PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351DecaLog259432361k+Exception output is not escaped
#352Docket Cache – Object Cache Accelerator2533348120k+Output is not escaped
#353Events Made Easy255076,2991k+Non-prefixed function
#354FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler253194667k+Non-prefixed global variable
#355Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non-prefixed global variable
#356WP Fast Total Search – The Power of Indexed Search252082911k+Non-prefixed global variable
#357GD Rating System251,5111,0431k+Output is not escaped
#358GD Security Headers254075211k+Output is not escaped
#359Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+Missing direct file access protection
#360Sitemap by BestWebSoft – WordPress XML Site Map Page Generator Plugin2560820720k+Text Domain Mismatch
#361Hydra Booking — Appointment Scheduling & Booking Calendar252387072k+Non-prefixed global variable
#362Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention256186051m+Unsafe printing function
#363Live Composer – Free WordPress Website Builder251,21642710k+Output is not escaped
#364LWS Optimize – All-in-One Speed Booster & Cache Tools2543076420k+Non-prefixed global variable
#365Media Cleaner: Clean your WordPress!2515139190k+Direct Query
#366Media Cloud Sync251,0952741k+Exception output is not escaped
#367Create251,5587696k+Text Domain Mismatch
#368MyFatoorah – WooCommerce25191893k+Output is not escaped
#369All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements2535259740k+Non-prefixed global variable
#370Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2519871010k+Nonce verification recommended
#371NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar2525740040k+Non-prefixed hook name
#372Notifications for Forms & WordPress Actions253092821k+Text Domain Mismatch
#373PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non-prefixed global variable
#374phpinfo() WP — Site Health, PHP Compatibility & Server Audit252767043k+Non-prefixed global variable
#375Quttera ThreatSign – Web Malware Scanner for WordPress2533447110k+Non-prefixed global variable
#376reSmush.it : The original free image compressor and optimizer plugin2515569100k+Output is not escaped
#377BerqWP – Automatic WordPress Website Speed Optimization251985013k+Non-prefixed global variable
#378SEO Booster253931,4681k+Non-prefixed global variable
#379SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking251969022k+Direct Query
#380ShopMagic – email automation2522814510k+Exception output is not escaped
#381Simply Static – The Static Site Generator2516344830k+Non-prefixed hook name
#382Sitemap by click5252861326k+Unsafe printing function
#383Affiliate Program Suite — SliceWP Affiliates251,2912,08910k+Output is not escaped
#384Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers253481,4811k+Nonce verification recommended
#385Tamara Checkout256012282k+Exception output is not escaped
#386Themify Event Post253971433k+Output is not escaped
#387Toocheke Companion254091,1131k+Non-prefixed global variable
#388TranslatePress – Translate Multilingual sites with AI Translation254521,541400k+Non-prefixed hook name
#389Ultimate Bootstrap Elements for Elementor256,3261226k+Text Domain Mismatch
#390Ultimate Post Kit Addons for Elementor2518241230k+Missing nonce verification
#391Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#392VikBooking Hotel Booking Engine & PMS2513,2328,3128k+Output is not escaped
#393VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#3943D viewer by Visody258321,3221k+Non-prefixed global variable
#395Pay with Vipps and MobilePay for WooCommerce258465145k+Output is not escaped
#396Wordfence Login Security2524841870k+Output is not escaped
#397WordPress Importer252381102m+Output is not escaped
#398WP Airbnb Review Slider253256461k+Non-prefixed global variable
#399Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#400WP Review Slider251,1862,2796k+Non-prefixed global variable