WordPress.WP.AlternativeFunctions.curl_curl_file_create
curl curl file create
The plugin uses raw cURL functions instead of the WordPress HTTP API.
Why It Shows Up
Plugin Check found `curl_*` calls in plugin code.
Why It Matters
The WordPress HTTP API handles transports, proxies, SSL behavior, filters, and host compatibility more consistently than raw cURL.
How to Fix
- Replace simple cURL requests with `wp_remote_get()` or `wp_remote_post()`.
- Handle `WP_Error`, status codes, timeouts, and response body parsing explicitly.
- If a bundled library uses cURL internally, keep it isolated and avoid passing unchecked user input into requests.
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Updated | Top Issue |
|---|---|---|---|---|---|---|---|
| #1 | InfiniteWP Client | 22 | 2,286 | 1,812 | 200k+ | Exception Not Escaped | |
| #2 | NextScripts: Social Networks Auto-Poster | 22 | 2,408 | 1,133 | 30k+ | Output Not Escaped | |
| #3 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,723 | 10,283 | 40k+ | Non Prefixed Namespace Found | |
| #4 | Trinity Audio – Text to Speech AI audio player to convert content into audio | 23 | 119 | 227 | 2k+ | Non Prefixed Variable Found | |
| #5 | AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress | 24 | 5,230 | 1,464 | 7k+ | Output Not Escaped | |
| #6 | Colissimo shipping methods for WooCommerce | 25 | 1,755 | 557 | 10k+ | Text Domain Mismatch | |
| #7 | BerqWP – Automatic WordPress Website Speed Optimization | 25 | 198 | 501 | 3k+ | Non Prefixed Variable Found | |
| #8 | Backup, Restore and Migrate your sites with XCloner | 25 | 238 | 864 | 10k+ | Input Not Sanitized | |
| #9 | Assistant – Every Day Productivity Apps | 34 | 124 | 97 | 4k+ | Exception Not Escaped | |
| #10 | Converter for Media – Optimize images | Convert WebP & AVIF | 35 | 133 | 53 | 500k+ | curl curl setopt |
