PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non-prefixed global variable
#102Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22409236700k+Text Domain Mismatch
#103Five Star Restaurant Menu and Food Ordering227526095k+Output is not escaped
#104FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#105GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output is not escaped
#106Anti-Malware Security and Brute-Force Firewall22544965100k+Output is not escaped
#107Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe printing function
#108Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#109Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#110Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#111InfiniteWP Client222,2861,812200k+Exception output is not escaped
#112Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception output is not escaped
#113LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non-prefixed global variable
#114MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output is not escaped
#115Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non-prefixed global variable
#116Moloni229023562k+Missing Arg Domain
#117Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch
#118Newsletters222,9682,2482k+Text Domain Mismatch
#119NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non-prefixed global variable
#120NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#121oik224891802k+Non Singular String Literal Domain
#122Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#123Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#124Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#125Product Catalog Feed by PixelYourSite225813578k+Output is not escaped
#126PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#127Quick Contact Form222606231k+Non-prefixed function
#128Social Sharing Plugin – Sassy Social Share221,689233100k+wp function not compatible with requires wp
#129Seraphinite Accelerator2259425550k+Output is not escaped
#130ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non-prefixed global variable
#131Simple Job Board226341,35510k+Non-prefixed global variable
#132Slim Jetpack222,5861,9472k+Text Domain Mismatch
#133SNS Count Cache229181208k+Non Singular String Literal Domain
#134SportsPress – Sports Club & League Manager224602,24210k+Non-prefixed global variable
#135SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non-prefixed global variable
#136Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output is not escaped
#137Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#138The Moneytizer227512711k+Text Domain Mismatch
#139Theme Editor2279868550k+Output is not escaped
#140Customize Feeds for Twitter22921714k+Non-prefixed global variable
#141Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#142URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non-prefixed global variable
#143Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#144UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds22444243200k+Text Domain Mismatch
#145WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non-prefixed global variable
#146WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#147Simple Shopping Cart2279653610k+Unsafe printing function
#148ManageWP Worker225075651m+Non-prefixed class
#149WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#150File Manager227405201m+Unsafe printing function