PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#2Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#3Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#5Membership Plugin – Kadence Memberships195,0832,9829k+Text Domain Mismatch
#6WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#7Broadstreet20434273700Output is not escaped
#8Leaky Paywall20322789600Nonce verification recommended
#9Link Library201,9421,39410k+Unsafe printing function
#10Shipping for Nova Poshta20598923400Output is not escaped
#11Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#12WP Compress – Instant Performance & Speed Optimization204,0463,50210k+Non Singular String Literal Domain
#13Premium Packages – Sell Digital Products Securely202,0172,1812k+Non-prefixed global variable
#14Backup Migration219991,08180k+Non-prefixed global variable
#15Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#16FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#17Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#18Front End Users217192,759400Non-prefixed global variable
#19Mergado Pack212,323588700Output is not escaped
#20Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#21Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#22Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#23Seamless Donations is Sunset216005142k+Text Domain Mismatch
#24SeatReg213121,637400Missing nonce verification
#25Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#26Accept Stripe Payments2137389220k+Missing nonce verification
#27Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#28Wordfence Security – Firewall, Malware Scan, and Login Security211,8183,2365m+Output is not escaped
#2912 Step Meeting List22156593900Non-prefixed global variable
#30Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#31Database Access with Adminer229832,5531k+Non-prefixed global variable
#32File Manager Pro – Filester22566391100k+Request data is not unslashed
#33Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#34FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#35JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#36Mailchimp for WooCommerce22524658200k+Non-prefixed global variable
#37MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#38MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#39MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,846700Non-prefixed global variable
#40MStore API – Create Native Android & iOS Apps On The Cloud226358563k+SQL query is not prepared
#41PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#42Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools222051,140600k+Non-prefixed hook name
#43Sellsy22586490400Non Singular String Literal Domain
#44SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60510k+Non-prefixed global variable
#45Customize Feeds for Twitter22921714k+Non-prefixed global variable
#46Welcart e-Commerce2210,36810,88210k+Text Domain Mismatch
#47WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9502,10810k+Non-prefixed global variable
#48WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#49Peach Payments Gateway223341431k+Non Singular String Literal Domain
#50Simple Shopping Cart2280054110k+Unsafe printing function