fatbeehive

Sounds good thank you!

I suppose an alternative if you really want to keep that locked down is to add filters before the request.

So in https://plugins.trac.wordpress.org/browser/pardot/trunk/includes/pardot-api-class.php#L430 this:

$http_response = wp_remote_request(
        $this->_get_url( $item_type, $args ),
        array_merge( array(
                'timeout'       => '30',
                'redirection'   => '5',
                'method'        => 'POST',
                'blocking'      => true,
                'compress'      => false,
                'decompress'    => true,
                'sslverify'     => false,
                'body'          => $args
        ), $args )
);

Could become this:

$url = $this->_get_url( $item_type, $args );
$args = array_merge( array(
        'timeout'       => '30',
        'redirection'   => '5',
        'method'        => 'POST',
        'blocking'      => true,
        'compress'      => false,
        'decompress'    => true,
        'sslverify'     => false,
        'body'          => $args
), $args );
$url = apply_filters( 'pardot_api_request_url', $url, $item_type );
$args = apply_filters( 'pardot_api_request_args', $args, $item_type );
$http_response = wp_remote_request( $url, $args );

....

$response = apply_filters( 'pardot_api_request_url', $response, $item_type );

Happy to submit that as a patch if it’s easier for you.