WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#251Download Attachments32691888k+Non-prefixed hook name
#252WP 2-step verification32154651k+Output is not escaped
#253EchBay Phonering Alo3374471k+Output is not escaped
#254WP GIF Uploader33117441k+Text Domain Mismatch
#255Merge + Minify + Refresh3378264k+date date
#256QNAP NAS Backup33374702k+Non Singular String Literal Domain
#257WP EXtra – One Click Optimize334141017k+Missing Arg Domain
#258EasyMedia – Increase Media Upload File Size | Role-Based Upload Limit | Increase Execution Time338213870k+Non-prefixed global variable
#259AGCA – Custom Dashboard & Login Page343504420k+Unsafe printing function
#260Download After Email – Subscribe & Download Form Plugin34223567k+Input is not validated
#261Montonio for WooCommerce344425710k+Non-prefixed global variable
#262Payoneer Checkout34168416k+Exception output is not escaped
#263WP LinkedIn Auto Publish34165568k+Output is not escaped
#264Create Block Theme3543520k+unlink unlink
#265Editorial Calendar3512716020k+Output is not escaped
#266EWWW Image Optimizer352257291m+Direct Query
#267Imsanity353229200k+Direct Query
#268Page Optimize357041200k+Non Singular String Literal Domain
#269Converter for Media – Optimize images | Convert WebP & AVIF3513353500k+curl curl setopt
#270Dashboard Widgets Suite362061244k+Output is not escaped
#271HTML5 Maps361941605k+Output is not escaped
#272Quick 301 Redirects36891205k+Non-prefixed global variable
#273Export Themes36122902k+Non-prefixed constant
#274Sensei LMS Certificates37973625k+Non-prefixed global variable
#275Conditional Discounts for WooCommerce – A simple yet complete woocommerce dynamic pricing plugin37993310k+Text Domain Mismatch
#276WP Maintenance Mode & Site Under Construction3872573k+Output is not escaped
#277WP-ServerInfo381625510k+Output is not escaped
#278Debug Log Viewer3924951k+Non-prefixed global variable
#279GS Only PDF Preview3946361k+Output is not escaped
#280NextGEN Download Gallery3957212k+Short PHP open tag found
#281Virusdie | One-click website security39149662k+Output is not escaped
#282Advanced Country Blocker4023772k+Exception output is not escaped
#283Advanced IP Blocker4094442k+Exception output is not escaped
#284All-in-One WP Migration and Backup4028615m+Missing nonce verification
#285WPO365 | Mail Integration for Office 365 / Outlook4059272k+Output is not escaped
#286Sentry for WordPress40804010k+Text Domain Mismatch
#287Heroic Favicon Generator4110476k+Output is not escaped
#288Gelato Integration for WooCommerce4236325k+Output is not escaped
#289SmartVideo – Video Player and CDN44295441k+Text Domain Mismatch
#290Gravity Forms Constant Contact4636273k+Non-prefixed class
#291Compress, Resize & Lazy Load Images – WPvivid Image Optimization471075810k+Missing direct file access protection
#292SpinupWP49433830k+Non-prefixed function
#293Connect Contact Form 7 and Mailchimp532365240k+Text Domain Mismatch
#294Royal WordPress Backup, Restore & Migration Plugin – Backup WordPress Sites Safely53349020k+Database parameter is not escaped
#295CSV Importer5424113k+Missing direct file access protection
#296Gravity PDF5711615220k+Non-prefixed global variable
#297PDF invoice for WP ERP58961342k+Non-prefixed global variable
#298flowpaper58143110k+Non-prefixed function
#299Videopack582810810k+Input is not sanitized
#300Resize Image After Upload59151180k+Output is not escaped