PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#201WP Umbrella: Update Backup Restore & Monitoring2291891670k+Exception output is not escaped
#202Wp-Insert2226730110k+Output is not escaped
#203AidWP – Donation & Payment Forms (Stripe Powered)221,3171,675800Non-prefixed global variable
#204WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non-prefixed constant
#205NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4122k+Non-prefixed global variable
#206WP-WebAuthn229573962k+Exception output is not escaped
#207WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#208WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#209YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#210ЮKassa для WooCommerce225901689k+Short PHP open tag found
#211Admin and Site Enhancements (ASE)23136330200k+Nonce verification recommended
#212AI Engine – The Chatbot, AI Framework & MCP for WordPress23411544100k+error log error log
#213Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#214AR for WordPress23149508400Non-prefixed global variable
#215Autoptimize23288191800k+Output is not escaped
#216Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#217Booking calendar, Appointment Booking System231,0791,1254k+Output is not escaped
#218BSK PDF Manager231,5766257k+Text Domain Mismatch
#219Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non-prefixed global variable
#220Geo Controller232035441k+Non-prefixed global variable
#221WPBot – AI ChatBot for Live Support, Lead Generation, AI Services236241,2455k+Non-prefixed global variable
#222Church Admin231,6434,202900Direct Query
#223Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#224Content Egg – Affiliate Product Importer & Price Comparison231,2311,25710k+Non-prefixed global variable
#225Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31026,642900Non-prefixed global variable
#226Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets)237912,331400Non-prefixed global variable
#227CWW Companion233072231k+Output is not escaped
#228DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#229Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification236756431k+Unsafe printing function
#230Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#231EazyDocs – AI Powered Knowledge Base, Wiki, Documentation & FAQ Builder233561,5152k+Non-prefixed global variable
#232Error Log Monitor236941,41420k+Non-prefixed global variable
#233Essential Real Estate235295,0608k+Non-prefixed global variable
#234Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34290k+Non-prefixed global variable
#235Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light23386999500Non-prefixed global variable
#236Export WordPress Pages to Static HTML & PDF — Static Site Export234903014k+Text Domain Mismatch
#237Ezoic2343251610k+Output is not escaped
#238Fastcache by Host.it231,327203700Text Domain Mismatch
#239Filr – Secure document library237751,317800Non-prefixed global variable
#240Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#241Futurio Extra2378720520k+Text Domain Mismatch
#242FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#243GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#244Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#245Groundhogg — CRM, Newsletters, and Marketing Automation231369142k+Non-prefixed global variable
#246Interactive Content – H5P2356538040k+Non Singular String Literal Domain
#247Houzez Property Feed231,4641,6151k+Text Domain Mismatch
#248Import from YML2397308400Non-prefixed global variable
#249Payment forms, Buy now buttons, and Invoicing System | GetPaid233871,2585k+Non-prefixed global variable
#250IP Geo Block233995899k+Output is not escaped