PluginScore

WordPress.WP.AlternativeFunctions.parse_url_parse_url

parse url parse url

The plugin uses raw URL parsing where WordPress URL helpers may be safer or more compatible.

medium weight

Why It Shows Up

Plugin Check found `parse_url()` in plugin code.

Why It Matters

URL parsing is easy to get subtly wrong, especially with relative URLs, encoded values, and malformed input.

How to Fix

  • Use WordPress helpers such as `wp_parse_url()`, `esc_url_raw()`, `esc_url()`, and `wp_http_validate_url()` where they fit.
  • Validate schemes and hosts before using parsed URL parts.
  • Do not use parsed URLs to build redirects or requests without allowlisting.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2Intercom060716k+Non Prefixed Function Found
#3Themify Builder95,1952,0965k+Text Domain Mismatch
#4JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#5AnyComment174454495k+Output Not Escaped
#6wpForo Forum174,0332,92220k+Unsafe Printing Function
#7Prime Slider Addons for Elementor183,500230100k+Text Domain Mismatch
#8Property Hive181,9576,0273k+Missing
#9Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#10WP Import Export Lite1873897940k+Non Prefixed Variable Found
#11WP Directory Kit182,1192,6172k+Non Prefixed Variable Found
#12Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#13Download Monitor194251,36480k+Non Prefixed Hookname Found
#14Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#15Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#16Razorpay Payment Button Plugin19486982k+Exception Not Escaped
#17Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non Prefixed Variable Found
#18Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#19Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#20Scrollsequence – Cinematic Scroll Image Animation Plugin198781,5284k+Non Prefixed Variable Found
#21SendPress Newsletters192,2931,4222k+Output Not Escaped
#22SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments195261,11990k+Non Prefixed Variable Found
#23WP Email Template193423502k+Exception Not Escaped
#24BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non Prefixed Variable Found
#25Brizy – Page Builder2058972070k+Output Not Escaped
#26Filter Everything — WordPress & WooCommerce Filters2056873050k+Output Not Escaped
#27GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#28Link Library201,9411,39710k+Unsafe Printing Function
#29Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Missing Unslash
#30Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#31Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#32Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception Not Escaped
#33Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#34WPJAM Basic203283564k+Output Not Escaped
#35Store Locator WordPress212,3721,57210k+Text Domain Mismatch
#36Backup Migration219811,09380k+Non Prefixed Variable Found
#37bbPress219293,672100k+Non Prefixed Function Found
#38Pinpoint Booking System – Version 2216343283k+missing direct file access protection
#39CallTrackingMetrics219232863k+Unsafe Printing Function
#40Captcha Them All213003236k+Output Not Escaped
#41Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#42Envo Extra2187860020k+Text Domain Mismatch
#43eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams211864379k+Non Prefixed Variable Found
#44EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#45FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#46Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#47If-So Dynamic Content – Elementor & All Page Builders Personalization218897257k+Unsafe Printing Function
#48JCH Optimize219531334k+Output Not Escaped
#49Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#50MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch