PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fwrite

file system operations fwrite

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301Timetable and Event Schedule by MotoPress2445623230k+Output is not escaped
#302MxChat – AI Chatbot & Content Generation for WordPress243,2301,4052k+Text Domain Mismatch
#303Newsletter Subscription Form – User Subscriptions Form, Capture Email243858291k+Non-prefixed global variable
#304NEX-Forms – Ultimate Forms Plugin for WordPress242,0081,1956k+Text Domain Mismatch
#305Ninja Forms – The Contact Form Builder That Grows With You247491,533600k+Nonce verification recommended
#306Opt-Out for Google Analytics (DSGVO / GDPR)242901,9783k+Non-prefixed global variable
#307Participants Database249508947k+SQL query is not prepared
#308PDF Generator for WordPress Elementor245132711k+Exception output is not escaped
#309Database Manager – WP Adminer241,0052,75220k+Non-prefixed global variable
#310PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1762,416500k+Non-prefixed namespace
#311Post Status Notifier Lite24984451700Missing direct file access protection
#312Post Affiliate Pro24293335500Nonce verification recommended
#313Premium Blocks – Gutenberg Blocks, Patterns & Templates241403082k+Non-prefixed function
#314Product Editor Pro – WooCommerce Bulk Edit: Prices, Stock, Images, Titles, CSV Import & More242,1544,8331k+Non-prefixed global variable
#315ProfileGrid – User Profiles, Groups and Communities244842,4615k+Non-prefixed global variable
#316Quick Event Manager241523881k+Non-prefixed function
#317reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#318RSFirewall!245635214k+Output is not escaped
#319RSVP and Event Management243456243k+Direct Query
#320Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes24235330600Non-prefixed global variable
#321Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#322SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress242393041k+Direct Query
#323SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit246059281k+Non-prefixed global variable
#324SEO Ultimate2443726910k+Output is not escaped
#325Service Box Slider246181,410500Non-prefixed global variable
#326ShiftController Employee Shift Scheduling24358196700Output is not escaped
#327ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization2492632210k+Output is not escaped
#328Simple Membership242,2971,73440k+Unsafe printing function
#329SiteGuard WP Plugin24359350500k+Output is not escaped
#330Slideshow Gallery LITE248964145k+Output is not escaped
#331MoreConvert Wishlist for WooCommerce243,6816299k+Text Domain Mismatch
#332Softaculous241155010k+file system operations fread
#333GEO Plugin by Squirrly SEO241,19522430k+Missing Translators Comment
#334Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers243601,4721k+Nonce verification recommended
#335Tainacan241385921k+Direct Query
#336Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!24167225300k+Nonce verification recommended
#337Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non-prefixed global variable
#338User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder246633,35350k+Non-prefixed global variable
#339UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds24441235200k+Text Domain Mismatch
#340Video Conferencing with Zoom241,10544010k+Unsafe printing function
#341VikRentItems Flexible Rental Management System244,7554,639600Non-prefixed global variable
#342PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#343WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247334995k+Output is not escaped
#344Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels241,6151,37770k+Text Domain Mismatch
#345Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates2452213510k+Output is not escaped
#346NextMove Lite – Thank You Page for WooCommerce2491685710k+Non-prefixed global variable
#347wallee24331220400Exception output is not escaped
#348EU VAT Assistant for WooCommerce241,7424955k+Non Singular String Literal Domain
#349Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers244801,2727k+Non-prefixed function
#350Yoast SEO – Advanced SEO with real-time guidance and built-in AI2415938610m+Non-prefixed global variable