PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51WooCommerce211,3436,2127m+Non-prefixed global variable
#52Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39330k+Non-prefixed global variable
#53PPOM – Product Addons & Custom Fields for WooCommerce213361,31920k+Non-prefixed global variable
#54Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#55WP Compress – Instant Performance & Speed Optimization213,3673,25310k+Non Singular String Literal Domain
#56WP-Lister Lite for eBay216,6965,1282k+Output is not escaped
#57WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#58wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,8121,43270k+Output is not escaped
#59WebTotem Security211,110213900Text Domain Mismatch
#60Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159230k+Unsafe printing function
#61All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos229122,88520k+Non-prefixed global variable
#62Borderless – Addons and Templates for Elementor224381,3885k+Non-prefixed global variable
#63Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#64Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non-prefixed global variable
#65Data Tables Generator by Supsystic2216419810k+Exception output is not escaped
#66Database Access with Adminer229832,5531k+Non-prefixed global variable
#67Download Manager222,5131,459100k+Output is not escaped
#68E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#69Ebook Store224101,054700Non-prefixed global variable
#70Events Manager – Calendar, Bookings, Tickets, and more!224,7165,69070k+Output is not escaped
#71FACTO – Facturación Electrónica22244423400Request data is not unslashed
#72File Manager Pro – Filester22566391100k+Request data is not unslashed
#73GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4653,97610k+Output is not escaped
#74Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#75Insert or Embed Articulate Content into WordPress226591,4372k+Non-prefixed global variable
#76Jim Soft Swiss QR Invoice22263392400Non-prefixed global variable
#77LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,4333,59470k+Non-prefixed global variable
#78MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#79Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization221,3062,8188k+Output is not escaped
#80Newsletters222,9772,2612k+Text Domain Mismatch
#81NinjaScanner – Virus & Malware scan2259655130k+Non-prefixed global variable
#82Packeta228013338k+Exception output is not escaped
#83PDF Builder for WPForms22321266900SQL query is not prepared
#84Smart Popup by Supsystic223,12049210k+Non Singular String Literal Domain
#85Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#86PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe printing function
#87Seraphinite Accelerator2259525550k+Output is not escaped
#88Simple Job Board226341,35510k+Non-prefixed global variable
#89SNS Count Cache229181207k+Non Singular String Literal Domain
#90Theme Editor2279868550k+Output is not escaped
#91Customize Feeds for Twitter22921714k+Non-prefixed global variable
#92RapidLoad AI – Optimize Web Vitals Automatically2281840700Nonce verification recommended
#93UpStream: a Project Management Plugin for WordPress22683703600Non-prefixed global variable
#94Welcart e-Commerce2210,36810,88210k+Text Domain Mismatch
#95Wenprise WeChatPay Payment Gateway For WooCommerce22443178400Exception output is not escaped
#96WP Express Checkout (Fast Payments via PayPal & Stripe)225916271k+Output is not escaped
#97File Manager227405201m+Unsafe printing function
#98WP Umbrella: Security Backup Restore & Monitoring2297099980k+Exception output is not escaped
#99NotifSMS – SMS Notifications OTP & 2FA for WordPress & WooCommerce221,3531,4121k+Non-prefixed global variable
#100WP-WebAuthn229573962k+Exception output is not escaped