not escaped
#272WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors241685843k+Non-prefixed class
#273Payment Gateway for PayPal on WooCommerce2415356110k+Nonce verification recommended
#274pensopay Payments243962462k+Output is not escaped
#275wallee24331220400Exception output is not escaped
#276EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#277European VAT Compliance Assistant for WooCommerce245153173k+Output is not escaped
#278AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia241,1991,041500Text Domain Mismatch
#279AI ChatBot for eCommerce – WoowBot24145528900Request data is not unslashed
#280WP Admin Audit241,0517811k+error log print r
#281WP Helper Premium243,9081,5151k+Text Domain Mismatch
#282WP Layouts243491463k+Text Domain Mismatch
#283پارسی دیت – Parsi Date24106291100k+Non-prefixed hook name
#284WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77539340k+Text Domain Mismatch
#285WP Travel – Ultimate Travel Booking System, Tour Management Engine242271,9624k+Non-prefixed hook name
#286WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non-prefixed global variable
#287WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#288WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)244821892k+Output is not escaped
#289WpStream – Live Streaming, Video on Demand, Pay Per View241,7247423k+Text Domain Mismatch
#290Appointment Booking Calendar253271,0551k+Non-prefixed global variable
#291Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non-prefixed global variable
#292Booking Calendar Contact Form25371884500Input is not validated
#293Booking Package251,7033,97710k+Missing nonce verification
#294Breeze Cache25218800400k+Non-prefixed global variable
#295Broken Link Checker25727600500k+Output is not escaped
#296CheckoutWC Lite251,3998523k+Text Domain Mismatch
#297HIPAA FORMS25414416800Request data is not unslashed
#298Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#299CP Contact Form with PayPal25466936800Unsafe printing function
#300DecaLog259432361k+Exception output is not escaped