PluginScore

PluginCheck.CodeAnalysis.WriteFile.PluginDirectoryWrite

Plugin Directory Write

The plugin writes files in or near plugin-controlled directories.

medium weight

Why It Shows Up

Plugin Check found file creation or modification behavior that may affect the plugin directory or executable files.

Why It Matters

Runtime writes to plugin code directories can break updates, create permission issues, or introduce supply-chain risk.

How to Fix

  • Store generated data in uploads, cache, or another WordPress-approved writable location.
  • Validate paths and file names against strict allowlists.
  • Avoid modifying plugin source files at runtime.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#401WP Encryption – Lifetime Free SSL Cert & HTTPS, Force SSL / HTTPS Redirect, SSL Security257291,55650k+Non-prefixed global variable
#402WP Super Cache258009891m+Output is not escaped
#403WP Time Slots Booking Form254391,1371k+Non-prefixed global variable
#404WP TripAdvisor Review Slider251,0632,5828k+Non-prefixed global variable
#405Team Members Showcase255911,4984k+Non-prefixed global variable
#406WPvivid Backup for MainWP258521,79810k+Missing nonce verification
#407WPvivid — Backup, Migration & Staging259031,461900k+Non-prefixed namespace
#408XT Quick View for WooCommerce251,0621,798400Non-prefixed global variable
#409Bangladeshi Payments Mobile – QR Code & Transaction Reports265351,2801k+Non-prefixed global variable
#410Charitable – Donation & Fundraising Platform (Donation Forms, Recurring Donations & Fundraising Campaigns)269826910k+error log error log
#411Conditional Logic for Woo Product Add-ons265751,352400Non-prefixed global variable
#412Easy Age Verify265701,3171k+Non-prefixed global variable
#413Easy Post Views Count265341,1802k+Non-prefixed global variable
#414ezCache2612728410k+Direct Query
#415FV Antispam26332239900Output is not escaped
#416Translate WordPress – Google Language Translator26200317100k+Non-prefixed global variable
#417GPTranslate – Multilingual AI Translation for WordPress: Translate Websites with AI Agents26286216500badly named files
#418Hide Admin Bar Based on User Roles – Disable the WordPress Toolbar by Role, Device or Page265491,34520k+Non-prefixed global variable
#419MaxGalleria262785602k+Non-prefixed global variable
#420Packlink PRO for WooCommerce2612916220k+Non-prefixed global variable
#421Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content265311,359300k+Non-prefixed global variable
#422LoginWP (Formerly Peter's Login Redirect)2640127890k+Output is not escaped
#423Post List Designer – Category Post, Recent Post, Post List265421,3201k+Non-prefixed global variable
#424Premmerce User Roles265971,357600Non-prefixed global variable
#425Role Based Pricing for Woo by Meow Crew265481,3542k+Non-prefixed global variable
#426Carousel, Recent Post Slider and Banner Slider265281,4098k+Non-prefixed global variable
#427URL Image Importer – Import External Images to the Media Library from URL, CSV & XML26144239800Missing nonce verification
#428Visitors Online by BestWebSoft265122691k+Text Domain Mismatch
#429Conditional Fees for WooCommerce Lite265661,303500Non-prefixed global variable
#430Premmerce SEO for WooCommerce265501,2851k+Non-prefixed global variable
#431Set Price Note (Units, Offers, Editions) for WooCommerce265951,307700Non-prefixed global variable
#432Shipping Method Display Style for WooCommerce265291,3082k+Non-prefixed global variable
#433Divi Collage275161,183700Non-prefixed global variable
#434Contact Form DB Divi275291,3063k+Non-prefixed global variable
#435Translate WordPress with ConveyThis – AI Multilingual Plugin271592981k+Non-prefixed global variable
#436Extra Product Options for WooCommerce275481,342600Non-prefixed global variable
#437Foxtool All-in-One: Contact chat button, Custom login, Media optimize images271,6293607k+Unsafe printing function
#438HM Multiple Roles275371,2871k+Non-prefixed global variable
#439ImageRecycle pdf & image compression273292041k+Text Domain Mismatch
#440Liza Widget For Spotify and Elementor276091,2871k+Non-prefixed global variable
#441LWS Optimize – All-in-One Speed Booster & Cache Tools273553410k+Non-prefixed global variable
#442Restrict for Elementor275301,224900Non-prefixed global variable
#443Robokassa payment gateway for Woocommerce27952113k+Non-prefixed global variable
#444SEO Booster272641,0821k+Non-prefixed global variable
#445Speed Booster Pack ⚡ PageSpeed Optimization Suite271081879k+Missing Translators Comment
#446Tax Exemption for WooCommerce275331,404700Non-prefixed global variable
#447Terms & Conditions Per Product275331,336800Non-prefixed global variable
#448Tutor LMS – Migration Tool271393411k+Direct Query
#449wp-mpdf271233821k+Non-prefixed global variable
#450Worthy – VG WORT Integration für WordPress271,3437731k+Output is not escaped