PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fsockopen

file system operations fsockopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,563149200k+Exception output is not escaped
#2RestroPress – Online Food Ordering System175243,1551k+Non-prefixed global variable
#3Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception output is not escaped
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,900877100k+Exception output is not escaped
#5Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195363793m+Missing Translators Comment
#6SendPress Newsletters192,2931,4221k+Output is not escaped
#7WP Email Template193443452k+Exception output is not escaped
#8Link Library201,9421,39410k+Unsafe printing function
#9پلاگین پرداخت دلخواه20584446900Text Domain Mismatch
#10Pix por Piggly (para Woocommerce)205471954k+Exception output is not escaped
#11Booking Ultra Pro Appointments Booking Calendar Plugin217612,083400Request data is not unslashed
#12DELUCKS SEO213621,171400Missing nonce verification
#13Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output is not escaped
#14FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#15Campaign Monitor for WordPress213864612k+Non-prefixed global variable
#16Mergado Pack212,323588700Output is not escaped
#17Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4783,33710k+Non-prefixed global variable
#18Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1202,9139k+Non-prefixed global variable
#19Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9535,29710k+Non-prefixed hook name
#20Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non-prefixed global variable
#21Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#22Buckaroo Woocommerce Payments Plugin216383212k+Exception output is not escaped
#23Paysera Payment Gateway for WooCommerce211,8681967k+Exception output is not escaped
#24Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output is not escaped
#25WP-Lister Lite for eBay216,6975,1292k+Output is not escaped
#26Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8541,26950k+Text Domain Mismatch
#27RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login223,6525,1348k+Non-prefixed global variable
#28Directorist: AI-Powered Business Directory, Listings & Classified Ads225602,20220k+Non-prefixed global variable
#29Ebook Store224101,054700Non-prefixed global variable
#30FACTO – Facturación Electrónica22244423400Request data is not unslashed
#31File Manager Pro – Filester22566391100k+Request data is not unslashed
#32MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder221,1203,0122k+Non-prefixed global variable
#33Newsletters222,9762,2572k+Text Domain Mismatch
#34Smart Popup by Supsystic223,12049210k+Non Singular String Literal Domain
#35Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#36Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools222081,135700k+Non-prefixed hook name
#37Quick Contact Form222606231k+Non-prefixed function
#38ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#39Slim Jetpack222,5861,9472k+Text Domain Mismatch
#40NextScripts: Social Networks Auto-Poster222,4081,13320k+Output is not escaped
#41SSL Zen — SSL Certificate Installer & HTTPS Redirects227511,60510k+Non-prefixed global variable
#42Welcart e-Commerce2210,36810,88210k+Text Domain Mismatch
#43File Manager227405201m+Unsafe printing function
#44WP Umbrella: Security Backup Restore & Monitoring2297099980k+Exception output is not escaped
#45WP-WebAuthn229573962k+Exception output is not escaped
#46YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#47Geo Controller23914501k+Non-prefixed global variable
#48DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#49Fastcache by Host.it231,327207900Text Domain Mismatch
#50FV Flowplayer Video Player231,3111,45420k+Output is not escaped