PluginScore

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin Directory Write

The plugin writes files in or near plugin-controlled directories.

medium weight

Why It Shows Up

Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.

Why It Matters

Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.

How to Fix

  • Store generated data in uploads, cache, or another WordPress-approved writable location.
  • Validate paths and file names against strict allowlists.
  • Avoid modifying plugin source files at runtime.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#251MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings241676285k+Non-prefixed global variable
#252Receive customer payments on Woocommerce245491,4191k+Non-prefixed global variable
#253MT Addons for Elementor243,0731,4422k+Text Domain Mismatch
#254Music Player for Elementor – Audio Player & Podcast Player246081,30210k+Non-prefixed global variable
#255My Agile Privacy® – CMP, Cookie Consent & Privacy Tools241,3297057k+Text Domain Mismatch
#256New User Approve246521,41520k+Non-prefixed global variable
#257Nexter Extension – Security, Performance, Code Snippets & Site Toolkit2419377110k+Nonce verification recommended
#258Overlay Image Divi Module245761,3012k+Non-prefixed global variable
#259Patchstack – WordPress & Plugins Security2410447850k+Missing nonce verification
#260PDF Generator for WordPress Elementor245132711k+Exception output is not escaped
#261Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider245991,53210k+Non-prefixed global variable
#262Post Status Notifier Lite24984451700Missing direct file access protection
#263Premmerce Brands for WooCommerce247001,3442k+Non-prefixed global variable
#264Premmerce Product Filter for WooCommerce248171,4862k+Non-prefixed global variable
#265Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More242,1544,8331k+Non-prefixed global variable
#266ProfileGrid – User Profiles, Groups and Communities244832,4635k+Non-prefixed global variable
#267Real3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder249531,39210k+Non-prefixed global variable
#268Registrations for the Events Calendar – Event Registration Plugin244049447k+Non-prefixed global variable
#269Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More24146760100k+Non-prefixed global variable
#270SecuPress with Simple SSL – Simple and Performant Security241,6951,60040k+Non-prefixed global variable
#271Service Box Slider246181,410500Non-prefixed global variable
#272Share This Image247441,5821k+Non-prefixed global variable
#273Shortcodes Ultimate – Content Elements246561,552400k+Non-prefixed global variable
#274SimpLy Gallery245341,52440k+Non-prefixed global variable
#275Sitepact's Contact Form 7 Extension For Klaviyo245411,412500Non-prefixed global variable
#276SKT Templates – 100% Free Templates for Elementor & Gutenberg245531,35320k+Non-prefixed global variable
#277Smart Variations Images & Swatches for WooCommerce249901,4861k+Non-prefixed global variable
#278Sokol: Smart WooCommerce Search245991,5516k+Non-prefixed global variable
#279Social Media Auto Publish241,4687136k+Unsafe printing function
#280SpiceBox248281,81620k+Non-prefixed global variable
#281Spider Elements – Premium Elementor Widgets & Addons Library245421,555400Non-prefixed global variable
#282Squad Modules Lite – Free Divi 5 & Divi 4 Modules for Divi Builder246051,4721k+Non-prefixed global variable
#283StreamWeasels Online Status Bar245551,349500Non-prefixed global variable
#284StreamWeasels YouTube Integration245441,3841k+Non-prefixed global variable
#285Surbma | GDPR Proof Cookie Consent & Notice Bar248251,309500Non-prefixed global variable
#286Tiered Pricing Table for WooCommerce246372,06810k+Non-prefixed global variable
#287Timber248512820k+Non-prefixed hook name
#288UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds24441235200k+Text Domain Mismatch
#289Widget Detector for Elementor241,0571,5671k+Non-prefixed global variable
#290Product Size Charts Plugin for WooCommerce241,0421,4229k+Non-prefixed global variable
#291Extra Fees for WooCommerce241,1131,5697k+Non-prefixed global variable
#292Coupon Affiliates – Affiliate Plugin for WooCommerce249263,1415k+Non-prefixed global variable
#293Premmerce WooCommerce Customers Manager245641,327700Non-prefixed global variable
#294Premmerce Permalink Manager for WooCommerce246331,33550k+Non-prefixed global variable
#295Country Based Payments for WooCommerce245311,2953k+Non-prefixed global variable
#296WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce247611,612900Non-prefixed global variable
#297WP Contact Slider – Contact Form Slider Widget241,3552,5899k+Non-prefixed global variable
#298Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce242,6772,12910k+Text Domain Mismatch
#299WP Frontend Delete Account245371,3784k+Non-prefixed global variable
#300WP Helper Premium244,0001,5901k+Text Domain Mismatch