PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#2Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution181,229923100k+Exception output is not escaped
#3Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#5Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing196324640k+Non-prefixed hook name
#6WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#7Broadstreet20434273800Output is not escaped
#8Shipping for Nova Poshta20598923400Output is not escaped
#9Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#10Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#11WP Compress – Instant Performance & Speed Optimization204,2923,6919k+Non Singular String Literal Domain
#12Premium Packages – Sell Digital Products Securely202,0412,2992k+Non-prefixed global variable
#13Backup Migration219991,08180k+Non-prefixed global variable
#14Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6742,18010k+Direct Query
#15Spam protection, Honeypot, Anti-Spam by CleanTalk218351,146200k+Missing nonce verification
#16FileOrganizer – WordPress File Manager21549261200k+unlink unlink
#17Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#18Front End Users217192,759400Non-prefixed global variable
#19Link Library211,9321,38710k+Unsafe printing function
#20Mergado Pack212,323588700Output is not escaped
#21Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9138k+Non-prefixed global variable
#22Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9945,33110k+Non-prefixed hook name
#23Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#24Seamless Donations is Sunset216005142k+Text Domain Mismatch
#25SeatReg213461,834300Missing nonce verification
#26Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#27Accept Stripe Payments2137389120k+Missing nonce verification
#28Buckaroo Payments for WooCommerce216943512k+Exception output is not escaped
#29WCFM Marketplace – Multivendor Marketplace for WooCommerce211,9482,10810k+Non-prefixed global variable
#30Peach Payments Gateway213351441k+Non Singular String Literal Domain
#31Wordfence Security – Firewall, Malware Scan, and Login Security211,8933,2925m+Output is not escaped
#32Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#33Database Access with Adminer229832,5531k+Non-prefixed global variable
#34Easy Digital Downloads – eCommerce Payments and Subscriptions made easy223,7138,57340k+Non-prefixed namespace
#35Easy Social Feed – Social Photos Gallery and Post Feed for WordPress221,8881,84330k+Non-prefixed global variable
#36File Manager Pro – Filester22584411100k+Request data is not unslashed
#37Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#38JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#39Mailchimp for WooCommerce22525671200k+Non-prefixed global variable
#40MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#41MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6332,46010k+Output is not escaped
#42MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1321,845700Non-prefixed global variable
#43MasterStudy LMS WordPress Plugin – for Online Courses and Education221,4534,93910k+Non-prefixed global variable
#44PAYCOMET for WooCommerce221,2234232k+Text Domain Mismatch
#45Sellsy22586490400Non Singular String Literal Domain
#46SSL Zen — SSL Certificate Installer & HTTPS Redirects227441,60310k+Non-prefixed global variable
#47Customize Feeds for Twitter22921714k+Non-prefixed global variable
#48Welcart e-Commerce2210,34710,84310k+Text Domain Mismatch
#49WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255164210k+Non-prefixed global variable
#50Simple Shopping Cart2280054110k+Unsafe printing function