WordPress.WP.AlternativeFunctions.curl_curl_init

curl curl init

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301Demo Importer Plus255823910k+Non-prefixed hook name
#302WEB-Translation – eTranslation Multilingual252171,057400Non-prefixed function
#303Events Made Easy255076,2991k+Non-prefixed function
#304Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#305Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin2560820720k+Text Domain Mismatch
#306Hardcore Google Fonts Localizer25331261800Text Domain Mismatch
#307Hydra Booking — Appointment Scheduling & Booking Calendar252387072k+Non-prefixed global variable
#308Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0191,2652k+Text Domain Mismatch
#309Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256186051m+Unsafe printing function
#310Loginizer258145041m+Output is not escaped
#311LWS Optimize – All-in-One Speed Booster & Cache Tools2543076420k+Non-prefixed global variable
#312Media Cloud Sync251,0952741k+Exception output is not escaped
#313Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce25492216400Text Domain Mismatch
#314MyFatoorah – WooCommerce25191892k+Output is not escaped
#315Object Sync for Salesforce25192296500Non-prefixed global variable
#316PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#317phpinfo() WP — Site Health, PHP Compatibility & Server Audit252767043k+Non-prefixed global variable
#318Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls254881,4127k+Non-prefixed global variable
#319Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non-prefixed global variable
#320reSmush.it : The original free image compressor and optimizer plugin2515569100k+Output is not escaped
#321BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript251985014k+Non-prefixed global variable
#322Secure Copy Content Protection and Content Locking2595879920k+Output is not escaped
#323ShopMagic – email automation2522814510k+Exception output is not escaped
#324Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2596073860k+Text Domain Mismatch
#325Survey Maker by AYS255672,3976k+Non-prefixed global variable
#326Tamara Checkout256012282k+Exception output is not escaped
#327Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#328Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#329VikAppointments Services Booking Calendar259,7535,207500Output is not escaped
#330VikBooking Hotel Booking Engine & PMS2513,2448,3148k+Output is not escaped
#331VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#332VikRestaurants Table Reservations and Take-Away2511,6444,932600Output is not escaped
#333weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output is not escaped
#334WFatture for WooCommerce Fattureincloud25229774800Non-prefixed global variable
#335WP Airbnb Review Slider253256461k+Non-prefixed global variable
#336Analytify – Google Analytics Dashboard For WordPress (GA4 analytics tracking)2516929520k+Non-prefixed global variable
#337Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#338WP Review Slider251,1862,2796k+Non-prefixed global variable
#339WP Google Review Slider251,3672,58430k+Non-prefixed global variable
#340WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, Security257271,55450k+Non-prefixed global variable
#341SlimStat Analytics251,17787070k+Exception output is not escaped
#342WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#343WP TripAdvisor Review Slider259582,0588k+Non-prefixed global variable
#344WP Yelp Review Slider254296451k+Non-prefixed global variable
#345WPvivid Backup for MainWP258181,79410k+Missing nonce verification
#346WPvivid — Backup, Migration & Staging258991,461900k+Non-prefixed namespace
#347Backup, Restore and Migrate your sites with XCloner2523886410k+Input is not sanitized
#348Translate WordPress with ConveyThis – AI Multilingual Plugin261592971k+Non-prefixed global variable
#349Accept Donations with PayPal & Stripe2691657210k+Unsafe printing function
#350RSS Redirect & Feedburner Alternative262772721k+Output is not escaped