PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Envo Extra2187860020k+Text Domain Mismatch
#52eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+Non-prefixed global variable
#53EventPrime – Events Calendar, Bookings and Tickets218734,3087k+Non-prefixed global variable
#54FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#55Filter Everything — WordPress & WooCommerce Filters2164393350k+Non-prefixed global variable
#56Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,063300k+Non-prefixed global variable
#57Mergado Pack212,323588700Output is not escaped
#58Modular DS: Monitor, update, and backup multiple websites211598240k+Exception output is not escaped
#59MotoPress Hotel Booking213,0671,03710k+Text Domain Mismatch
#60OneLogin SAML SSO215073307k+wp function not compatible with requires wp
#61Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#62Razorpay for Gravity Forms2141147600Exception output is not escaped
#63Razorpay Quick Payments21399632k+Exception output is not escaped
#64Five Star Restaurant Reservations – WordPress Booking Plugin211,1011,15910k+Output is not escaped
#65Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0162,440600k+Text Domain Mismatch
#66SeatReg213121,637400Missing nonce verification
#67Accept Stripe Payments2137389220k+Missing nonce verification
#68ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non-prefixed global variable
#69Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts218713381k+wp function not compatible with requires wp
#70Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125643120k+Non-prefixed hook name
#71Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin211,0642,97840k+Direct Query
#72URL Shortify – Simple and Easy URL Shortener211,5112,66910k+Non-prefixed global variable
#73Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#74Wise Chat214705065k+Output is not escaped
#75Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39330k+Non-prefixed global variable
#76Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#77WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#78WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#79WP Extended – The Ultimate WordPress Toolkit211,253398600Non Singular String Literal Domain
#80WebTotem Security211,110213800Text Domain Mismatch
#81Advanced Classifieds & Directory Pro221,2293,5122k+Non-prefixed global variable
#82All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#83Author Website Templates – Create Writer, Author & Publisher Websites Easily227112,910500Non-prefixed global variable
#84Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#85Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#86Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#87Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#88RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1348k+Non-prefixed global variable
#89Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#90DirectoryPress – Business Directory And Classified Ad Listing224,7872,795700Text Domain Mismatch
#91Download Manager222,5131,459100k+Output is not escaped
#92Diverse Solutions IDX Real Estate Listings & MLS Search227456051k+Heredoc Output Not Escaped
#93Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#94FACTO – Facturación Electrónica22244423400Request data is not unslashed
#95FireBox Popups – Increase Sales and Grow Your Email List221578267k+Non-prefixed global variable
#96Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#97Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#98FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#99GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4653,97610k+Output is not escaped
#100Happy Addons for Elementor22652446400k+Output is not escaped