PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Campaign Monitor for WordPress213864612k+Non Prefixed Variable Found
#52JCH Optimize219531334k+Output Not Escaped
#53MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non Prefixed Variable Found
#54Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#55MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#56Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#57Packeta218023338k+Exception Not Escaped
#58Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#59Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#60User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#61Razorpay Quick Payments21399633k+Exception Not Escaped
#62Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#63Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#64Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#65Seamless Donations is Sunset216005142k+Text Domain Mismatch
#66Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#67Accept Stripe Payments2137388220k+Missing
#68Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#69Buckaroo Woocommerce Payments Plugin215633262k+Exception Not Escaped
#70WCFM – Frontend Manager for WooCommerce214,7215,06720k+Non Prefixed Variable Found
#71WebP Express21160427300k+Non Prefixed Variable Found
#72Wise Chat214705065k+Output Not Escaped
#73Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#74Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#75PPOM – Product Addons & Custom Fields for WooCommerce213361,32520k+Non Prefixed Variable Found
#76Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#77WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#78WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#79wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8141,46170k+Output Not Escaped
#80Premium Packages – Sell Digital Products Securely212,7652,4443k+Output Not Escaped
#81Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#82Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe Printing Function
#83All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#84Shortcodes and extra features for Phlox theme2241342690k+Output Not Escaped
#85Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#86Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#87Better WordPress Minify224124848k+Non Singular String Literal Domain
#88Message Filter for Contact Form 7221,0721,6111k+Non Prefixed Variable Found
#89Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#90Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#91RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#92WP Customer Area223,30894110k+Text Domain Mismatch
#93Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#94Download Manager222,2901,301100k+Output Not Escaped
#95Dynamic QR Code – generator222382086k+missing direct file access protection
#96E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#97Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#98File Manager Pro – Filester22565391100k+Missing Unslash
#99Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output Not Escaped
#100FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found