PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fopen

file system operations fopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#251MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#252Media Library Assistant231,1443,94370k+Nonce verification recommended
#253MediaPress239045834k+Output is not escaped
#254Restaurant Menu and Food Ordering233858532k+Non-prefixed global variable
#255MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar234,06548820k+Text Domain Mismatch
#256MultiParcels Shipping For WooCommerce231793564k+Request data is not unslashed
#257MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234855802k+Missing nonce verification
#258MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#259News Kit Addons For Elementor23694194k+Post Not In exclude
#260Next Active Directory Integration236832842k+Exception output is not escaped
#261Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,129993400k+Text Domain Mismatch
#262NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23316639100k+Output is not escaped
#263Ocean Extra231,4942,107500k+Non-prefixed global variable
#264Patchstack – WordPress & Plugins Security2310748940k+Missing nonce verification
#265Photo Gallery by 10Web – Mobile-Friendly Image Gallery234,1591,553100k+Output is not escaped
#266Gallery PhotoBlocks239041,3453k+Non-prefixed global variable
#267ExpressTechSoftwares Discord Add-on for Paid Memberships Pro23454449700Text Domain Mismatch
#268Postie2340726110k+Output is not escaped
#269PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output is not escaped
#270Premium Addons for Elementor – Powerful Elementor Templates & Widgets23206997700k+Non-prefixed hook name
#271Print My Blog – Print, PDF, & eBook Converter WordPress Plugin231,0771,6608k+Non-prefixed global variable
#272Radio Station by netmix® – Manage and play your Show Schedule in WordPress!239343,6191k+Non-prefixed global variable
#273Request a Quote – Quote Forms for Any WordPress Site232401,0991k+Non-prefixed hook name
#274Manago AI & Leadoo AI236444291k+Unsafe printing function
#275SecuPress with Simple SSL – Simple and Performant Security231,6971,60140k+Non-prefixed global variable
#276SEO Redirection Plugin – 301 Redirect Manager2327272710k+Non-prefixed global variable
#277Seraphinite Post .DOCX Source231,156110900Output is not escaped
#278Seriously Simple Podcasting2354862730k+Non-prefixed hook name
#279Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#280Image Optimizer, Resizer and CDN – Sirv236161,0041k+Output is not escaped
#281Site Reviews231,62560360k+Output is not escaped
#282Slider by 10Web – Responsive Image Slider235,81497610k+Output is not escaped
#283Smart Marketing SMS and Newsletters Forms232,2211,0221k+Text Domain Mismatch
#284Smart Slider 323261268800k+Non-prefixed global variable
#285teachPress237441,5872k+SQL query is not prepared
#286Legal Terms and Conditions Popup for User Login and WooCommerce Checkout23524237700Output is not escaped
#287The Events Calendar233,5113,851700k+Text Domain Mismatch
#288Travelpayouts237691106k+Output is not escaped
#289Trinity Audio – Text to Speech AI audio player to convert content into audio231192272k+Non-prefixed global variable
#290Tutor LMS – eLearning and online course solution233953,406100k+Non-prefixed global variable
#291Directory Listings WordPress plugin – uListing239471,5731k+Non-prefixed global variable
#292UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP236942,43920k+Non-prefixed hook name
#293W3 Total Cache23307678900k+Non-prefixed global variable
#294Wallet System for WooCommerce – Digital Wallet, Buy Now Pay Later (BNPL), Instant Cashback, Referral program, Partial & Subscription Payments231211,2272k+Non-prefixed global variable
#295Cart PDF for WooCommerce235311721k+Exception output is not escaped
#296Billingo Plus integráció WooCommerce-hez231,119507800Text Domain Mismatch
#297PostFinance Checkout239792141k+Text Domain Mismatch
#298WP BackItUp Community Edition232579896k+Non-prefixed global variable
#299Clone2324426240k+Output is not escaped
#300WP-CRM System – Manage Clients and Projects232971,094800Non-prefixed global variable