PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_is_writable

file system operations is writable

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151MasterStudy LMS WordPress Plugin – for Online Courses and Education231,4194,87510k+Non-prefixed global variable
#152Media Library Assistant231,1443,94370k+Nonce verification recommended
#153MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234885802k+Missing nonce verification
#154Next Active Directory Integration236832842k+Exception output is not escaped
#155NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23315631100k+Output is not escaped
#156Pagination Styler for WooCommerce238114451k+Output is not escaped
#157Patchstack – WordPress & Plugins Security2310748940k+Missing nonce verification
#158Postie2340726110k+Output is not escaped
#159PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output is not escaped
#160Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#161Product Watermark for WooCommerce236964572k+Output is not escaped
#162Real 3D Flipbook – 3D FlipBook, PDF FlipBook, PDF Viewer, PDF Embedder238561,36510k+Non-prefixed global variable
#163Robo Gallery – Photo & Image Slider231,29153040k+Output is not escaped
#164Manago AI & Leadoo AI236444291k+Unsafe printing function
#165Seraphinite Post .DOCX Source231,156110900Output is not escaped
#166Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#167Slider Hero with Video Background, Animation231,5651,2533k+Text Domain Mismatch
#168Smart Slider 323261268800k+Non-prefixed global variable
#169SiteOrigin Widgets Bundle23607455400k+Output is not escaped
#170Strong Testimonials2319239390k+Nonce verification recommended
#171The Events Calendar233,5113,851700k+Text Domain Mismatch
#172Travelpayouts237691106k+Output is not escaped
#173Product Options and Price Calculation Formulas for WooCommerce – Uni CPO232,5141,9291k+Output is not escaped
#174UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP236952,43420k+Non-prefixed hook name
#175W3 Total Cache23307678900k+Non-prefixed global variable
#176Cart PDF for WooCommerce235311721k+Exception output is not escaped
#177WHMCS Bridge232474724k+Nonce verification recommended
#178Predictive Search for WooCommerce23530644700Output is not escaped
#179Worth The Read238731383k+Text Domain Mismatch
#180WP BackItUp Community Edition232579896k+Non-prefixed global variable
#181Clone2324426240k+Output is not escaped
#182WP Editor2350233520k+Unsafe printing function
#183WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#184WP Migrate Lite – Migration Made Easy23368254200k+Exception output is not escaped
#185Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820240k+Missing Translators Comment
#186WP STAGING – WordPress Backup, Migration, Clone & Duplicate231,4891,549100k+Non-prefixed global variable
#187WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1193,51620k+Interpolated SQL is not prepared
#188Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#189Photo Engine (Media Organizer & Lightroom)232526502k+Direct Query
#190Yatra – Travel Booking & Tour Operator Software232,2113,994600Non-prefixed global variable
#191Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress232,3171,7145k+Output is not escaped
#192404 Solution244861,33810k+Non-prefixed class
#193A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#194AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output is not escaped
#195Ad Inserter – Ad Manager & AdSense Ads244,241811300k+Output is not escaped
#196Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#197All-In-One Security (AIOS) – Security and Firewall245521,2281m+Non-prefixed global variable
#198Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non-prefixed global variable
#199Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#200Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)241,8371,0631k+Text Domain Mismatch