PluginScore

WordPress.WP.AlternativeFunctions.curl_curl_setopt_array

curl curl setopt array

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101RealHomes Memberships245192541k+Non Singular String Literal Domain
#102Generate Images (AI) – Magic Post Thumbnail241,9401,7615k+Non-prefixed global variable
#103Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#104PixelYourSite – Your smart PIXEL (TAG) & API Manager241,2322,433500k+Non-prefixed namespace
#105Premium Blocks – Gutenberg Blocks, Patterns & Templates241403082k+Non-prefixed function
#106Simple Membership242,3051,75340k+Unsafe printing function
#107Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception output is not escaped
#108PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#109WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors241685843k+Non-prefixed class
#110EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#111WP Layouts243491463k+Text Domain Mismatch
#112WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#113WpStream – Live Streaming, Video on Demand, Pay Per View241,7257423k+Text Domain Mismatch
#114Booking for Appointments and Events Calendar – Amelia251,51255390k+Exception output is not escaped
#115ATUM WooCommerce Inventory Management and Stock Tracking252,6111,29610k+Non Singular String Literal Domain
#116DecaLog259432361k+Exception output is not escaped
#117Events Made Easy255256,4321k+Non-prefixed function
#118Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3182425m+Missing direct file access protection
#119Hardcore Google Fonts Localizer25331261800Text Domain Mismatch
#120Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more254,0191,2652k+Text Domain Mismatch
#121Media Cloud Sync251,0952741k+Exception output is not escaped
#122Multibanco / MB Way / Payshop / Cofidis Pay (by LUSOPAY) for WooCommerce25492216400Text Domain Mismatch
#123MyFatoorah – WooCommerce25191893k+Output is not escaped
#124PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#125phpinfo() WP – Site Health, PHP Compatibility & Server Audit259097223k+Non-prefixed global variable
#126Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls254891,4147k+Non-prefixed global variable
#127BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript252035474k+Non-prefixed global variable
#128Secure Copy Content Protection and Content Locking2564680320k+Output is not escaped
#129Tamara Checkout256012282k+Exception output is not escaped
#130Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#131Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#132Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2514335760k+Input is not sanitized
#133WP Review Slider251,4442,4706k+Non-prefixed global variable
#134WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security257291,55650k+Non-prefixed global variable
#135SlimStat Analytics251,17787070k+Exception output is not escaped
#136WP Statistics – Simple, privacy-friendly Google Analytics alternative256122,469600k+Non-prefixed global variable
#137WPvivid — Backup, Migration & Staging259031,461900k+Non-prefixed namespace
#138RSS Redirect & Feedburner Alternative262772721k+Output is not escaped
#139GPTranslate – Multilingual AI Translation for WordPress: Translate Websites with AI Agents26286216500badly named files
#140Omise Payments263582562k+Output is not escaped
#141Pressidium Cookie Consent262039510k+Exception output is not escaped
#142User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch
#143Parcel Pro26171220600Output is not escaped
#144Bus Ticket Booking with Seat Reservation27212383800Non-prefixed global variable
#145Foxtool All-in-One: Contact chat button, Custom login, Media optimize images271,6293607k+Unsafe printing function
#146Gravity Forms + Stripe27368210600Output is not escaped
#147iQ Block Country2716424520k+Request data is not unslashed
#148Sign-up Sheets273253631k+Output is not escaped
#149WPBase Cache271891132k+Text Domain Mismatch
#150AForms — Form Builder for Price Calculator & Cost Estimation28564953k+Text Domain Mismatch