PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#52Wise Chat214705065k+Output Not Escaped
#53Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#54Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#55WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#56Advanced Form Integration — Connect Forms to 200+ Apps225,7714,67810k+wp function not compatible with requires wp
#57All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#58Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception Not Escaped
#59Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#60Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#61Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#62Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#63RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#64WP Customer Area223,30894110k+Text Domain Mismatch
#65Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#66Download Manager222,2901,301100k+Output Not Escaped
#67Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#68FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#69Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non Prefixed Variable Found
#70Five Star Restaurant Menu and Food Ordering227526095k+Output Not Escaped
#71FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input Not Sanitized
#72GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#73Gutenberg22628342300k+missing direct file access protection
#74IMPress for IDX Broker221,0856367k+Text Domain Mismatch
#75LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#76MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output Not Escaped
#77Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non Prefixed Variable Found
#78Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output Not Escaped
#79Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#80NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#81NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#82PagBank / PagSeguro Connect para WooCommerce225047434k+Non Prefixed Variable Found
#83Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#84Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#85Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#86PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#87Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non Prefixed Variable Found
#88Seraphinite Accelerator2259425550k+Output Not Escaped
#89ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#90NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#91Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#92ThemeHunk Customizer223,9695827k+Text Domain Mismatch
#93Customize Feeds for Twitter22921714k+Non Prefixed Variable Found
#94Uncanny Toolkit for LearnDash2253999420k+Output Not Escaped
#95Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non Prefixed Variable Found
#96URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non Prefixed Variable Found
#97Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#98WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non Prefixed Variable Found
#99WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non Prefixed Variable Found
#100CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch