PluginScore

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin Directory Write

The plugin writes files in or near plugin-controlled directories.

medium weight

Why It Shows Up

Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.

Why It Matters

Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.

How to Fix

  • Store generated data in uploads, cache, or another WordPress-approved writable location.
  • Validate paths and file names against strict allowlists.
  • Avoid modifying plugin source files at runtime.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351phpinfo() WP – Site Health, PHP Compatibility & Server Audit259097223k+Non-prefixed global variable
#352Plover Kit – Blocks, Patterns, Responsive Layout and Gutenberg Editor Enhancements256881,3833k+Non-prefixed global variable
#353Poll Maker by AYS – Versus Polls, Anonymous Polls, Image Polls254891,4147k+Non-prefixed global variable
#354Post Carousel Divi256861,3012k+Non-prefixed global variable
#355Post Snippets – Custom WordPress Code Snippets Customizer258031,65120k+Non-prefixed global variable
#356Premmerce257121,411500Non-prefixed global variable
#357Premmerce Redirect Manager257561,407500Non-prefixed global variable
#358Premmerce Product Search for WooCommerce255961,350900Non-prefixed global variable
#359Premmerce Wholesale Pricing for WooCommerce256351,377400Non-prefixed global variable
#360Quiz Maker by AYS255053,04420k+Non-prefixed global variable
#361Quttera ThreatSign – Web Malware Scanner for WordPress2533547110k+Non-prefixed global variable
#362Qyrr – simply and modern QR-Code creation255311,3132k+Non-prefixed global variable
#363Rate limiting for Contact Form 7255471,306600Non-prefixed global variable
#364Really Simple Featured Video – Featured Video Support for Posts, Pages & WooCommerce Products258111,4945k+Non-prefixed global variable
#365Restrict – membership, site, content and user access restrictions for WordPress255391,4122k+Non-prefixed global variable
#366RSS Chimp – Add Featured Images to WP RSS Feeds (Mailchimp, Google News, Feedly)256221,310400Non-prefixed global variable
#367Spexo Addons for Elementor – Elementor Widgets, Mega Menu, Popup Builder, Template Kits and Starter Templates for Elementor2599825k+Non-prefixed global variable
#368BerqWP – All-In-One Optimization for Core Web Vitals, Cache, CDN, Images, CSS & JavaScript252035474k+Non-prefixed global variable
#369Secure Copy Content Protection and Content Locking2564680320k+Output is not escaped
#370Seo Optimized Images255261,31610k+Non-prefixed global variable
#371SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking251969022k+Direct Query
#372Smart phone field for Gravity Forms255401,3166k+Non-prefixed global variable
#373Spice Blocks255361,3001k+Non-prefixed global variable
#374STAGGS – Product Configurator Toolkit256262,180400Non-prefixed global variable
#375TablePress – Tables in WordPress made easy258472,174600k+Non-prefixed global variable
#376Tamara Checkout256012282k+Exception output is not escaped
#377TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder257051,58710k+Non-prefixed global variable
#378Travelly – Tour & Travel Booking Manager for WooCommerce251901,2931k+Non-prefixed global variable
#379TrueBooker – Appointment Booking and Scheduler System255292,747600Non-prefixed global variable
#380Ultimate Blocks – 25+ Blocks for Block Editor256551,47250k+Non-prefixed global variable
#381Vayu Blocks – Website Builder for the Gutenberg Block Editor251742331k+Text Domain Mismatch
#382VikBooking Hotel Booking Engine & PMS2513,2518,3168k+Output is not escaped
#383VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#384VikRentItems Flexible Rental Management System254,7674,640600Non-prefixed global variable
#3853D viewer by Visody258321,3221k+Non-prefixed global variable
#386WC Disable Zoom / Lightbox features255291,297700Non-prefixed global variable
#387Product Customer List for WooCommerce256101,3349k+Non-prefixed global variable
#388Secure Gateway for Authorize.net and WooCommerce by Pledged Plugins259071,41810k+Non-prefixed global variable
#389Digital Goods (Checkout Field Editor) for WooCommerce Checkout255391,4793k+Non-prefixed global variable
#390Dynamic Pricing and Discount Rules for WooCommerce255311,569600Non-prefixed global variable
#391Enhanced Ecommerce Google Analytics for WooCommerce259091,5062k+Non-prefixed global variable
#392Flat Rate Shipping Method for WooCommerce251,2421,7785k+Non-prefixed global variable
#393XT Floating Cart for WooCommerce251,2321,9854k+Non-prefixed global variable
#394Product Attachment for WooCommerce251,2411,7817k+Non-prefixed global variable
#395Pay with Vipps and MobilePay for WooCommerce258515165k+Output is not escaped
#396Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2514335760k+Input is not sanitized
#397WP Coupons and Deals – WordPress Coupon Plugin259141,4601k+Non-prefixed global variable
#398WP Review Slider251,4442,4706k+Non-prefixed global variable
#399WP Go Maps – Google Map, OpenStreetMap, Leaflet Map254,9961,020300k+Unsafe printing function
#400WP Google Review Slider251,3682,59630k+Non-prefixed global variable