PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#2Pagopar – WooCommerce Gateway185301,215400Non-prefixed global variable
#3Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#5Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#6WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#7Broadstreet20434273700Output is not escaped
#8Leaky Paywall20322789600Nonce verification recommended
#9Link Library201,9421,39410k+Unsafe printing function
#10Shipping for Nova Poshta20598923500Output is not escaped
#11Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#12Premium Packages – Sell Digital Products Securely202,0322,1902k+Non-prefixed global variable
#13Backup Migration219811,09380k+Non-prefixed global variable
#14Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#15FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#16Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#17Front End Users217192,759400Non-prefixed global variable
#18Mergado Pack212,323588700Output is not escaped
#19Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#20Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#21Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#22Seamless Donations is Sunset216005142k+Text Domain Mismatch
#23SeatReg213121,637400Missing nonce verification
#24Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output is not escaped
#25Accept Stripe Payments2137389220k+Missing nonce verification
#26Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#27Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#28WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#2912 Step Meeting List22156593900Non-prefixed global variable
#30Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#31Database Access with Adminer229832,5531k+Non-prefixed global variable
#32File Manager Pro – Filester22566391100k+Request data is not unslashed
#33Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#34FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#35JCC Payment Gateway for Woocommerce222,2731,136600Text Domain Mismatch
#36MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#37MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#38MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,846800Non-prefixed global variable
#39MStore API – Create Native Android & iOS Apps On The Cloud226358563k+SQL query is not prepared
#40PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#41Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools222081,135700k+Non-prefixed hook name
#42Sellsy22586490400Non Singular String Literal Domain
#43SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60510k+Non-prefixed global variable
#44Customize Feeds for Twitter22921714k+Non-prefixed global variable
#45Welcart e-Commerce2210,36810,88210k+Text Domain Mismatch
#46WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9502,10810k+Non-prefixed global variable
#47WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#48Peach Payments Gateway223341431k+Non Singular String Literal Domain
#49Simple Shopping Cart2280054110k+Unsafe printing function
#50Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable