PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Simple Shopping Cart2279653610k+Unsafe printing function
#152Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#153WP Easy Pay – Payment and Donation form Builder for Square228931,8281k+Non-prefixed global variable
#154WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#155WP Umbrella: Update Backup Restore & Monitoring2291891670k+Exception output is not escaped
#156Wp-Insert2226730110k+Output is not escaped
#157AidWP – Donation & Payment Forms (Stripe Powered)221,3171,675800Non-prefixed global variable
#158WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#159User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration222871,43220k+Non-prefixed global variable
#160WP-WebAuthn229573962k+Exception output is not escaped
#161WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#162ShopWP22430225700Text Domain Mismatch
#163YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#164Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce231,1851,0271k+Text Domain Mismatch
#165Advanced Custom Fields: Extended231,885329100k+Text Domain Mismatch
#166Admin and Site Enhancements (ASE)23136330200k+Nonce verification recommended
#167AI Engine – The Chatbot, AI Framework & MCP for WordPress23411544100k+error log error log
#168Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#169AR for WordPress23149508400Non-prefixed global variable
#170Autoptimize23288191800k+Output is not escaped
#171BA Book Everything231,1841,08610k+Output is not escaped
#172Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#173Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#174Captivate Sync231745571k+Non-prefixed global variable
#175Cart Notices for WooCommerce236504712k+Text Domain Mismatch
#176Geo Controller232035441k+Non-prefixed global variable
#177WPBot – AI ChatBot for Live Support, Lead Generation, AI Services236241,2455k+Non-prefixed global variable
#178Church Admin231,6434,202900Direct Query
#179CLUEVO LMS, E-Learning Platform231,8431,176400Text Domain Mismatch
#180Content Egg – Affiliate Product Importer & Price Comparison231,2311,25710k+Non-prefixed global variable
#181Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31026,642900Non-prefixed global variable
#182CWW Companion233072231k+Output is not escaped
#183Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#184Ecwid by Lightspeed Ecommerce Shopping Cart2333930720k+Missing direct file access protection
#185Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34290k+Non-prefixed global variable
#186Export WordPress Pages to Static HTML & PDF — Static Site Export234903014k+Text Domain Mismatch
#187Ezoic2343251610k+Output is not escaped
#188Fastcache by Host.it231,327203700Text Domain Mismatch
#189Feed Them Social – Social Media Feeds, Video, and Photo Galleries2356353520k+Output is not escaped
#190Flexmls® IDX Plugin231,2689571k+Output is not escaped
#191Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#192GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress233,6622,97110k+Output is not escaped
#193Happy Addons for Elementor23573444400k+Output is not escaped
#194Hunk Companion232,5446876k+Text Domain Mismatch
#195RealHomes Memberships235162641k+Non Singular String Literal Domain
#196Joli FAQ SEO – WordPress FAQ Plugin231,0831,526700Non-prefixed global variable
#197Justified Gallery235891,4178k+Non-prefixed global variable
#198Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non-prefixed global variable
#199Kenta Companion236571,4192k+Non-prefixed global variable
#200King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder231,8313,87810k+Non-prefixed global variable