PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#351Custom Twitter Feeds – A Tweets Widget or X Feed Widget24446922100k+Output is not escaped
#352WP Customer Area243,30694110k+Text Domain Mismatch
#353Customer Reviews for WooCommerce242,2022,44580k+Output is not escaped
#354Defender Security – Malware Scanner, Login Security & Firewall2454759480k+Non-prefixed namespace
#355WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments245871,43020k+Non-prefixed global variable
#356WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)248452,6434k+Non-prefixed global variable
#357Digital License Manager24295670700Non-prefixed hook name
#358Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification242334411k+Non-prefixed hook name
#359Doubly – Cross Domain Copy Paste for WordPress242525510k+Output is not escaped
#360DSGVO All in one for WP24751,63720k+Non-prefixed global variable
#361eCommerce Product Catalog Plugin for WordPress246213,1777k+Non-prefixed function
#362Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress246521,49560k+Non-prefixed hook name
#363Enable Media Replace24212276600k+Output is not escaped
#364Event Tickets and Registration243,4094,21790k+Non-prefixed global variable
#365Export WordPress Pages to Static HTML & PDF — Static Site Export245093044k+Text Domain Mismatch
#366Etsy Integration For WooCommerce241,2464,643900Non-prefixed global variable
#367F12 Profiler24282451500Direct Query
#368Fast Velocity Minify2428225640k+Unsafe printing function
#369Fattura2424312333400Output is not escaped
#370Featured Image from URL (FIFU)241,65441870k+Non Singular String Literal Domain
#371Featured Post with thumbnail24158122400Output is not escaped
#372FileBird – WordPress Media Library Folders & File Manager24239377200k+wp function not compatible with requires wp
#373Fix Alt Text245443461k+Non Singular String Literal Domain
#374FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#375Football Pool241,0857331k+Output is not escaped
#376Formidable PRO2PDF242184771k+Non-prefixed global variable
#377FV Simpler SEO247663082k+Text Domain Mismatch
#378FV Player 8243231,3831k+Non-prefixed function
#379Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#380Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2453632410k+Text Domain Mismatch
#381GD Mail Queue24502582700Output is not escaped
#382GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels244695921k+Non-prefixed global variable
#383Assets manager, dequeue scripts, dequeue styles for WordPress245922552k+Output is not escaped
#384Simple Calendar – Google Calendar Plugin242,05359250k+Missing direct file access protection
#385Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#386Import from YML2497306400Non-prefixed global variable
#387Import and export users and customers241,04035770k+Unsafe printing function
#388Infinite Uploads – Offload Media and Video to Cloud Storage24586722800Direct Query
#389Keap Official Opt-in Forms248291,0461k+Non-prefixed global variable
#390Social Slider Feed – Social Media Feed & Gallery Widgets2492970720k+Non-prefixed global variable
#391InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non-prefixed global variable
#392Dynamics 365 Integration24383166600Output is not escaped
#393Koko Analytics – Privacy-Friendly WordPress Analytics2416639560k+Short PHP open tag found
#394Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress241,855953100k+Output is not escaped
#395LearnPress – Backup & Migration Tool243854695k+Output is not escaped
#396LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes244141,17610k+Non-prefixed global variable
#397Local Delivery Drivers for WooCommerce241,8321,483900Non-prefixed global variable
#398Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets249692,1407k+Non-prefixed global variable
#399Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non-prefixed global variable
#400Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails244,6961,4805k+Text Domain Mismatch