PluginScore

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin Directory Write

The plugin writes files in or near plugin-controlled directories.

medium weight

Why It Shows Up

Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.

Why It Matters

Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.

How to Fix

  • Store generated data in uploads, cache, or another WordPress-approved writable location.
  • Validate paths and file names against strict allowlists.
  • Avoid modifying plugin source files at runtime.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301WP Meta and Date Remover246651,31490k+Non-prefixed global variable
#302WP Notification Bell247361,591700Non-prefixed global variable
#303WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars248611,57310k+Non-prefixed global variable
#304WP School Calendar241,3611,721400Non-prefixed global variable
#305WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0305,70420k+Non-prefixed global variable
#306Export All Posts, Products, Orders & Users | WP Ultimate Exporter | WordPress CSV Export243631,1306k+Direct Query
#307Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5812,109100k+Output is not escaped
#308WPGSI: Spreadsheet Integration247841,5872k+Non-prefixed global variable
#309WPIDE – File Manager & Code Editor246121,40240k+Non-prefixed global variable
#310Photo Engine (Media Organizer & Lightroom)242536452k+Direct Query
#311WUPO Group Attributes for WooCommerce245831,378400Non-prefixed global variable
#312XT Ajax Add To Cart for WooCommerce249851,6651k+Non-prefixed global variable
#313XT Variation Swatches for WooCommerce241,0331,809500Non-prefixed global variable
#314Dynamic Pricing With Discount Rules for WooCommerce251652055k+Non-prefixed global variable
#315AdRotate Banner Manager251,35784620k+Unsafe printing function
#316Advanced Floating Content Lite256431,3487k+Non-prefixed global variable
#317Advanced WordPress Reset – Debug, Recover & Reset WP2547546420k+Output is not escaped
#318AF Companion – Starter Sites, Speed Booster & Growth Suite for Professional Publishing256651,48610k+Non-prefixed global variable
#319All 404 Redirect to Homepage25140301200k+date date
#320Lean Player – Video and Audio Player with Playlist for WordPress, Elementor and Gutenberg252,1991,7572k+Text Domain Mismatch
#321Bookit — Booking & Appointment Calendar255651,4584k+Non-prefixed global variable
#322Breeze Cache25219801400k+Non-prefixed global variable
#323Coinbase Business Gateway for WooCommerce255691,317800Non-prefixed global variable
#324Conditional Payment Methods for WooCommerce255481,3981k+Non-prefixed global variable
#325Cryptocurrency Payment Gateway251,963589400Text Domain Mismatch
#326CSS & JavaScript Toolbox2515561710k+Non-prefixed class
#327Smash Balloon Social Post Feed – Simple Social Feeds for WordPress25538998200k+Output is not escaped
#328Show Eventbrite Events – Event Feed for Eventbrite255951,525900Non-prefixed global variable
#329F4 Post Tree255361,332500Non-prefixed global variable
#330胖鼠采集(Fat Rat Collect)25630190900Missing Arg Domain
#331Lightbox & Modal Popup WordPress Plugin – FooBox255661,365100k+Non-prefixed global variable
#332Photo Gallery by FooGallery : Responsive Image Gallery, Masonry Gallery & Carousel258761,798100k+Non-prefixed global variable
#333Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database257161,50910k+Non-prefixed global variable
#334Photo Gallery by Ays – Responsive Image Gallery254668201k+Output is not escaped
#335Simple Giveaways – Grow your business, email lists and traffic with contests259562,384400Non-prefixed global variable
#336MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy)251574352m+Nonce verification recommended
#337Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews256451,5851k+Non-prefixed global variable
#338Cool Author Box – For Widget and Post Content258531,379600Non-prefixed global variable
#339Independent Analytics – WordPress Analytics Plugin251,1502,309100k+Non-prefixed global variable
#340Smash Balloon Social Photo Feed – Easy Social Feeds Plugin254401,3271m+Interpolated SQL is not prepared
#341JoomSport – for Sports: Team & League, Football, Hockey & more255231,7471k+Direct Query
#342kk Star Ratings – Rate Post & Collect User Feedbacks257721,38870k+Non-prefixed global variable
#343Local Pickup for WooCommerce255471,3891k+Non-prefixed global variable
#344Logo Showcase – Responsive Logo Carousel, Logo Slider & Logo Grid256561,5065k+Non-prefixed global variable
#345Bulk Page Generator – LPagery256651,9223k+Non-prefixed global variable
#346M Chart255571,4753k+Non-prefixed global variable
#347Minimum and Maximum Quantity for WooCommerce255561,4363k+Non-prefixed global variable
#348MyFatoorah – WooCommerce25191893k+Output is not escaped
#349NOWPayments for WooCommerce – Crypto Payment Gateway255341,3064k+Non-prefixed global variable
#350Open User Map – Interactive Leaflet Maps258991,00010k+Non-prefixed global variable