PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101Notification Bar, Announcement and Cookie Notice WordPress Plugin – FooBar221,3211,3713k+Non-prefixed global variable
#102Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#103FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#104GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4663,97210k+Output is not escaped
#105Heureka22557254400Exception output is not escaped
#106History Log by click5226751,290400Direct Query
#107IMPress for IDX Broker221,0856366k+Text Domain Mismatch
#108JCH Optimize221,1451364k+Output is not escaped
#109Jim Soft Swiss QR Invoice22262392400Non-prefixed global variable
#110LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3693,34970k+Non-prefixed global variable
#111Mail Baby SMTP22385699600SQL query is not prepared
#112MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#113MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,844800Non-prefixed global variable
#114Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#115Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress229191,23010k+Output is not escaped
#116Motors – Car Dealership & Classified Listings Plugin225,3405,9599k+Text Domain Mismatch
#117NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2662,059100k+Non-prefixed global variable
#118NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#119WP OAuth Server (OAuth Authentication)221893473k+Non-prefixed function
#120oik224891802k+Non Singular String Literal Domain
#121Packeta228013338k+Exception output is not escaped
#122PagBank / PagSeguro Connect para WooCommerce225047574k+Non-prefixed global variable
#123Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#124Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#125Premium Addons for Elementor – Powerful Elementor Templates & Widgets222231,036700k+Non-prefixed hook name
#126Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#127PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#128RabbitLoader Cache: Optimize your Website for Speed222411632k+Output is not escaped
#129RealPress – Real Estate Plugin226041,167500Non-prefixed global variable
#130Restrict User Access – Ultimate Membership & Content Protection229771,84010k+Non-prefixed global variable
#131Seraphinite Accelerator2259425550k+Output is not escaped
#132ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#133NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#134Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#135Customize Feeds for Twitter22921714k+Non-prefixed global variable
#136Uncanny Toolkit for LearnDash2253999420k+Output is not escaped
#137RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#138Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#139Welcart e-Commerce2210,37810,93110k+Text Domain Mismatch
#140WCFM – Frontend Manager for WooCommerce224,7545,05420k+Non-prefixed global variable
#141WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9341,96610k+Non-prefixed global variable
#142WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#143Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#144CoDesigner – All in One Elementor WooCommerce Builder224,1317745k+Text Domain Mismatch
#145Simple Shopping Cart2279653610k+Unsafe printing function
#146Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#147WP Easy Pay – Payment and Donation form Builder for Square229101,8351k+Non-prefixed global variable
#148WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#149WP Umbrella: Update Backup Restore & Monitoring2292191970k+Exception output is not escaped
#150Wp-Insert2226730110k+Output is not escaped