PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101WooCommerce211,3436,2127m+Non-prefixed global variable
#102Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39330k+Non-prefixed global variable
#103PPOM – Product Addons & Custom Fields for WooCommerce213361,31920k+Non-prefixed global variable
#104Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#105WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#106WP-Lister Lite for eBay216,7015,1322k+Output is not escaped
#107WP phpMyAdmin214,5286,43540k+Missing Arg Domain
#108wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#109WP Extended – The Ultimate WordPress Toolkit211,253398600Non Singular String Literal Domain
#110WebTotem Security211,110213800Text Domain Mismatch
#111Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#112All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#113ANAC XML Bandi di Gara22294244500Output is not escaped
#114Backup Bolt225801,313800Non-prefixed global variable
#115Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#116Better WordPress Minify224124847k+Non Singular String Literal Domain
#117Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#118Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#119Accept PayPal Payments using Contact Form 722359127600Text Domain Mismatch
#120RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1348k+Non-prefixed global variable
#121Data Tables Generator by Supsystic2216419810k+Exception output is not escaped
#122Database Access with Adminer229832,5531k+Non-prefixed global variable
#123Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#124Download Manager222,5131,459100k+Output is not escaped
#125Dynamic QR Code – generator222382085k+Missing direct file access protection
#126E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#127easyReservations225,3072,480800Text Domain Mismatch
#128Ebook Store224101,054700Non-prefixed global variable
#129Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#130FACTO – Facturación Electrónica22244423400Request data is not unslashed
#131File Manager Pro – Filester22566391100k+Request data is not unslashed
#132Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output is not escaped
#133FireBox Popups – Increase Sales and Grow Your Email List221578267k+Non-prefixed global variable
#134Five Star Restaurant Menu and Food Ordering227546105k+Output is not escaped
#135FunnelKit Payment Gateway for Stripe WooCommerce2224432120k+Input is not sanitized
#136GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4653,98510k+Output is not escaped
#137Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#138Hesabfa Accounting22467718500Text Domain Mismatch
#139Csomagpontok és Címkék WooCommerce-hez222,0027697k+Text Domain Mismatch
#140Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#141Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#142JCH Optimize221,1451364k+Output is not escaped
#143Jetpack – WP Security, Backup, Speed, & Growth222,9751,3483m+Text Domain Mismatch
#144Jim Soft Swiss QR Invoice22263392400Non-prefixed global variable
#145LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4333,59470k+Non-prefixed global variable
#146Mail Baby SMTP22385699600SQL query is not prepared
#147MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#148MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6252,45810k+Output is not escaped
#149MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution221,1311,846800Non-prefixed global variable
#150Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization221,3062,8188k+Output is not escaped