WordPress.WP.AlternativeFunctions.curl_curl_exec

curl curl exec

The plugin uses raw cURL functions instead of the WordPress HTTP API.

medium weight

Why It Shows Up

Plugin Check found `curl_*` calls in plugin code.

Why It Matters

The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.

How to Fix

  • Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
  • Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
  • If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#3Podlove Podcast Publisher182,3261,4293k+Output Not Escaped
#4Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#5Download Monitor194251,36480k+Non Prefixed Hookname Found
#6Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#7Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#8Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#9Razorpay Payment Button Plugin19486982k+Exception Not Escaped
#10Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non Prefixed Variable Found
#11Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#12Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#13SendPress Newsletters192,2931,4222k+Output Not Escaped
#14WP Email Template193423502k+Exception Not Escaped
#15Link Library201,9411,39710k+Unsafe Printing Function
#16Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Missing Unslash
#17Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#18Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#19Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#20Backup Migration219811,09380k+Non Prefixed Variable Found
#21Pinpoint Booking System – Version 2216343283k+missing direct file access protection
#22Cost Calculator Builder2132276530k+Non Prefixed Variable Found
#23Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#24Eupago Gateway For Woocommerce216123202k+Output Not Escaped
#25EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#26FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#27Campaign Monitor for WordPress213864612k+Non Prefixed Variable Found
#28MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non Prefixed Variable Found
#29Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#30OneLogin SAML SSO215083307k+wp function not compatible with requires wp
#31Packeta218023338k+Exception Not Escaped
#32Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#33Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#34Razorpay Quick Payments21399633k+Exception Not Escaped
#35Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#36Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#37Seamless Donations is Sunset216005142k+Text Domain Mismatch
#38Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output Not Escaped
#39Accept Stripe Payments2137388220k+Missing
#40Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#41Buckaroo Woocommerce Payments Plugin215633262k+Exception Not Escaped
#42Wise Chat214705065k+Output Not Escaped
#43Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#44Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#45WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#46WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#47wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#48Premium Packages – Sell Digital Products Securely212,7652,4443k+Output Not Escaped
#49All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#50Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception Not Escaped