PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Link Whisper Free233,8825,30330k+Text Domain Mismatch
#52MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#53MStore API – Create Native Android & iOS Apps On The Cloud236187643k+SQL query is not prepared
#54MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#55Next Active Directory Integration236832842k+Exception output is not escaped
#56Premium Addons for Elementor – Powerful Elementor Templates & Widgets23206997700k+Non-prefixed hook name
#57Premium Blocks – Gutenberg Blocks, Patterns & Templates231413082k+Non-prefixed function
#58Redirection23523457100k+Non-prefixed global variable
#59Shipment Tracker for Woocommerce234625592k+Missing Arg Domain
#60Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management232952984k+Non-prefixed global variable
#61Directory Listings WordPress plugin – uListing239471,5731k+Non-prefixed global variable
#62Clone2324426240k+Output is not escaped
#63WP Compress – Instant Performance & Speed Optimization233,0532,38410k+Non Singular String Literal Domain
#64Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions231,1311,9139k+Output is not escaped
#65Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#66WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1193,51620k+Interpolated SQL is not prepared
#67Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#68AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output is not escaped
#69Advanced iFrame248871,12040k+Non-prefixed global variable
#70Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#71Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#72Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#73CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#74FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419374780k+Direct Query
#75Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#76Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#77Simple Calendar – Google Calendar Plugin242,03559150k+Missing direct file access protection
#78Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#79Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non-prefixed global variable
#80Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#81PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1602,407500k+Non-prefixed namespace
#82Security Plugin, Firewall & Malware Scanner with Auto Removal241,19277030k+Output is not escaped
#83Simple Membership242,3731,78940k+Unsafe printing function
#84Simple Social Media Share Buttons – Social Sharing for Everyone2446810120k+Output is not escaped
#85Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception output is not escaped
#86PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#87WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors241685844k+Non-prefixed class
#88Payment Gateway for PayPal on WooCommerce2415356110k+Nonce verification recommended
#89EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#90WP Layouts243491463k+Text Domain Mismatch
#91SlimStat Analytics241,16973770k+Exception output is not escaped
#92WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#93WpStream – Live Streaming, Video on Demand, Pay Per View241,7127404k+Text Domain Mismatch
#94Broken Link Checker25727600500k+Output is not escaped
#95Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#96DecaLog259432361k+Exception output is not escaped
#97Events Made Easy255066,2961k+Non-prefixed function
#98Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#99Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0101,2622k+Text Domain Mismatch
#100MyFatoorah – WooCommerce25191893k+Output is not escaped