PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Intercom060716k+Non-prefixed function
#3Live Shopping & Shoppable Videos For WooCommerce079174400Non-prefixed global variable
#4Themify Builder95,3892,2455k+Text Domain Mismatch
#5JetBackup – Backup, Restore & Migrate101,567156200k+Exception output is not escaped
#6404 Solution155821,53210k+Non-prefixed class
#7AnyComment174454495k+Output is not escaped
#8RestroPress – Online Food Ordering System175353,2341k+Non-prefixed global variable
#9Shopping Cart & eCommerce Store177,45317,8663k+Non-prefixed global variable
#10wpForo Forum174,2933,02620k+Unsafe printing function
#11Administrator Z182,061799400Output is not escaped
#12GiveWP – Donation Plugin and Fundraising Platform193,4223,570100k+Output is not escaped
#13Go Fetch Jobs (for WP Job Manager)191,4101,741600Non-prefixed global variable
#14Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,993892100k+Exception output is not escaped
#15Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195303753m+Missing Translators Comment
#16Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5283k+Non-prefixed global variable
#17SendPress Newsletters192,2931,4221k+Output is not escaped
#18SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195431,15080k+Non-prefixed global variable
#19Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing196324640k+Non-prefixed hook name
#20WP Email Template193443452k+Exception output is not escaped
#21WPOSS阿里云对象存储19269315900Non-prefixed namespace
#22WPQiNiu七牛云对象存储19138612400Non-prefixed global variable
#23Brizy – Page Builder2058572660k+Output is not escaped
#24Download Monitor204231,36780k+Non-prefixed hook name
#25Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More202,8781,9881m+Non-prefixed global variable
#26EventPrime – Events Calendar, Bookings, Tickets & AI208464,2247k+Non-prefixed global variable
#27Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#28Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#29Shipping for Nova Poshta20598923400Output is not escaped
#30پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#31Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#32Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#33Razorpay Payment Button Plugin20486942k+Exception output is not escaped
#34Razorpay Payment Button Elementor Plugin20479621k+Exception output is not escaped
#35Membership Plugin – Kadence Memberships205,0893,0059k+Text Domain Mismatch
#36Restrict User Access – Ultimate Membership & Content Protection209771,84810k+Non-prefixed global variable
#37Events Manager – OpenStreetMaps20559444600Output is not escaped
#38Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools207873,41630k+Non-prefixed global variable
#39WP Compress – Instant Performance & Speed Optimization204,2923,6919k+Non Singular String Literal Domain
#40School Management System – WPSchoolPress202455,2851k+Non-prefixed global variable
#41Backup Migration219991,08180k+Non-prefixed global variable
#42Forumax – AI Powered Advanced Community Forum Plugin214,9314,352600Text Domain Mismatch
#43Kadence Security – Password, Two Factor Authentication, and Brute Force Protection211,060959700k+Missing Translators Comment
#44Pinpoint Booking System – Version 2216343283k+Missing direct file access protection
#45Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots211,6742,18010k+Direct Query
#46Captcha Them All213003235k+Output is not escaped
#47Spam protection, Honeypot, Anti-Spam by CleanTalk218351,146200k+Missing nonce verification
#48Envo Extra2187760020k+Text Domain Mismatch
#49eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864378k+Non-prefixed global variable
#50Event Espresso – Event Registration & Ticketing Sales2112,7102,136600Text Domain Mismatch