PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

file system operations fwrite

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151WP Umbrella: Update Backup Restore & Monitoring2295796670k+Exception output is not escaped
#152Wp-Insert2226730110k+Output is not escaped
#153WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642578k+Non-prefixed constant
#154WP-WebAuthn229573962k+Exception output is not escaped
#155WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell226,0042,7645k+Text Domain Mismatch
#156WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#157YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception output is not escaped
#158ЮKassa для WooCommerce225901689k+Short PHP open tag found
#159Advanced Ads – Ad Manager & AdSense23559719100k+Non-prefixed global variable
#160AI Engine – The Chatbot, AI Framework & MCP for WordPress23408539100k+error log error log
#161Affiliate Super Assistent231,2802671k+Text Domain Mismatch
#162Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#163Business Directory Plugin – Easy Listing Directories for WordPress236111,06310k+Non-prefixed global variable
#164Geo Controller23914501k+Non-prefixed global variable
#165WPBot – AI ChatBot for Live Support, Lead Generation, AI Services234881,1615k+Non-prefixed global variable
#166Content Egg – Affiliate Product Importer & Price Comparison231,2451,27510k+Non-prefixed global variable
#167Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe239,31526,6441k+Non-prefixed global variable
#168CWW Companion233072231k+Output is not escaped
#169DK PDF – WordPress PDF Generator237443353k+Exception output is not escaped
#170Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#171Error Log Monitor236941,41420k+Non-prefixed global variable
#172Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34290k+Non-prefixed global variable
#173Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light23386999400Non-prefixed global variable
#174Ezoic2343251610k+Output is not escaped
#175Fastcache by Host.it231,327203800Text Domain Mismatch
#176Filr – Secure document library237751,317700Non-prefixed global variable
#177Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#178Futurio Extra2378720520k+Text Domain Mismatch
#179FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#180GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#181Anti-Malware Security and Brute-Force Firewall23543965100k+Output is not escaped
#182Houzez Property Feed231,4641,5851k+Text Domain Mismatch
#183Payment forms, Buy now buttons, and Invoicing System | GetPaid233891,2665k+Non-prefixed global variable
#184IP Geo Block233995898k+Output is not escaped
#185Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231902,1225k+Non-prefixed global variable
#186License Manager for WooCommerce231297976k+Nonce verification recommended
#187Link Whisper Free233,8825,30330k+Text Domain Mismatch
#188Locatoraid Store Locator233186451k+Non-prefixed global variable
#189MailPoet – Newsletters, Email Marketing, and Automation23932718500k+Exception output is not escaped
#190Master Slider – Responsive Touch Slider2380040860k+Output is not escaped
#191MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#192Media Library Assistant231,1313,75970k+Nonce verification recommended
#193MediaPress239045834k+Output is not escaped
#194Moloni239013562k+Missing Arg Domain
#195Restaurant Menu and Food Ordering233858532k+Non-prefixed global variable
#196MultiParcels Shipping For WooCommerce231973894k+Mixed line endings
#197MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234855802k+Missing nonce verification
#198MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non-prefixed global variable
#199Next Active Directory Integration236832842k+Exception output is not escaped
#200Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,129993400k+Text Domain Mismatch