PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite
Plugin Directory Write
The plugin writes files in or near plugin-controlled directories.
Why It Shows Up
Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.
Why It Matters
Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.
How to Fix
- Store generated data in uploads, cache, or another WordPress-approved writable location.
- Validate paths and file names against strict allowlists.
- Avoid modifying plugin source files at runtime.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #101 | NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce | 22 | 1,353 | 1,412 | 1k+ | Non-prefixed global variable | ||
| #102 | WPBITS Addons For Elementor Page Builder | 22 | 996 | 1,399 | 2k+ | Non-prefixed global variable | ||
| #103 | ЮKassa для WooCommerce | 22 | 591 | 167 | 9k+ | Short PHP open tag found | ||
| #104 | Recipe Cards For Your Food Blog from Zip Recipes | 22 | 1,126 | 1,731 | 1k+ | Non-prefixed global variable | ||
| #105 | Gutenberg Blocks – ACF Blocks Suite | 23 | 1,097 | 1,449 | 400 | Non-prefixed global variable | ||
| #106 | Frontend Admin by DynamiApps | 23 | 5,946 | 3,231 | 9k+ | Text Domain Mismatch | ||
| #107 | Ad Inserter – Ad Manager & AdSense Ads | 23 | 4,267 | 812 | 300k+ | Output is not escaped | ||
| #108 | Custom WooCommerce Checkout Fields Editor | 23 | 755 | 1,386 | 2k+ | Non-prefixed global variable | ||
| #109 | Adminify – White Label, Admin Menu Editor, Login Customizer | 23 | 547 | 1,380 | 7k+ | Non-prefixed global variable | ||
| #110 | Affiliate Super Assistent | 23 | 1,280 | 267 | 1k+ | Text Domain Mismatch | ||
| #111 | Fullscreen Menu | 23 | 537 | 1,287 | 2k+ | Non-prefixed global variable | ||
| #112 | Autocomplete Address and Location Picker for WooCommerce | 23 | 630 | 1,299 | 2k+ | Non-prefixed global variable | ||
| #113 | Autoptimize | 23 | 288 | 191 | 800k+ | Output is not escaped | ||
| #114 | bBlocks – Essential Gutenberg Blocks & Patterns Collection | 23 | 661 | 1,506 | 700 | Non-prefixed global variable | ||
| #115 | BuddyDrive | 23 | 722 | 1,597 | 1k+ | Non-prefixed global variable | ||
| #116 | Announcement & Notification Banner – Bulletin | 23 | 930 | 1,576 | 2k+ | Non-prefixed global variable | ||
| #117 | Grid & Styler For Contact Form 7 And Divi | 23 | 548 | 1,341 | 500 | Non-prefixed global variable | ||
| #118 | All In One Login — Login Page Security and Customization for WordPress with Google reCAPTCHA, Social Login, Temporary Login, 2FA, and more. | 23 | 750 | 1,359 | 60k+ | Non-prefixed global variable | ||
| #119 | Classified Listing – AI-Powered Classified ads & Business Directory | 23 | 152 | 2,158 | 9k+ | Non-prefixed global variable | ||
| #120 | Content Aware Sidebars – Fastest Widget Area Plugin | 23 | 993 | 1,738 | 30k+ | Non-prefixed global variable | ||
| #121 | Auto Post Cleaner | 23 | 715 | 1,378 | 1k+ | Non-prefixed global variable | ||
| #122 | Disable Bloat for WordPress & WooCommerce | 23 | 863 | 1,325 | 10k+ | Non-prefixed global variable | ||
| #123 | Easy Digital Downloads – eCommerce Payments and Subscriptions made easy | 23 | 3,719 | 10,280 | 40k+ | Non-prefixed namespace | ||
| #124 | Marijuana Age Verify | 23 | 1,154 | 2,630 | 1k+ | Non-prefixed global variable | ||
| #125 | Error Log Monitor | 23 | 694 | 1,414 | 20k+ | Non-prefixed global variable | ||
| #126 | Events Addon for Elementor | 23 | 779 | 1,339 | 7k+ | Non-prefixed global variable | ||
| #127 | Ezoic | 23 | 441 | 519 | 10k+ | Output is not escaped | ||
| #128 | Fastcache by Host.it | 23 | 1,327 | 207 | 900 | Text Domain Mismatch | ||
| #129 | Featured Images in RSS for Mailchimp & More | 23 | 780 | 1,299 | 20k+ | Non-prefixed global variable | ||
| #130 | Finpose – Accounting for WooCommerce | 23 | 1,649 | 1,307 | 400 | Non-prefixed global variable | ||
| #131 | Image Photo Gallery Final Tiles Grid | 23 | 578 | 1,502 | 20k+ | Non-prefixed global variable | ||
| #132 | Five-Star Ratings Shortcode | 23 | 604 | 1,317 | 600 | Non-prefixed global variable | ||
| #133 | Front End PM | 23 | 978 | 2,264 | 4k+ | Non-prefixed global variable | ||
| #134 | Tracking and Consent Manager – WP Full Picture | 23 | 1,280 | 3,223 | 3k+ | Non-prefixed global variable | ||
| #135 | Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More | 23 | 1,840 | 2,310 | 2k+ | Non-prefixed global variable | ||
| #136 | Hunk Companion | 23 | 2,547 | 687 | 6k+ | Text Domain Mismatch | ||
| #137 | Iks Menu – WordPress Category Accordion Menu & FAQs | 23 | 615 | 1,293 | 10k+ | Non-prefixed global variable | ||
| #138 | Image Carousel For Divi | 23 | 569 | 1,309 | 1k+ | Non-prefixed global variable | ||
| #139 | InfiniteWP Client | 23 | 2,287 | 1,811 | 200k+ | Exception output is not escaped | ||
| #140 | Joli FAQ SEO – WordPress FAQ Plugin | 23 | 1,083 | 1,526 | 700 | Non-prefixed global variable | ||
| #141 | Justified Gallery | 23 | 589 | 1,417 | 8k+ | Non-prefixed global variable | ||
| #142 | Kenta Companion | 23 | 657 | 1,419 | 2k+ | Non-prefixed global variable | ||
| #143 | King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder | 23 | 1,832 | 3,877 | 10k+ | Non-prefixed global variable | ||
| #144 | Link Whisper Free | 23 | 3,926 | 5,402 | 30k+ | Text Domain Mismatch | ||
| #145 | LLMagnet – AI Visibility & AI SEO for Claude, ChatGPT & More | 23 | 627 | 1,798 | 500 | Non-prefixed global variable | ||
| #146 | Custom Login Page Customizer | 23 | 687 | 1,408 | 90k+ | Non-prefixed global variable | ||
| #147 | Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits | 23 | 525 | 1,555 | 30k+ | Non-prefixed global variable | ||
| #148 | Media Library File Download | 23 | 615 | 1,286 | 1k+ | Non-prefixed global variable | ||
| #149 | Media Library Assistant | 23 | 1,131 | 3,759 | 70k+ | Nonce verification recommended | ||
| #150 | Menu Image, Icons made easy | 23 | 591 | 1,406 | 100k+ | Non-prefixed global variable |
