PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt

curl curl setopt

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#102SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#103Theme Editor2279868550k+Output is not escaped
#104RapidLoad AI – Optimize Web Vitals Automatically2281840800Nonce verification recommended
#105Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#106URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non-prefixed global variable
#107Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#108Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#109WooCommerce221,3596,1717m+Non-prefixed global variable
#110Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#111WP Easy Pay – Payment and Donation form Builder for Square228931,8281k+Non-prefixed global variable
#112WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#113File Manager227405201m+Unsafe printing function
#114WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222756835k+Nonce verification recommended
#115WP Umbrella: Update Backup Restore & Monitoring2291891670k+Exception output is not escaped
#116Wp-Insert2226730110k+Output is not escaped
#117WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#118WP-WebAuthn229573962k+Exception output is not escaped
#119WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#120WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#121YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#122Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#123AI Engine – The Chatbot, AI Framework & MCP for WordPress23411544100k+error log error log
#124Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#125AR for WordPress23149508400Non-prefixed global variable
#126B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More231,34740910k+Text Domain Mismatch
#127BlossomThemes Email Newsletter2333723920k+Output is not escaped
#128Builderall for WordPress234,7821,3081k+Text Domain Mismatch
#129Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#130Captivate Sync231745571k+Non-prefixed global variable
#131WPBot – AI ChatBot for Live Support, Lead Generation, AI Services232641,0385k+Non-prefixed global variable
#132Church Admin231,6434,202900Direct Query
#133Content Egg – Affiliate Product Importer & Price Comparison231,2311,25710k+Non-prefixed global variable
#134Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31026,642900Non-prefixed global variable
#135Currency Exchange for WooCommerce23703502500Output is not escaped
#136DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#137Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#138Essential Real Estate235295,0608k+Non-prefixed global variable
#139Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#140Ezoic2343251610k+Output is not escaped
#141Fastcache by Host.it231,327203600Text Domain Mismatch
#142Feed Them Social – Social Media Feeds, Video, and Photo Galleries2356353520k+Output is not escaped
#143Flexmls® IDX Plugin231,2689571k+Output is not escaped
#144Tracking and Consent Manager – WP Full Picture231,2803,2233k+Non-prefixed global variable
#145FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#146GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#147Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#148Houzez Property Feed231,4641,6151k+Text Domain Mismatch
#149Iks Menu – WordPress Category Accordion Menu & FAQs236151,29310k+Non-prefixed global variable
#150Import from YML2397308400Non-prefixed global variable