PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#52Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#53WP Customer Area223,30894110k+Text Domain Mismatch
#54Download Manager222,2901,301100k+Output Not Escaped
#55E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#56Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#57File Manager Pro – Filester22565391100k+Missing Unslash
#58GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#59Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03772220k+Unsafe Printing Function
#60Insert or Embed Articulate Content into WordPress226591,4372k+Non Prefixed Variable Found
#61InfiniteWP Client222,2861,812200k+Exception Not Escaped
#62Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#63LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#64Newsletters222,9682,2482k+Text Domain Mismatch
#65NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#66Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#67Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#68Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#69PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#70Seraphinite Accelerator2259425550k+Output Not Escaped
#71Simple Job Board226341,35510k+Non Prefixed Variable Found
#72SNS Count Cache229181208k+Non Singular String Literal Domain
#73SportsPress – Sports Club & League Manager224602,24210k+Non Prefixed Variable Found
#74Theme Editor2279868550k+Output Not Escaped
#75Customize Feeds for Twitter22921714k+Non Prefixed Variable Found
#76Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#77WooCommerce221,3556,1297m+Non Prefixed Variable Found
#78ManageWP Worker225075651m+Non Prefixed Class Found
#79File Manager227405201m+Unsafe Printing Function
#80WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception Not Escaped
#81WP-WebAuthn229573962k+Exception Not Escaped
#82WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#83YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception Not Escaped
#84ЮKassa для WooCommerce225911689k+Echo Found
#85Admin and Site Enhancements (ASE)23136330200k+Recommended
#86Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#87Booking calendar, Appointment Booking System231,0791,1254k+Output Not Escaped
#88BSK PDF Manager231,5766257k+Text Domain Mismatch
#89Business Directory Plugin – Easy Listing Directories for WordPress236111,05810k+Non Prefixed Variable Found
#90DK PDF – WordPress PDF Generator237443353k+Exception Not Escaped
#91Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non Prefixed Namespace Found
#92Error Log Monitor236941,41420k+Non Prefixed Variable Found
#93Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#94Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#95GAinWP Google Analytics Integration for WordPress235251768k+Output Not Escaped
#96Interactive Content – H5P2356538040k+Non Singular String Literal Domain
#97IP Geo Block233995899k+Output Not Escaped
#98Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231971,7485k+Non Prefixed Variable Found
#99MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non Prefixed Variable Found
#100Media Library Assistant231,1443,94370k+Recommended