PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#501Cache Enabler35447590k+Input Not Sanitized
#502Cloudflare352785200k+Non Prefixed Namespace Found
#503Cookie Information – Cookie Banner with Consent Mode v235185282k+Output Not Escaped
#504Create Block Theme3543520k+unlink unlink
#505Disable and Remove Google Fonts | GDPR & DSGVO friendly35218100k+Missing Translators Comment
#506Elementor Website Builder – more than just a page builder354642810m+Non Prefixed Variable Found
#507EWWW Image Optimizer352257291m+Direct Query
#508AI Popup Builder & Popup Maker by OptiMonk3581654k+Text Domain Mismatch
#509Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager35646480k+Non Prefixed Variable Found
#510GA4WP – Analytics Dashboard for the Website354341572k+Text Domain Mismatch
#511Glossary35169932k+Non Singular String Literal Domain
#512Gum Addon for Elementor356607250k+Text Domain Mismatch
#513Iframely – WP media embeds, cards and blocks35136432k+Unsafe Printing Function
#514User Import with meta – WP Ultimate CSV Importer Add-on35271405k+Interpolated Not Prepared
#515JWT Auth – WordPress JSON Web Token Authentication3514186k+Output Not Escaped
#516MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows351574910k+Output Not Escaped
#517Page Optimize357041200k+Non Singular String Literal Domain
#518Print, PDF, Email by PrintFriendly352202920k+Unsafe Printing Function
#519Push Notifications by LaraPush3532764k+Non Prefixed Variable Found
#520Internal Links Manager3518812110k+Output Not Escaped
#521Security Optimizer – The All-In-One Protection Plugin3540821m+Missing Unslash
#522WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat352831100k+Input Not Sanitized
#523Solid Performance – Your No-Code Caching, Performance, & Page Speed Solution3575614k+Exception Not Escaped
#524Starter Sites & Templates by Neve352888100k+Non Prefixed Hookname Found
#525Ultimate Post List35186842k+Missing Arg Domain
#526Converter for Media – Optimize images | Convert WebP & AVIF3513353500k+curl curl setopt
#527Custom Payment Gateways for WooCommerce35202313k+Non Singular String Literal Domain
#528Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing354922950k+Non Prefixed Hookname Found
#529Payment Gateway for PayPal Pro & PayPal Checkout for WooCommerce35671472k+Missing Unslash
#530Easy Accept Payments via PayPal353221287k+Text Domain Mismatch
#531WP Associate Post R235259863k+Output Not Escaped
#532WP Datepicker352251817k+Output Not Escaped
#533WP Mailto Links – Protect Email Addresses3595698k+Output Not Escaped
#534wpLingua – Automatic translation – Translate and make website multilingual35791672k+Recommended
#535WPZOOM Addons for Elementor – Starter Templates & Widgets3516012620k+Output Not Escaped
#536Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts35481145k+Non Prefixed Hookname Found
#537authLdap3647305k+Exception Not Escaped
#538Blaze Demo Importer36101948k+Output Not Escaped
#539BlockStrap Page Builder – Bootstrap Blocks3681892k+missing direct file access protection
#540BP Profile Search36321855k+Output Not Escaped
#541bunny.net – WordPress CDN Plugin3611412710k+Output Not Escaped
#542Drag and Drop Multiple File Upload for Contact Form 736823660k+wp function not compatible with requires wp
#543Dynamic Visibility for Elementor36568950k+Non Prefixed Hookname Found
#544Email Before Download3689296k+Unsafe Printing Function
#545HTML Forms – Simple WordPress Forms Plugin3623116610k+Output Not Escaped
#546Italy Cookie Choices (for EU Cookie Law & Cookie Notice)361157710k+Unsafe Printing Function
#547Login as User361016430k+Output Not Escaped
#548LocalWeb All In One36312645k+Non Prefixed Variable Found
#549M Chart36291554k+Non Prefixed Variable Found
#550News Ticker for Elementor3676572k+Text Domain Mismatch