PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_is_writable

file system operations is writable

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#52Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#53Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#54E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#55Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#56File Manager Pro – Filester22565391100k+Missing Unslash
#57Finale Lite – Sales Countdown Timer & Discount for WooCommerce221,0314514k+Output Not Escaped
#58GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#59Anti-Malware Security and Brute-Force Firewall22544965100k+Output Not Escaped
#60InfiniteWP Client222,2861,812200k+Exception Not Escaped
#61Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#62LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#63Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non Prefixed Variable Found
#64Newsletters222,9682,2482k+Text Domain Mismatch
#65NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#66NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#67Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#68Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#69Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#70Product Catalog Feed by PixelYourSite225813578k+Output Not Escaped
#71PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#72RabbitLoader Cache: Optimize your Website for Speed222411632k+Output Not Escaped
#73Seraphinite Accelerator2259425550k+Output Not Escaped
#74ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#75Simple Job Board226341,35510k+Non Prefixed Variable Found
#76NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#77SSL Zen — SSL Certificate Installer & HTTPS Redirects227791,57510k+Non Prefixed Variable Found
#78Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#79Tag Groups is the Advanced Way to Display Your Taxonomy Terms225754653k+Unsafe Printing Function
#8010Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non Prefixed Variable Found
#81Theme Editor2279868550k+Output Not Escaped
#82Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#83WooCommerce221,3556,1297m+Non Prefixed Variable Found
#84Advanced AJAX Product Filters222,6831,20550k+Text Domain Mismatch
#85ManageWP Worker225075651m+Non Prefixed Class Found
#86Asset CleanUp: Page Speed Booster222,0302,485100k+Non Prefixed Variable Found
#87File Manager227405201m+Unsafe Printing Function
#88WP Umbrella: Update Backup Restore & Monitoring2291590570k+Exception Not Escaped
#89WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non Prefixed Constant Found
#90WP-WebAuthn229573962k+Exception Not Escaped
#91WPBITS Addons For Elementor Page Builder229961,3992k+Non Prefixed Variable Found
#92WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#93WPSSO Core – Complete Schema Markup and Meta Tags221,4074125k+Missing Translators Comment
#94YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception Not Escaped
#95Advanced Custom Fields: Extended231,885329100k+Text Domain Mismatch
#96Admin and Site Enhancements (ASE)23136330200k+Recommended
#97Advanced Contact form 7 DB237611,95970k+Non Prefixed Variable Found
#98Advanced Product Labels for WooCommerce2392155920k+Text Domain Mismatch
#99Affiliate Super Assistent231,2802672k+Text Domain Mismatch
#100Autoptimize23288191800k+Output Not Escaped