PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fsockopen

file system operations fsockopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Premium Blocks – Gutenberg Blocks, Patterns & Templates231413082k+Non Prefixed Function Found
#52Local Google Analytics for WordPress – caches external requests235511993k+Output Not Escaped
#53Cart PDF for WooCommerce235311721k+Exception Not Escaped
#54WP Migrate Lite – Migration Made Easy23368254200k+Exception Not Escaped
#55پارسی دیت – Parsi Date23102289100k+Non Prefixed Hookname Found
#56WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#57Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non Prefixed Variable Found
#58Comments – wpDiscuz236201,18070k+Non Prefixed Variable Found
#59AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output Not Escaped
#60Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non Prefixed Variable Found
#61Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#62Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces242,2483,33810k+slow db query meta key
#63Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#64WPBot – ChatBot Conversational Forms241,2541,2132k+Text Domain Mismatch
#65FV Simpler SEO247663082k+Text Domain Mismatch
#66Simple Calendar – Google Calendar Plugin242,03559150k+missing direct file access protection
#67Mailjet Email Marketing2443520610k+Unsafe Printing Function
#68NEX-Forms – Ultimate Forms Plugin for WordPress241,9971,2006k+Text Domain Mismatch
#69ProfileGrid – User Profiles, Groups and Communities244732,4636k+Non Prefixed Variable Found
#70Security Plugin, Firewall & Malware Scanner with Auto Removal241,19178830k+Output Not Escaped
#71Ultra Addons for Contact Form 7241,53846060k+Text Domain Mismatch
#72EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#73European VAT Compliance Assistant for WooCommerce245153173k+Output Not Escaped
#74WP RSS Aggregator – RSS Import, Feed to Post, Autoblogging, AI Content241,77539340k+Text Domain Mismatch
#75WP Travel – Ultimate Travel Booking System, Tour Management Engine244271,9624k+Non Prefixed Hookname Found
#76WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non Prefixed Variable Found
#77WPGSI: Spreadsheet Integration247841,5872k+Non Prefixed Variable Found
#78WPSpeed – WordPress Speed, Cache & Performance Optimization (Core Web Vitals, PageSpeed 100)244821892k+Output Not Escaped
#79Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non Prefixed Variable Found
#80Online Scheduling and Appointment Booking System – Bookly253,52887060k+Text Domain Mismatch
#81DecaLog259432361k+Exception Not Escaped
#82Events Made Easy255066,2961k+Non Prefixed Function Found
#83GD Security Headers254075211k+Output Not Escaped
#84Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+missing direct file access protection
#85Icegram Collect – Easy Form, Lead Collection and Subscription plugin254242902k+Output Not Escaped
#86Login Widget With Shortcode253351986k+wp function not compatible with requires wp
#87PDF & Print by BestWebSoft – WordPress Posts and Pages PDF Generator Plugin251,0841,2969k+Non Prefixed Variable Found
#88BerqWP – Automatic WordPress Website Speed Optimization251985013k+Non Prefixed Variable Found
#89Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2596073860k+Text Domain Mismatch
#90VikBooking Hotel Booking Engine & PMS2513,2328,3128k+Output Not Escaped
#91W3 Total Cache256171,345900k+Non Prefixed Variable Found
#92weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output Not Escaped
#93Wordfence Login Security2524841870k+Output Not Escaped
#94Super Page Cache – Cloudflare Cache, Page Speed & Core Web Vitals2513735360k+Input Not Sanitized
#95ezCache2612726910k+Direct Query
#96Crowdsignal Dashboard – Polls, Surveys & more26486489200k+Unsafe Printing Function
#97User Submitted Posts – Enable Users to Submit Posts from the Front End2669939610k+Text Domain Mismatch
#98FG Joomla to WordPress272781017k+Unsafe Printing Function
#99Autopay277463703k+Text Domain Mismatch
#100درگاه پرداخت بانک ملت ووکامرس28611302k+Missing Unslash