PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2Intercom060716k+Non Prefixed Function Found
#3Themify Builder95,1952,0965k+Text Domain Mismatch
#4JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#5AnyComment174454495k+Output Not Escaped
#6wpForo Forum174,0332,92220k+Unsafe Printing Function
#7Prime Slider Addons for Elementor183,500230100k+Text Domain Mismatch
#8WP Import Export Lite1873897940k+Non Prefixed Variable Found
#9Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#10Download Monitor194251,36480k+Non Prefixed Hookname Found
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#12Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#13Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#14Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#15SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195261,11990k+Non Prefixed Variable Found
#16BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non Prefixed Variable Found
#17Brizy – Page Builder2058972070k+Output Not Escaped
#18Filter Everything — WordPress & WooCommerce Filters2056873050k+Output Not Escaped
#19GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#20Link Library201,9411,39710k+Unsafe Printing Function
#21Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Missing Unslash
#22Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#23Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#24Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#25WPJAM Basic203283564k+Output Not Escaped
#26Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#27Backup Migration219811,09380k+Non Prefixed Variable Found
#28bbPress219293,672100k+Non Prefixed Function Found
#29Captcha Them All213003236k+Output Not Escaped
#30Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#31Envo Extra2187860020k+Text Domain Mismatch
#32eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+Non Prefixed Variable Found
#33EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#34FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#35Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#36If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe Printing Function
#37Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#38MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#39OneLogin SAML SSO215083307k+wp function not compatible with requires wp
#40Packeta218023338k+Exception Not Escaped
#41Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#42Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#43Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#44Accept Stripe Payments2137388220k+Missing
#45ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non Prefixed Variable Found
#46Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#47Wise Chat214705065k+Output Not Escaped
#48Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#49Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#50WP phpMyAdmin214,5286,43550k+Missing Arg Domain