PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments231211,2272k+Non-prefixed global variable
#302Cart PDF for WooCommerce235311721k+Exception output is not escaped
#303Billingo Plus integráció WooCommerce-hez231,119507800Text Domain Mismatch
#304PostFinance Checkout239792141k+Text Domain Mismatch
#305WP BackItUp Community Edition232579896k+Non-prefixed global variable
#306Clone2324426240k+Output is not escaped
#307WP-CRM System – Manage Clients and Projects232971,094800Non-prefixed global variable
#308WP Editor2350233520k+Unsafe printing function
#309WP Helper Premium233,9081,5171k+Text Domain Mismatch
#310WP Hotelier236931,6352k+Non-prefixed global variable
#311Lead Form Data Collection to CRM232111,698400Non-prefixed global variable
#312WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#313FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce239412,17920k+SQL query is not prepared
#314WP Mega Menu239927928k+Non-prefixed global variable
#315WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#316Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#317WP STAGING – WordPress Backup, Restore, Migration & Clone231,4941,550100k+Non-prefixed global variable
#318Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#319Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode239332,002900Non-prefixed global variable
#320Customer Support Ticket System & Helpdesk231,7191,464400Text Domain Mismatch
#321WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#322WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,37689020k+Output is not escaped
#323Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#324Photo Engine (Media Organizer & Lightroom)232526502k+Direct Query
#325Zephyr Project Manager236672,4541k+Non-prefixed global variable
#326404 Solution244861,33810k+Non-prefixed class
#327A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#328Academy LMS – WordPress LMS Plugin for Complete eLearning Solution241627902k+Non-prefixed global variable
#329Anti Spam and list cleaner – AcyChecker2446288400Output is not escaped
#330AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output is not escaped
#331Ad Inserter – Ad Manager & AdSense Ads244,260812300k+Output is not escaped
#332Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#333Advanced iFrame248871,12040k+Non-prefixed global variable
#334Affiliates Manager241,2686539k+Unsafe printing function
#335All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#336Starter Templates – AI-Powered Templates for Elementor & Gutenberg241253941m+Non-prefixed hook name
#337Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non-prefixed global variable
#338Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#339Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8651,0891k+Text Domain Mismatch
#340Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#341Bookit — Booking & Appointment Calendar245661,4564k+Non-prefixed global variable
#342BrikPanel — WooCommerce Dashboard, Sales Report, Google Sheets Sync, Inventory Management & Bulk Editor243,9741,281400Text Domain Mismatch
#343Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor241,0259844k+Text Domain Mismatch
#344Bulk Edit and Create User Profiles – WP Sheet Editor249799691k+Text Domain Mismatch
#345WOLF – WordPress Posts Bulk Editor and Manager Professional244856234k+Output is not escaped
#346Calculated Fields Form2431160840k+Non-prefixed global variable
#347Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#348Business Essentials for Contact Form 7246744038k+Text Domain Mismatch
#349Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#350CleanTalk Anti-Spam. Spam Firewall & Bot protection248251,079200k+Missing nonce verification