WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#351WP TripAdvisor Review Slider259582,0588k+Non Prefixed Variable Found
#352WPvivid — Backup, Migration & Staging258991,461900k+Non Prefixed Namespace Found
#353Video Gallery – YouTube Gallery, Playlist & Video Grid252751,0702k+Non Prefixed Hookname Found
#354ezCache2612726910k+Direct Query
#355FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.)265914162k+Exception Not Escaped
#356Loco Translate264542421m+Output Not Escaped
#357Omise Payments263582562k+Output Not Escaped
#358Open User Map – Interactive Leaflet Maps2689398610k+Non Prefixed Variable Found
#359LoginWP (Formerly Peter's Login Redirect)2640127890k+Output Not Escaped
#360Crowdsignal Dashboard – Polls, Surveys & more26486489200k+Unsafe Printing Function
#361Pressidium Cookie Consent262039510k+Exception Not Escaped
#362SP Move Login268812156k+Text Domain Mismatch
#363User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch
#364WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder2626579330k+Missing
#365WP Flashy Marketing Automation264321862k+Text Domain Mismatch
#366Comment Link Remove and Other Comment Tools276911327k+Text Domain Mismatch
#367Duplicate Post27447274300k+Unsafe Printing Function
#368Foxtool All-in-One: Contact chat button, Custom login, Media optimize images271,6293607k+Unsafe Printing Function
#369Login for Google Apps271398510k+Exception Not Escaped
#370Hester Core2725310310k+Output Not Escaped
#371MW WP Form27334219200k+Output Not Escaped
#372Nextend Social Login and Register271,668243200k+Output Not Escaped
#373picu – Online Photo Proofing Gallery276133222k+Output Not Escaped
#374Autopay277463703k+Text Domain Mismatch
#375Presto Player27131124100k+Missing Arg Domain
#376Simple Download Monitor2721827320k+Output Not Escaped
#377Hubbub Lite – Fast, free social sharing and follow buttons2733717230k+Text Domain Mismatch
#378Speed Booster Pack ⚡ PageSpeed Optimization Suite271081879k+Missing Translators Comment
#379Under Construction, Coming Soon & Maintenance Mode2740114810k+Output Not Escaped
#380WP Activity Log2796230300k+Recommended
#381Redirection for Contact Form 72734374200k+Non Prefixed Variable Found
#382Maspik – Ultimate Spam Protection2821286430k+Missing
#383easy.jobs – AI powered Job Listing, Job Board, Career Page, Recruitment & Hiring Solution284058105k+Missing
#384Kadence Starter Templates — Predesigned Website Templates28312215300k+Missing Arg Domain
#385Kama Thumbnail2880479k+Output Not Escaped
#386Laposta Signup Basic28275662k+Output Not Escaped
#387Loginfy – Custom Login Page Customizer283383982k+Output Not Escaped
#388ووکامرس فارسی2815721590k+Output Not Escaped
#389Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery281432585k+Post Not In exclude
#390Podcast Importer SecondLine283561694k+Text Domain Mismatch
#391Redis Object Cache28151103400k+Exception Not Escaped
#392Responsive Lightbox & Gallery28139513100k+Non Prefixed Hookname Found
#393Transliterator – Multilingual and Multi-script Text Conversion283053203k+Output Not Escaped
#394Temporary Login Without Password28128131100k+wp function not compatible with requires wp
#395Jetpack VaultPress287136210k+Missing
#39610WebSocial2858418510k+Unsafe Printing Function
#397WP ADA Compliance Check Basic287851773k+Text Domain Mismatch
#398Connect Matomo – Analytics Dashboard for WordPress2810010260k+Missing Translators Comment
#399WP YouTube Lyte2820417830k+Non Prefixed Variable Found
#400WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce281732265k+Output Not Escaped