PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#202WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non-prefixed global variable
#203Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#204WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1193,51620k+Interpolated SQL is not prepared
#205WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,37689020k+Output is not escaped
#206WPMobile.App232,9831,5273k+Output is not escaped
#207Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#208Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress232,3171,7145k+Output is not escaped
#209404 Solution244791,33310k+Non-prefixed class
#210A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#211AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output is not escaped
#212Ad Inserter – Ad Manager & AdSense Ads244,241811300k+Output is not escaped
#213Advanced iFrame248871,12040k+Non-prefixed global variable
#214All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#215Starter Templates – AI-Powered Templates for Elementor & Gutenberg241253961m+Non-prefixed hook name
#216AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress241,7051,3937k+Text Domain Mismatch
#217Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#218Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#219Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More243429306k+Non-prefixed global variable
#220Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News246991,69330k+Non-prefixed global variable
#221Branda – White Label & Branding, Free Login Page Customizer243,17482020k+Text Domain Mismatch
#222Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder245761,34470k+Non-prefixed global variable
#223Calculated Fields Form2428259940k+Non-prefixed global variable
#224Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#225Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#226CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#227Complianz – GDPR/CCPA Cookie Consent244874031m+Missing Arg Domain
#228Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#229WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#230Custom Twitter Feeds – A Tweets Widget or X Feed Widget24446922100k+Output is not escaped
#231WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)248452,6654k+Non-prefixed global variable
#232Democracy Poll243884257k+Short PHP open tag found
#233EmbedPress – PDF Embedder, Embed PDF viewer, YouTube Videos, 3D FlipBook, Social feeds & more246681,560100k+Output is not escaped
#234Enable Media Replace24214276600k+Output is not escaped
#235Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns24112632200k+Non-prefixed global variable
#236Event Tickets and Registration243,4154,21090k+Non-prefixed global variable
#237Fast Velocity Minify2428225640k+Unsafe printing function
#238Featured Image from URL (FIFU)241,65441870k+Non Singular String Literal Domain
#239FeedWordPress244963199k+Missing Arg Domain
#240Fix Alt Text245443461k+Non Singular String Literal Domain
#241Forminator Forms – Contact Form, Payment Form & Custom Form Builder248261,314600k+Non-prefixed global variable
#242Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#243Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#244InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#245Joli Table Of Contents246531,7557k+Non-prefixed global variable
#246Koko Analytics – Privacy-Friendly WordPress Analytics2416128060k+Short PHP open tag found
#247LearnPress – Backup & Migration Tool243854695k+Output is not escaped
#248Event Booking Manager for WooCommerce249682,1227k+Non-prefixed global variable
#249Mailchimp for WooCommerce24523663200k+Non-prefixed global variable
#250Mailjet Email Marketing2443520610k+Unsafe printing function