PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#301WP Hotel Booking241,2501,5557k+Non Prefixed Variable Found
#302WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77539340k+Text Domain Mismatch
#303SlimStat Analytics241,16973770k+Exception Not Escaped
#304WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#305WP Travel – Ultimate Travel Booking System, Tour Management Engine244271,9624k+Non Prefixed Hookname Found
#306WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non Prefixed Variable Found
#307Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5762,103100k+Output Not Escaped
#308WP User Manager – User Profile Builder & Membership2478753910k+Exception Not Escaped
#309WPeMatico RSS Feed Fetcher241,37658210k+Output Not Escaped
#310WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)244821892k+Output Not Escaped
#311WpStream – Live Streaming, Video on Demand, Pay Per View241,7127404k+Text Domain Mismatch
#312WP Travel Engine – Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor245,9072,13610k+Text Domain Mismatch
#313Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non Prefixed Variable Found
#314Affiliates256891,4832k+Output Not Escaped
#315All 404 Redirect to Homepage25140301200k+date date
#316Appointment Hour Booking – Booking Calendar252611,25410k+Non Prefixed Variable Found
#317ATUM WooCommerce Inventory Management and Stock Tracking252,6381,30410k+Non Singular String Literal Domain
#318bbp style pack251,4191,7926k+Output Not Escaped
#319Beaver Builder Page Builder – Drag and Drop Website Builder254,4631,819100k+Text Domain Mismatch
#320Breeze Cache25217790400k+Non Prefixed Variable Found
#321Broken Link Checker25727600500k+Output Not Escaped
#322CheckoutWC Lite251,3598503k+Text Domain Mismatch
#323Admin Columns25613995100k+Non Prefixed Namespace Found
#324Colissimo shipping methods for WooCommerce251,75555710k+Text Domain Mismatch
#325Contact Form Email254098989k+Non Prefixed Variable Found
#326Coupon Creator256984121k+Output Not Escaped
#327DecaLog259432361k+Exception Not Escaped
#328Docket Cache – Object Cache Accelerator2533348120k+Output Not Escaped
#329Events Made Easy255066,2961k+Non Prefixed Function Found
#330Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non Prefixed Variable Found
#331GD Security Headers254075211k+Output Not Escaped
#332Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+missing direct file access protection
#333Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin2560820720k+Text Domain Mismatch
#334Hydra Booking — Appointment Scheduling & Booking Calendar252387072k+Non Prefixed Variable Found
#335Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256216021m+Unsafe Printing Function
#336Live Composer – Free WordPress Website Builder251,21642710k+Output Not Escaped
#337LWS Optimize – All-in-One Speed Booster & Cache Tools2543076420k+Non Prefixed Variable Found
#338Media Cleaner: Clean your WordPress!2515139190k+Direct Query
#339Create251,5587676k+Text Domain Mismatch
#340MyFatoorah – WooCommerce25191893k+Output Not Escaped
#341All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements2535259740k+Non Prefixed Variable Found
#342Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2519871010k+Recommended
#343NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar2525739740k+Non Prefixed Hookname Found
#344PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non Prefixed Variable Found
#345phpinfo() WP — Site Health, PHP Compatibility & Server Audit252767043k+Non Prefixed Variable Found
#346Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non Prefixed Variable Found
#347reSmush.it : The original free image compressor and optimizer plugin2515569100k+Output Not Escaped
#348BerqWP – Automatic WordPress Website Speed Optimization251985013k+Non Prefixed Variable Found
#349SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking251969022k+Direct Query
#350ShopMagic – email automation2522814510k+Exception Not Escaped