PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fsockopen

file system operations fsockopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#2Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#3Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#4Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#5Link Library201,9411,39710k+Unsafe Printing Function
#6Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#7Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#8FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#9Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#10Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#11Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#12Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#13Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#14Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#15Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#16Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#17RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#18Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#19File Manager Pro – Filester22565391100k+Missing Unslash
#20InfiniteWP Client222,2861,812200k+Exception Not Escaped
#21Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#22Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#23Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#24ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#25NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#26SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non Prefixed Variable Found
#27Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#28ManageWP Worker225075651m+Non Prefixed Class Found
#29File Manager227405201m+Unsafe Printing Function
#30WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception Not Escaped
#31YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception Not Escaped
#32CleanTalk Anti-Spam. Spam Firewall & Bot protection238261,078200k+Missing
#33DK PDF – WordPress PDF Generator237443353k+Exception Not Escaped
#34FV Flowplayer Video Player231,3111,45420k+Output Not Escaped
#35MailPoet – Newsletters, Email Marketing, and Automation23858711500k+Exception Not Escaped
#36MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non Prefixed Variable Found
#37PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output Not Escaped
#38Premium Addons for Elementor – Powerful Elementor Templates & Widgets23206997700k+Non Prefixed Hookname Found
#39Local Google Analytics for WordPress – caches external requests235511993k+Output Not Escaped
#40WP Migrate Lite – Migration Made Easy23368254200k+Exception Not Escaped
#41پارسی دیت – Parsi Date23102289100k+Non Prefixed Hookname Found
#42WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#43Comments – wpDiscuz236201,18070k+Non Prefixed Variable Found
#44AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output Not Escaped
#45Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non Prefixed Variable Found
#46Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#47Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#48Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#49Simple Calendar – Google Calendar Plugin242,03559150k+missing direct file access protection
#50Mailjet Email Marketing2443520610k+Unsafe Printing Function