PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,559145100k+Exception output is not escaped
#2Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#3Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception output is not escaped
#4Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#5DMCA Protection Badge204,4252171k+Output is not escaped
#6Link Library201,9411,39710k+Unsafe printing function
#7Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#8Backup Migration219811,09380k+Non-prefixed global variable
#9Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#10FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#11Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#12MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non-prefixed global variable
#13Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non-prefixed global variable
#14Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non-prefixed hook name
#15Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output is not escaped
#16Seamless Donations is Sunset216005142k+Text Domain Mismatch
#17Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#18Accept Stripe Payments2137388220k+Missing nonce verification
#19Buckaroo Woocommerce Payments Plugin215633262k+Exception output is not escaped
#20Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#21Premium Packages – Sell Digital Products Securely212,7652,4443k+Output is not escaped
#22Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception output is not escaped
#23File Manager Pro – Filester22565391100k+Request data is not unslashed
#24Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#25FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#26InfiniteWP Client222,2861,812200k+Exception output is not escaped
#27MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#28PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#29SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#30Customize Feeds for Twitter22921714k+Non-prefixed global variable
#31Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#32WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#33WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#34Simple Shopping Cart2279653610k+Unsafe printing function
#35Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#36WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#37File Manager227405201m+Unsafe printing function
#38WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception output is not escaped
#39NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#40WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#41YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#42BlossomThemes Email Newsletter2333723920k+Output is not escaped
#43Booking calendar, Appointment Booking System231,0791,1254k+Output is not escaped
#44Classified Listing – AI-Powered Classified ads & Business Directory231551,8619k+Non-prefixed global variable
#45CleanTalk Anti-Spam. Spam Firewall & Bot protection238261,078200k+Missing nonce verification
#46Content Egg – Affiliate Product Importer & Price Comparison231,2311,25710k+Non-prefixed global variable
#47Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#48Essential Real Estate235295,0608k+Non-prefixed global variable
#49Ezoic2343251610k+Output is not escaped
#50Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non-prefixed global variable