PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fclose

file system operations fclose

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#401Mailjet Email Marketing2443520610k+Unsafe printing function
#402Mang Board WP241,2134,7209k+Non-prefixed global variable
#403Media Library Folders2488980710k+Text Domain Mismatch
#404Timetable and Event Schedule by MotoPress2445623230k+Output is not escaped
#405MxChat – AI Chatbot & Content Generation for WordPress243,2301,4052k+Text Domain Mismatch
#406Newsletter Subscription Form – User Subscriptions Form, Capture Email243858291k+Non-prefixed global variable
#407NEX-Forms – Ultimate Forms Plugin for WordPress242,0081,1956k+Text Domain Mismatch
#408Ninja Forms – The Contact Form Builder That Grows With You247491,533600k+Nonce verification recommended
#409Omnipress24169245800Non-prefixed global variable
#410Opt-Out for Google Analytics (DSGVO / GDPR)242901,9783k+Non-prefixed global variable
#411Participants Database249508947k+SQL query is not prepared
#412PDF Generator for WordPress Elementor245132711k+Exception output is not escaped
#413PeproDev Ultimate Invoice243792344k+Output is not escaped
#414Database Manager – WP Adminer241,0052,75220k+Non-prefixed global variable
#415Post Status Notifier Lite24984451700Missing direct file access protection
#416Product Catalog Simple241,5551,9821k+Output is not escaped
#417Post Affiliate Pro24293335500Nonce verification recommended
#418Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More242,1544,8331k+Non-prefixed global variable
#419ProfileGrid – User Profiles, Groups and Communities244842,4615k+Non-prefixed global variable
#420Quick Event Manager241523881k+Non-prefixed function
#421reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#422Registrations for the Events Calendar – Event Registration Plugin244049447k+Non-prefixed global variable
#423RS WP Book Showcase – A Complete Book Catalogue & Library System249103431k+Text Domain Mismatch
#424RSFirewall!245635214k+Output is not escaped
#425RSVP and Event Management243456243k+Direct Query
#426Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#427SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress242393041k+Direct Query
#428SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit246059281k+Non-prefixed global variable
#429SEO Ultimate2443726910k+Output is not escaped
#430Servebolt Optimizer241,9586811k+Text Domain Mismatch
#431Service Box Slider246181,410500Non-prefixed global variable
#432ShiftController Employee Shift Scheduling24358196700Output is not escaped
#433ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization2492632210k+Output is not escaped
#434Simple Membership242,2971,73440k+Unsafe printing function
#435SiteGuard WP Plugin24359350500k+Output is not escaped
#436Slideshow Gallery LITE248964145k+Output is not escaped
#437MoreConvert Wishlist for WooCommerce243,6816299k+Text Domain Mismatch
#438Softaculous241155010k+file system operations fread
#439Spotlight Social Feeds – Block, Shortcode, and Widget2441114760k+Output is not escaped
#440GEO Plugin by Squirrly SEO241,19522430k+Missing Translators Comment
#441Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers243601,4721k+Nonce verification recommended
#442Tainacan241385921k+Direct Query
#443Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!24167225300k+Nonce verification recommended
#444Timber248512820k+Non-prefixed hook name
#445Tutor LMS – eLearning and online course solution243284,409100k+Non-prefixed global variable
#446Ultra Addons for Contact Form 7241,54345260k+Text Domain Mismatch
#447Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non-prefixed global variable
#448UpdraftPlus: WP Backup & Migration Plugin242772993m+Non-prefixed global variable
#449User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder246633,35350k+Non-prefixed global variable
#450UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds24441235200k+Text Domain Mismatch