WordPress.WP.AlternativeFunctions.curl_curl_multi_info_read

curl curl multi info read

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#2WP Email Template193443452k+Exception output is not escaped
#3Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#4Razorpay for WooCommerce20975859100k+Non-prefixed function
#5Razorpay for Gravity Forms2141147600Exception output is not escaped
#6Razorpay Quick Payments21399632k+Exception output is not escaped
#7WP-WebAuthn229573962k+Exception output is not escaped
#8InfiniteWP Client232,2871,811200k+Exception output is not escaped
#9Link Whisper Free233,9265,40230k+Text Domain Mismatch
#10Lasso Lite – Affiliate Link Manager & Product Displays232943024k+Non-prefixed global variable
#11W3 Total Cache23307678900k+Non-prefixed global variable
#12Backuply – Backup, Restore, Migrate and Clone24711556600k+Non-prefixed global variable
#13F12 Profiler24282451500Direct Query
#14Tamara Checkout256012282k+Exception output is not escaped
#15Integrate Razorpay for Contact Form 72615297500curl curl setopt