PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101WPSSO Core – Complete Schema Markup and Meta Tags221,4094145k+Missing Translators Comment
#102YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#103ЮKassa для WooCommerce225911679k+Short PHP open tag found
#104Admin and Site Enhancements (ASE)23139328200k+Nonce verification recommended
#105Affiliate Super Assistent231,2802671k+Text Domain Mismatch
#106AR for WordPress23151499400Non-prefixed global variable
#107Booking calendar, Appointment Booking System231,0791,1253k+Output is not escaped
#108BSK PDF Manager231,5766257k+Text Domain Mismatch
#109Business Directory Plugin – Easy Listing Directories for WordPress236111,06410k+Non-prefixed global variable
#110CallTrackingMetrics239222863k+Unsafe printing function
#111Content Egg – Affiliate Product Importer & Price Comparison231,3001,28710k+Non-prefixed global variable
#112Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,35826,4301k+Non-prefixed global variable
#113DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#114Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,71910,28040k+Non-prefixed namespace
#115Error Log Monitor236941,41420k+Non-prefixed global variable
#116Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light23386999400Non-prefixed global variable
#117Fastcache by Host.it231,327207900Text Domain Mismatch
#118GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#119Interactive Content – H5P2356537940k+Non Singular String Literal Domain
#120Heureka23534237400Exception output is not escaped
#121Houzez Property Feed231,4161,5851k+Text Domain Mismatch
#122IP Geo Block233995898k+Output is not escaped
#123InfiniteWP Client232,2871,811200k+Exception output is not escaped
#124Import WP – Export and Import CSV and XML files to WordPress235793244k+Exception output is not escaped
#125Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231882,1235k+Non-prefixed global variable
#126Locatoraid Store Locator233186451k+Non-prefixed global variable
#127MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4384,89410k+Non-prefixed global variable
#128Media Library Assistant231,1313,75970k+Nonce verification recommended
#129MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234855802k+Missing nonce verification
#130MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#131Next Active Directory Integration236832842k+Exception output is not escaped
#132NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization2331163590k+Output is not escaped
#133PowerPress Podcasting plugin by Blubrry234,8172,45220k+Output is not escaped
#134Security Plugin, Firewall & Malware Scanner with Auto Removal231,20478940k+Output is not escaped
#135Seraphinite Post .DOCX Source231,156110900Output is not escaped
#136Seriously Simple Podcasting2354862930k+Non-prefixed hook name
#137Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#138Smart Slider 323261268800k+Non-prefixed global variable
#139SportsPress – Sports Club & League Manager234592,24610k+Non-prefixed global variable
#140Directory Listings WordPress plugin – uListing239471,5731k+Non-prefixed global variable
#141W3 Total Cache23307678900k+Non-prefixed global variable
#142Cart PDF for WooCommerce235311721k+Exception output is not escaped
#143Web Directory Free232,6291,201400Text Domain Mismatch
#144ManageWP Worker235065651m+Non-prefixed class
#145WP BackItUp Community Edition232579896k+Non-prefixed global variable
#146Clone2324426240k+Output is not escaped
#147Lead Form Data Collection to CRM232111,698400Non-prefixed global variable
#148WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#149WP STAGING – WordPress Backups, Restore, Migration & Clone231,5251,610100k+Non-prefixed global variable
#150Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable