PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#451UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds24441235200k+Text Domain Mismatch
#452Video Conferencing with Zoom241,10544010k+Unsafe printing function
#453VikRentItems Flexible Rental Management System244,7554,639600Non-prefixed global variable
#454Visitor Traffic Real Time Statistics2447292730k+Non-prefixed global variable
#455PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#456WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247334995k+Output is not escaped
#457Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates2452213510k+Output is not escaped
#458Coupon Affiliates – Affiliate Plugin for WooCommerce249473,1335k+Non-prefixed global variable
#459Payment Plugins Braintree For WooCommerce247317552k+Output is not escaped
#460NextMove Lite – Thank You Page for WooCommerce2491685710k+Non-prefixed global variable
#461wallee24331220400Exception output is not escaped
#462EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#463European VAT Compliance Assistant for WooCommerce245153173k+Output is not escaped
#464Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers244801,2727k+Non-prefixed function
#465Yoast SEO – Advanced SEO with real-time guidance and built-in AI2415938610m+Non-prefixed global variable
#466WP Admin Audit241,0517811k+error log print r
#467Auto Affiliate Links243764073k+Output is not escaped
#468WP Discourse241031141k+Nonce verification recommended
#469WP Fastest Cache – WordPress Cache Plugin245417531m+Unsafe printing function
#470Iptanus File Upload245091,32510k+Non-prefixed function
#471WP Helper Premium243,9091,5171k+Text Domain Mismatch
#472WP Hotel Booking249011,5327k+Non-prefixed global variable
#473WP Job Portal – AI-Powered Recruitment System for Company or Job Board website24781,1588k+Missing Version
#474WP Layouts243491463k+Text Domain Mismatch
#475WP-Members Membership Plugin2466938250k+Output is not escaped
#476پارسی دیت – Parsi Date24106291100k+Non-prefixed hook name
#477WP Recipe Maker2449494250k+Non-prefixed global variable
#478WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77739440k+Text Domain Mismatch
#479WP-Stateless – Google Cloud Storage241,0364824k+Non Singular String Literal Domain
#480WP Travel – Ultimate Travel Booking System, Tour Management Engine242271,9544k+Non-prefixed hook name
#481WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0125,68920k+Non-prefixed global variable
#482Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5812,109100k+Output is not escaped
#483WP User Manager – User Profile Builder & Membership2478753910k+Exception output is not escaped
#484WP Voting Contest Lite24259258400Text Domain Mismatch
#485WPAdverts – Classifieds Plugin241,3084964k+Output is not escaped
#486WPeMatico RSS Feed Fetcher241,37858710k+Output is not escaped
#487WPIDE – File Manager & Code Editor246121,39940k+Non-prefixed global variable
#488WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)244821892k+Output is not escaped
#489WpStream – Live Streaming, Video on Demand, Pay Per View241,7257423k+Text Domain Mismatch
#490Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non-prefixed global variable
#4913DPrint Lite251751,029700Non-prefixed global variable
#492AdRotate Banner Manager251,36384620k+Unsafe printing function
#493Advanced WordPress Reset – Debug, Recover & Reset WP2547546420k+Output is not escaped
#494AliExpress Dropshipping Plugin for WooCommerce Stores255557344k+Text Domain Mismatch
#495All 404 Redirect to Homepage25140301200k+date date
#496AIO Forms – Craft Complex Forms Easily25189418700Mixed line endings
#497Appointment Hour Booking – Booking Calendar252621,25310k+Non-prefixed global variable
#498bbp style pack251,4191,7916k+Output is not escaped
#499Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid2524385450k+Non-prefixed global variable
#500Booking Calendar Contact Form25371884500Input is not validated