PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite
Plugin Directory Write
The plugin writes files in or near plugin-controlled directories.
Why It Shows Up
Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.
Why It Matters
Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.
How to Fix
- Store generated data in uploads, cache, or another WordPress-approved writable location.
- Validate paths and file names against strict allowlists.
- Avoid modifying plugin source files at runtime.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #151 | MultiParcels Shipping For WooCommerce | 23 | 197 | 387 | 4k+ | Mixed line endings | ||
| #152 | NicheTable – Responsive Comparison Table Block | 23 | 683 | 1,307 | 700 | Non-prefixed global variable | ||
| #153 | NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization | 23 | 311 | 635 | 90k+ | Output is not escaped | ||
| #154 | Ocean Extra | 23 | 1,494 | 2,110 | 500k+ | Non-prefixed global variable | ||
| #155 | Gallery PhotoBlocks | 23 | 904 | 1,345 | 3k+ | Non-prefixed global variable | ||
| #156 | ExpressTechSoftwares Discord Add-on for Paid Memberships Pro | 23 | 454 | 449 | 700 | Text Domain Mismatch | ||
| #157 | Post to Google My Business (Google Business Profile) | 23 | 845 | 1,452 | 10k+ | Non-prefixed global variable | ||
| #158 | Primary Addon for Elementor | 23 | 765 | 1,306 | 6k+ | Non-prefixed global variable | ||
| #159 | Print My Blog – Print, PDF, & eBook Converter WordPress Plugin | 23 | 1,077 | 1,660 | 8k+ | Non-prefixed global variable | ||
| #160 | Protect Admin | 23 | 606 | 1,300 | 2k+ | Non-prefixed global variable | ||
| #161 | Radio Station by netmix® – Manage and play your Show Schedule in WordPress! | 23 | 934 | 3,619 | 1k+ | Non-prefixed global variable | ||
| #162 | Read More Without Refresh | 23 | 955 | 1,347 | 20k+ | Non-prefixed global variable | ||
| #163 | Read More WP | 23 | 570 | 1,311 | 1k+ | Non-prefixed global variable | ||
| #164 | Restaurant & Cafe Addon for Elementor | 23 | 889 | 1,326 | 1k+ | Non-prefixed global variable | ||
| #165 | Shipment Tracker for Woocommerce | 23 | 477 | 576 | 2k+ | Missing Arg Domain | ||
| #166 | Image Optimizer, Resizer and CDN – Sirv | 23 | 616 | 1,004 | 1k+ | Output is not escaped | ||
| #167 | Smart Marketing SMS and Newsletters Forms | 23 | 2,232 | 1,015 | 1k+ | Text Domain Mismatch | ||
| #168 | StreamWeasels Twitch Integration | 23 | 555 | 1,465 | 1k+ | Non-prefixed global variable | ||
| #169 | Super Video Player – play your videos with playlists and subtitles | 23 | 1,135 | 1,634 | 2k+ | Non-prefixed global variable | ||
| #170 | teachPress | 23 | 744 | 1,587 | 2k+ | SQL query is not prepared | ||
| #171 | ThemeHunk Customizer | 23 | 3,968 | 582 | 6k+ | Text Domain Mismatch | ||
| #172 | Product Options and Price Calculation Formulas for WooCommerce – Uni CPO | 23 | 2,514 | 1,929 | 1k+ | Output is not escaped | ||
| #173 | Unlimited Elements For Elementor | 23 | 711 | 2,101 | 300k+ | Non-prefixed global variable | ||
| #174 | User Menus – Nav Menu Visibility | 23 | 531 | 1,298 | 80k+ | Non-prefixed global variable | ||
| #175 | Checkout with Zelle on Woocommerce | 23 | 637 | 1,404 | 3k+ | Non-prefixed global variable | ||
| #176 | Web Directory Free | 23 | 2,629 | 1,201 | 400 | Text Domain Mismatch | ||
| #177 | WHMCS Bridge | 23 | 247 | 472 | 4k+ | Nonce verification recommended | ||
| #178 | Widgets on Pages | 23 | 809 | 1,306 | 20k+ | Non-prefixed global variable | ||
| #179 | Widgets for WooCommerce Products on Elementor | 23 | 1,659 | 1,454 | 3k+ | Non-prefixed global variable | ||
| #180 | StoreCustomizer – A plugin to Customize all WooCommerce Pages | 23 | 587 | 1,426 | 20k+ | Non-prefixed global variable | ||
| #181 | ManageWP Worker | 23 | 506 | 565 | 1m+ | Non-prefixed class | ||
| #182 | Worth The Read | 23 | 873 | 138 | 3k+ | Text Domain Mismatch | ||
| #183 | WP Easy Pay – Payment and Donation Form Builder for Square | 23 | 908 | 1,820 | 1k+ | Non-prefixed global variable | ||
| #184 | WP Editor | 23 | 502 | 335 | 20k+ | Unsafe printing function | ||
| #185 | WP Free SSL | 23 | 735 | 1,345 | 1k+ | Non-prefixed global variable | ||
| #186 | FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce | 23 | 798 | 2,193 | 20k+ | SQL query is not prepared | ||
| #187 | WP STAGING – WordPress Backups, Restore, Migration & Clone | 23 | 1,525 | 1,610 | 100k+ | Non-prefixed global variable | ||
| #188 | Divi Gravity Forms (WP Tools) | 23 | 579 | 1,311 | 2k+ | Non-prefixed global variable | ||
| #189 | Masonry Gallery & Posts For Divi (WP Tools) | 23 | 754 | 1,450 | 700 | Non-prefixed global variable | ||
| #190 | WSW – Shopify WooCommerce / WordPress Integration and Migration | 23 | 1,449 | 1,612 | 500 | Non-prefixed global variable | ||
| #191 | 1 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone | 24 | 140 | 193 | 400 | Direct Query | ||
| #192 | A2 Optimized WP – Turbocharge and secure your WordPress site | 24 | 271 | 231 | 60k+ | Missing Arg Domain | ||
| #193 | Ivory Search – WordPress Search Plugin | 24 | 1,173 | 1,688 | 100k+ | Non-prefixed global variable | ||
| #194 | Advanced Menu Manager Pro – Built for Content-heavy WordPress Sites to Add, Filter, Lock, and Edit Menus Easily | 24 | 545 | 1,402 | 400 | Non-prefixed global variable | ||
| #195 | Advanced Contact form 7 DB | 24 | 765 | 1,961 | 70k+ | Non-prefixed global variable | ||
| #196 | Advanced Form Integration — Connect Forms to 200+ Apps | 24 | 5,740 | 4,560 | 10k+ | wp function not compatible with requires wp | ||
| #197 | Advanced iFrame | 24 | 887 | 1,120 | 40k+ | Non-prefixed global variable | ||
| #198 | All Embed – Bring Any Content into Your Elementor Designs | 24 | 729 | 1,310 | 500 | Non-prefixed global variable | ||
| #199 | All-In-One Security (AIOS) – Security and Firewall | 24 | 552 | 1,228 | 1m+ | Non-prefixed global variable | ||
| #200 | Multi Page Auto Advance for Gravity Forms | 24 | 653 | 1,335 | 2k+ | Non-prefixed global variable |
