PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output is not escaped
#2Intercom060716k+Non-prefixed function
#3Plugin Check (PCP)012813210k+Exception output is not escaped
#4Themify Builder95,1952,0965k+Text Domain Mismatch
#5JetBackup – Backup, Restore & Migrate101,559145100k+Exception output is not escaped
#6AnyComment174454495k+Output is not escaped
#7wpForo Forum174,0332,92220k+Unsafe printing function
#8WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#9Podlove Podcast Publisher182,3261,4293k+Output is not escaped
#10Property Hive181,9576,0273k+Missing nonce verification
#11Shopping Cart & eCommerce Store185,45917,2984k+Non-prefixed global variable
#12WP Import Export Lite1873897940k+Non-prefixed global variable
#13Download Monitor194251,36480k+Non-prefixed hook name
#14Event Organiser191,10654420k+Text Domain Mismatch
#15Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#16Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception output is not escaped
#17Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output is not escaped
#18Razorpay Payment Button Plugin19486982k+Exception output is not escaped
#19Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non-prefixed global variable
#20Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#21Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#22SendPress Newsletters192,2931,4222k+Output is not escaped
#23WP Email Template193423502k+Exception output is not escaped
#24BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non-prefixed global variable
#25Brizy – Page Builder2058972070k+Output is not escaped
#26GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output is not escaped
#27Link Library201,9411,39710k+Unsafe printing function
#28MBE eShip205277401k+Non-prefixed global variable
#29MAS Videos205191,6931k+Non-prefixed global variable
#30Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non-prefixed global variable
#31Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#32Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception output is not escaped
#33Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output is not escaped
#34SpeakOut! Email Petitions208509943k+Missing nonce verification
#35Trace My IP – Visitor IP Tracker, Stats Analytics & Page Views Counter with Email Alerts208663381k+wp function not compatible with requires wp
#36Razorpay for WooCommerce20974855100k+Non-prefixed function
#37WPJAM Basic203283564k+Output is not escaped
#38Backup Migration219811,09380k+Non-prefixed global variable
#39rtMedia for WordPress, BuddyPress and bbPress213636338k+Non-prefixed constant
#40CallTrackingMetrics219232863k+Unsafe printing function
#41Captcha Them All213003236k+Output is not escaped
#42CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+Text Domain Mismatch
#43Smart Grid-Layout Design for Contact Form 7211,12673410k+Output is not escaped
#44Comet Cache2185724520k+Output is not escaped
#45Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#46Envo Extra2187860020k+Text Domain Mismatch
#47EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non-prefixed global variable
#48Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output is not escaped
#49FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#50Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non-prefixed global variable