WordPress.WP.AlternativeFunctions.curl_curl_multi_info_read

curl curl multi info read

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1WP Email Template193443452k+Exception output is not escaped
#2Razorpay Payment Button Plugin20486942k+Exception output is not escaped
#3Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#4Razorpay for Gravity Forms2141147500Exception output is not escaped
#5Razorpay Quick Payments21399632k+Exception output is not escaped
#6Razorpay for WooCommerce21980864100k+Non-prefixed function
#7WP-WebAuthn229573962k+Exception output is not escaped
#8InfiniteWP Client232,3791,844200k+Exception output is not escaped
#9Link Whisper Free233,9445,45630k+Text Domain Mismatch
#10W3 Total Cache23345678900k+Non-prefixed global variable
#11Backuply – Backup, Restore, Migrate and Clone24729553600k+Non-prefixed global variable
#12Defender Security – Malware Scanner, Login Security & Firewall241,3271,32980k+Non-prefixed namespace
#13F12 Profiler24282451400Direct Query
#14Lasso Lite – Affiliate Link Manager & Product Displays242933054k+Non-prefixed global variable
#15Tamara Checkout246032482k+Exception output is not escaped
#16Integrate Razorpay for Contact Form 72615297500curl curl setopt