WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#401EWWW Image Optimizer352257291m+Direct Query
#402Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager35646480k+Non Prefixed Variable Found
#403Gum Addon for Elementor356607250k+Text Domain Mismatch
#404User Import with meta – WP Ultimate CSV Importer Add-on35271405k+Interpolated Not Prepared
#405JWT Auth – WordPress JSON Web Token Authentication3514186k+Output Not Escaped
#406MetaSlider Gallery – Image Gallery, Lightbox Galleries, Modal Windows351574910k+Output Not Escaped
#407Page Optimize357041200k+Non Singular String Literal Domain
#408Print, PDF, Email by PrintFriendly352202920k+Unsafe Printing Function
#409Internal Links Manager3518812110k+Output Not Escaped
#410Security Optimizer – The All-In-One Protection Plugin3540821m+Missing Unslash
#411WPZOOM Connect: Social Icons Widget, Share Buttons & Click to Chat352831100k+Input Not Sanitized
#412Starter Sites & Templates by Neve352888100k+Non Prefixed Hookname Found
#413Converter for Media – Optimize images | Convert WebP & AVIF3513353500k+curl curl setopt
#414Pixel Manager for WooCommerce – Conversion Tracking, Google Ads, GA4, TikTok, Dynamic Remarketing354922950k+Non Prefixed Hookname Found
#415Easy Accept Payments via PayPal353221287k+Text Domain Mismatch
#416WP Datepicker352251817k+Output Not Escaped
#417WP Mailto Links – Protect Email Addresses3595698k+Output Not Escaped
#418WPZOOM Addons for Elementor – Starter Templates & Widgets3516012620k+Output Not Escaped
#419Yabe Webfont – Use Custom Fonts, Google Fonts or Adobe Fonts35481145k+Non Prefixed Hookname Found
#420authLdap3647305k+Exception Not Escaped
#421Blaze Demo Importer36101948k+Output Not Escaped
#422BP Profile Search36321855k+Output Not Escaped
#423bunny.net – WordPress CDN Plugin3611412710k+Output Not Escaped
#424Drag and Drop Multiple File Upload for Contact Form 736823660k+wp function not compatible with requires wp
#425Dynamic Visibility for Elementor36568950k+Non Prefixed Hookname Found
#426Email Before Download3689296k+Unsafe Printing Function
#427HTML Forms – Simple WordPress Forms Plugin3623116610k+Output Not Escaped
#428Italy Cookie Choices (for EU Cookie Law & Cookie Notice)361157710k+Unsafe Printing Function
#429Login as User361016430k+Output Not Escaped
#430LocalWeb All In One36312645k+Non Prefixed Variable Found
#431Photoswipe Masonry Gallery3657476k+Non Singular String Literal Text
#432Quick 301 Redirects36891205k+Non Prefixed Variable Found
#433Rara One Click Demo Import361229820k+Missing Translators Comment
#434ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution3663667100k+Non Prefixed Variable Found
#435Stripe Tax – Sales tax automation for WooCommerce36976130k+Exception Not Escaped
#436WP Socializer – Simple & Easy Social Media Share Icons362145110k+Output Not Escaped
#437Yandex.Metrica36763060k+Output Not Escaped
#438Add From Server37522060k+Output Not Escaped
#439Add to Cart Redirect for WooCommerce372151418k+Text Domain Mismatch
#440Before After Image Comparison Slider for Elementor37904110k+Text Domain Mismatch
#441Customize WordPress Emails and Alerts – Better Notifications for WP37644730k+Missing Arg Domain
#442ClickCease Click Fraud Protection37305810k+Non Prefixed Class Found
#443Gmail SMTP37847310k+Unsafe Printing Function
#444XML Sitemap Generator for Google3743791m+Input Not Validated
#445Lightbox with PhotoSwipe371792420k+Output Not Escaped
#446MailMunch – Grow your Email List3782846k+Output Not Escaped
#447Recent Posts Widget With Thumbnails3722246100k+Output Not Escaped
#448SendWP37474210k+Output Not Escaped
#449Spam Destroyer3763436k+rand rand
#450Elemailer Lite – Elementor email template & campaign builder3844505k+Output Not Escaped