WordPress.WP.AlternativeFunctions.curl_curl_setopt

curl curl setopt

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351Sitemap Generator5060263k+Output is not escaped
#352WPKoi Templates for Elementor50935255k+Text Domain Mismatch
#353Menu Icons by Themeisle – Add Icons to Navigation Menus513422100k+Output is not escaped
#354AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation5665201k+Text Domain Mismatch
#355Payment Gateway for LiqPay for Woocommerce5984311k+Text Domain Mismatch
#356HelloAsso60132894k+Short PHP open tag found
#357XPoster – Share to Bluesky and Mastodon62263610k+Missing nonce verification
#358Custom Currency for WooCommerce706352k+Missing direct file access protection
#359Anchor Episodes Index (Spotify for Podcasters)753231k+Text Domain Mismatch
#360Gutenverse Companion8116298k+Nonce verification recommended
#361WP YouTube Live8628241k+Non-prefixed function
#362Genesis Blocks88154940k+Offloaded Content
#363WP Force SSL & HTTPS SSL Redirect92182190k+Non-prefixed global variable