PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#52File Manager227405201m+Unsafe printing function
#53WP Umbrella: Security Backup Restore & Monitoring2297499980k+Exception output is not escaped
#54NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4121k+Non-prefixed global variable
#55WPSSO Core – Complete Schema Markup and Meta Tags221,4094145k+Missing Translators Comment
#56YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#57BlossomThemes Email Newsletter2333723920k+Output is not escaped
#58Booking calendar, Appointment Booking System231,0791,1253k+Output is not escaped
#59Classified Listing – AI-Powered Classified ads & Business Directory231522,1589k+Non-prefixed global variable
#60Content Egg – Affiliate Product Importer & Price Comparison231,3001,28710k+Non-prefixed global variable
#61Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,71910,28040k+Non-prefixed namespace
#62Essential Real Estate235295,0607k+Non-prefixed global variable
#63Ezoic2344151910k+Output is not escaped
#64Heureka23534237400Exception output is not escaped
#65InfiniteWP Client232,2871,811200k+Exception output is not escaped
#66Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non-prefixed global variable
#67Link Whisper Free233,9265,40230k+Text Domain Mismatch
#68MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4384,89410k+Non-prefixed global variable
#69MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#70Next Active Directory Integration236832842k+Exception output is not escaped
#71Redirection23523457100k+Non-prefixed global variable
#72Security Plugin, Firewall & Malware Scanner with Auto Removal231,20478940k+Output is not escaped
#73Shipment Tracker for Woocommerce234775762k+Missing Arg Domain
#74Lasso Lite – Affiliate Link Manager & Product Displays232943024k+Non-prefixed global variable
#75Image Optimizer, Resizer and CDN – Sirv236161,0041k+Output is not escaped
#76Legal Terms and Conditions Popup for User Login and WooCommerce Checkout23524237700Output is not escaped
#77Directory Listings WordPress plugin – uListing239471,5731k+Non-prefixed global variable
#78AgenWebsite Shipping – Plugin Ongkos Kirim & Generate Resi Otomatis Semua Kurir Indonesia231,2991,107500Text Domain Mismatch
#79Clone2324426240k+Output is not escaped
#80Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions231,1131,8639k+Output is not escaped
#81Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#82WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#83Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#84Advanced iFrame248871,12040k+Non-prefixed global variable
#85Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8651,0891k+Text Domain Mismatch
#86Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,3173,37510k+slow db query meta key
#87Broken Link Checker24693630500k+Output is not escaped
#88Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#89Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#90Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#91Spam protection, Honeypot, Anti-Spam by CleanTalk248171,125200k+Missing nonce verification
#92CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#93RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress248423,717500Request data is not unslashed
#94Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load)24194514500Direct Query
#95F12 Profiler24282451500Direct Query
#96FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2420379780k+Direct Query
#97Forminator Forms – Contact Form, Payment Form & Custom Form Builder248201,326600k+Non-prefixed global variable
#98Photo Gallery – Responsive Image Galleries by Supsystic242428820k+Text Domain Mismatch
#99Simple Calendar – Google Calendar Plugin242,14761150k+Missing direct file access protection
#100Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,40886670k+Text Domain Mismatch