PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fopen

file system operations fopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301Lead Form Data Collection to CRM232111,698400Non-prefixed global variable
#302WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#303FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce239412,17920k+SQL query is not prepared
#304WP Mega Menu239927928k+Non-prefixed global variable
#305WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#306Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#307WP STAGING – WordPress Backup, Restore, Migration & Clone231,5041,567100k+Non-prefixed global variable
#308Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#309Dynamic Team Manager – Team Member Showcase with grid, slider, table Elementor widget & shortcode239332,002900Non-prefixed global variable
#310Customer Support Ticket System & Helpdesk231,7191,464400Text Domain Mismatch
#311WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#312WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,37689020k+Output is not escaped
#313Photo Engine (Media Organizer & Lightroom)232526502k+Direct Query
#314Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress232,3171,7145k+Output is not escaped
#315Zephyr Project Manager236672,4541k+Non-prefixed global variable
#316404 Solution244861,33810k+Non-prefixed class
#317A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#318Academy LMS – WordPress LMS Plugin for Complete eLearning Solution241627902k+Non-prefixed global variable
#319Anti Spam and list cleaner – AcyChecker2446288400Output is not escaped
#320AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2341,4647k+Output is not escaped
#321Ad Inserter – Ad Manager & AdSense Ads244,260812300k+Output is not escaped
#322Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#323Advanced iFrame248871,12040k+Non-prefixed global variable
#324Affiliates Manager241,2686539k+Unsafe printing function
#325All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#326Starter Templates – AI-Powered Templates for Elementor & Gutenberg241253941m+Non-prefixed hook name
#327Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non-prefixed global variable
#328Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#329Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8651,0891k+Text Domain Mismatch
#330Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#331Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More243429306k+Non-prefixed global variable
#332Arigato Autoresponder and Newsletter241,318769500Text Domain Mismatch
#333Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor241,0259844k+Text Domain Mismatch
#334Bulk Edit and Create User Profiles – WP Sheet Editor249799691k+Text Domain Mismatch
#335Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2431861140k+Non-prefixed global variable
#336Message Filter for Contact Form 7241,0571,5941k+Non-prefixed global variable
#337Kognetiks Chatbot for WordPress246511,486600Non-prefixed global variable
#338Church Admin241,5544,207900Direct Query
#339Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#340Complianz – GDPR/CCPA Cookie Consent244874031m+Missing Arg Domain
#341Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#342Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress245293571k+Text Domain Mismatch
#343WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#344CRM Perks Forms – WordPress Form Builder248195771k+Output is not escaped
#345Custom CSS247036571k+Output is not escaped
#346Custom Twitter Feeds – A Tweets Widget or X Feed Widget24446922100k+Output is not escaped
#347WP Customer Area243,30694110k+Text Domain Mismatch
#348Customer Reviews for WooCommerce242,2022,44580k+Output is not escaped
#349Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non-prefixed namespace
#350WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments245871,43020k+Non-prefixed global variable