PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#101Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231971,7485k+Non Prefixed Variable Found
#102MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non Prefixed Variable Found
#103Media Library Assistant231,1443,94370k+Recommended
#104MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234885802k+Missing
#105MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non Prefixed Variable Found
#106Next Active Directory Integration236832842k+Exception Not Escaped
#107NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23315631100k+Output Not Escaped
#108Patchstack – WordPress & Plugins Security2310748940k+Missing
#109PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output Not Escaped
#110SecuPress with Simple SSL – Simple and Performant Security231,6961,59040k+Non Prefixed Variable Found
#111SEO Redirection Plugin – 301 Redirect Manager2327272710k+Non Prefixed Variable Found
#112Seriously Simple Podcasting2354862730k+Non Prefixed Hookname Found
#113Local Google Analytics for WordPress – caches external requests235511993k+Output Not Escaped
#114Smart Slider 323261268800k+Non Prefixed Variable Found
#115Softaculous231164910k+file system operations fread
#116Directory Listings WordPress plugin – uListing239471,5731k+Non Prefixed Variable Found
#117Cart PDF for WooCommerce235311721k+Exception Not Escaped
#118WP BackItUp Community Edition232579896k+Non Prefixed Variable Found
#119Clone2324426240k+Output Not Escaped
#120پارسی دیت – Parsi Date23102289100k+Non Prefixed Hookname Found
#121WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#122Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non Prefixed Variable Found
#123WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1193,51620k+Interpolated Not Prepared
#124404 Solution244831,08710k+Missing Unslash
#125AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output Not Escaped
#126Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#127Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#128Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor241,0259844k+Text Domain Mismatch
#129Bulk Edit and Create User Profiles – WP Sheet Editor249799691k+Text Domain Mismatch
#130Calculated Fields Form2424352540k+Non Prefixed Variable Found
#131Smart Online Order for Clover241,7461,2461k+Text Domain Mismatch
#132Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#133Defender Security – Malware Scanner, Login Security & Firewall2430651880k+Non Prefixed Namespace Found
#134DSGVO All in one for WP24751,63720k+Non Prefixed Variable Found
#135Fast Velocity Minify2428225640k+Unsafe Printing Function
#136Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#137Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2453632410k+Text Domain Mismatch
#138Assets manager, dequeue scripts, dequeue styles for WordPress245922552k+Output Not Escaped
#139Simple Calendar – Google Calendar Plugin242,03559150k+missing direct file access protection
#140Social Slider Feed – Social Media Feed & Gallery Widgets2492970720k+Non Prefixed Variable Found
#141InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non Prefixed Variable Found
#142LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes244141,17710k+Non Prefixed Variable Found
#143Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non Prefixed Variable Found
#144Mang Board WP241,2494,7209k+Non Prefixed Variable Found
#145NEX-Forms – Ultimate Forms Plugin for WordPress241,9971,2006k+Text Domain Mismatch
#146Participants Database249518947k+Not Prepared
#147Database Manager – WP Adminer241,0052,75220k+Non Prefixed Variable Found
#148Quick Event Manager241523881k+Non Prefixed Function Found
#149RSFirewall!245635214k+Output Not Escaped
#150Security Plugin, Firewall & Malware Scanner with Auto Removal241,19178830k+Output Not Escaped