PluginScore

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin Directory Write

The plugin writes files in or near plugin-controlled directories.

medium weight

Why It Shows Up

Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.

Why It Matters

Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.

How to Fix

  • Store generated data in uploads, cache, or another WordPress-approved writable location.
  • Validate paths and file names against strict allowlists.
  • Avoid modifying plugin source files at runtime.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201Auto-Install Free SSL – Generate & Install Free SSL Certificates249851,4968k+Non-prefixed global variable
#202Popup Box – Create Countdown, Coupon, Video, Contact Form Popups244861,25550k+Non-prefixed global variable
#203Backuply – Backup, Restore, Migrate and Clone24711556600k+Non-prefixed global variable
#204Banner Management For WooCommerce248651,8622k+Non-prefixed global variable
#205BlockMeister – Block Pattern Builder245801,4051k+Non-prefixed global variable
#206BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites241,3281,73910k+Non-prefixed global variable
#207Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News246991,69330k+Non-prefixed global variable
#208Buttonizer – Floating Menus, Sticky Buttons, & Popup Builder245781,32670k+Non-prefixed global variable
#209Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2436463740k+Non-prefixed global variable
#210Categorify – WordPress Media Library Category & File Manager245731,3851k+Non-prefixed global variable
#211Message Filter for Contact Form 7241,0441,5941k+Non-prefixed global variable
#212WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms245341,5593k+Non-prefixed global variable
#213Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#214Complianz – GDPR/CCPA Cookie Consent243983701m+Missing Arg Domain
#215CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7241,0531,397300k+Non-prefixed global variable
#216Contact Widgets For Elementor all the contact links you need in one place249081,188400Non-prefixed global variable
#217Custom CSS247036571k+Output is not escaped
#218Custom Twitter Feeds – A Tweets Widget or X Feed Widget24436932100k+Output is not escaped
#219Defender Security – Malware Scanner, Login Security & Firewall2455059380k+Non-prefixed namespace
#220WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments245871,43020k+Non-prefixed global variable
#221WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)248452,6434k+Non-prefixed global variable
#222Deployer for Git245411,348500Non-prefixed global variable
#223Membership & User Roles for WooCommerce (Automatic Role Changer)245991,313300Non-prefixed global variable
#224Drop Shadow Boxes246421,2904k+Non-prefixed global variable
#225Easy Form Builder by WhiteStudio – Drag & Drop Form Builder242124331k+Nonce verification recommended
#226Easy Optimizer – PageSpeed, Cache & Core Web Vitals (Unused CSS, Delay JS, Lazy Load)24194514500Direct Query
#227E-cab Taxi Booking Manager for Woocommerce243651,6382k+Non-prefixed global variable
#228Etsy Integration For WooCommerce241,2464,643900Non-prefixed global variable
#229F12 Profiler24282451500Direct Query
#230Fattura2424312333500Output is not escaped
#231Filr – Secure document library245901,315800Non-prefixed global variable
#232FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2420379780k+Direct Query
#233Food Store – Online Food Delivery & Pickup248621,9411k+Non-prefixed global variable
#234Formidable PRO2PDF242184771k+Non-prefixed global variable
#235WP Fast Total Search – The Power of Indexed Search242123001k+Non-prefixed global variable
#236Fuse Social Floating Sidebar241,8381,57810k+Non-prefixed global variable
#237Genealogical Tree – Family Tree & Ancestry for WordPress245601,641600Non-prefixed global variable
#238ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin)24158435300k+Nonce verification recommended
#239GS Behance Portfolio – Display Projects, Gallery & Slider248551,617400Non-prefixed global variable
#240Hide Shipping Method For WooCommerce249461,44710k+Non-prefixed global variable
#241Keap Official Opt-in Forms248291,0461k+Non-prefixed global variable
#242InstaWP Connect – 1-click WP Staging & Migration2425481540k+Non-prefixed global variable
#243Joli Table Of Contents246531,7557k+Non-prefixed global variable
#244Kenta Blocks – Responsive Blocks and block templates library245641,4052k+Non-prefixed global variable
#245Local Delivery Drivers for WooCommerce241,8321,483900Non-prefixed global variable
#246Generate Images (AI) – Magic Post Thumbnail241,9401,7615k+Non-prefixed global variable
#247MailerPress – Email Marketing, Newsletter, Email Automation & WooCommerce Emails248053,9341k+Direct Query
#248Mang Board WP241,2134,7208k+Non-prefixed global variable
#249Admin Tweaks241,507206900Text Domain Mismatch
#250Mass Pages/Posts Creator247361,3641k+Non-prefixed global variable