PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#551Secure Copy Content Protection and Content Locking2595879920k+Output is not escaped
#552SEO Repair Kit – Meta Manager, Schema Manager, SEO Content Monitoring, GSC Integration, Keyword & Rank Tracking251969022k+Direct Query
#553Simple Link Directory – AI Powered251334202k+Non-prefixed global variable
#554Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2595873860k+Text Domain Mismatch
#555Sitemap by click5252861326k+Unsafe printing function
#556Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator256481,0211k+Output is not escaped
#557Tamara Checkout256012282k+Exception output is not escaped
#558Taskbuilder – Project Management & Task Management Tool With Kanban Board251274,332800Non-prefixed global variable
#559Tax Exemption for WooCommerce255521,402700Non-prefixed global variable
#560Toocheke Companion254291,2271k+Non-prefixed global variable
#561TranslatePress – Translate Multilingual sites with AI Translation254991,639400k+Non-prefixed hook name
#562Spectra Legacy – Gutenberg Blocks252533,2261m+Non-prefixed global variable
#563Social Media Share Buttons & Social Sharing Icons252,4331,383100k+Unsafe printing function
#564Social Share Icons & Social Share Buttons252,3651,35710k+Output is not escaped
#565VikAppointments Services Booking Calendar259,7535,207500Output is not escaped
#566VikBooking Hotel Booking Engine & PMS2513,2518,3168k+Output is not escaped
#567VikRentCar Car Rental Management System255,5375,0484k+Non-prefixed global variable
#568VikRestaurants Table Reservations and Take-Away2511,6444,932600Output is not escaped
#569weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output is not escaped
#570Flat Rate Shipping Method for WooCommerce251,2421,7785k+Non-prefixed global variable
#571PDF Builder for WooCommerce. Create invoices,packing slips and more253725032k+Non-prefixed global variable
#572Pay with Vipps and MobilePay for WooCommerce258465145k+Output is not escaped
#573Wordfence Login Security2524841860k+Output is not escaped
#574WordPress Importer252381102m+Output is not escaped
#575Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input is not sanitized
#576Comments Extra Fields For Post,Pages and CPT25577418500Text Domain Mismatch
#577WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards251,4311,27010k+Output is not escaped
#578WP Review Slider251,1862,2796k+Non-prefixed global variable
#579WP Go Maps – Google Map, OpenStreetMap, Leaflet Map254,9961,008300k+Unsafe printing function
#580WP Encryption – No.1 HTTPS plugin & One Click Free SSL Cert, HTTPS Redirect, SSL Security258751,76450k+Non-prefixed global variable
#581WP Photo Album Plus2541,80710k+Direct Query
#582WP-Polls2561863940k+Unsafe printing function
#583Perfect Images: Regenerate Thumbnails, Image Sizes, WebP & AVIF2515811860k+Non-prefixed global variable
#584SlimStat Analytics251,17787070k+Exception output is not escaped
#585Smush – Image Optimization, Compression, Lazy Load, WebP & CDN252445681m+Non-prefixed hook name
#586Wp Social Login and Register Social Counter258073890k+Non-prefixed global variable
#587WP Statistics – Simple, privacy-friendly Google Analytics alternative256102,465600k+Non-prefixed global variable
#588WP Super Cache258009891m+Output is not escaped
#589WP Time Slots Booking Form254391,1371k+Non-prefixed global variable
#590WPCargo Track & Trace2523955710k+Non-prefixed global variable
#591Team Members Showcase255911,4944k+Non-prefixed global variable
#592WPvivid Backup for MainWP258181,79410k+Missing nonce verification
#593WPvivid — Backup, Migration & Staging259001,461900k+Non-prefixed namespace
#594Backup, Restore and Migrate your sites with XCloner2523886410k+Input is not sanitized
#595YeeMail — Email Template Builder & Customizer25606222600wp function not compatible with requires wp
#596ActiveCampaign for WooCommerce265411905k+Exception output is not escaped
#597AfterShip Tracking – All-In-One WooCommerce Order Tracking (Free plan available)262862917k+Text Domain Mismatch
#598Attesa Extra263161511k+Output is not escaped
#599Booking Manager – Sync WP Booking Calendar – Import Events, Export Bookings to ICS Calendar265262635k+Output is not escaped
#600Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More269727010k+error log error log