WordPress.WP.AlternativeFunctions.file_system_operations_pfsockopen
file system operations pfsockopen
The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.
Why It Shows Up
Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.
Why It Matters
WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.
How to Fix
- Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
- Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
- Never write PHP code from user input or remote responses.
References
Affected Plugins
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Pix por Piggly (para Woocommerce) | 20 | 547 | 195 | 4k+ | Exception output is not escaped | ||
| #2 | RexFeed – Product Feed Manager for WooCommerce – Google Shopping, Facebook, Amazon, ChatGPT & 200+ Channel Feeds | 21 | 2,462 | 3,406 | 10k+ | slow db query meta key | ||
| #3 | Buckaroo Woocommerce Payments Plugin | 21 | 638 | 321 | 2k+ | Exception output is not escaped | ||
| #4 | YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports | 22 | 654 | 435 | 10k+ | Exception output is not escaped | ||
| #5 | Simple Calendar – Google Calendar Plugin | 23 | 2,153 | 612 | 50k+ | Missing direct file access protection | ||
| #6 | Heureka | 23 | 534 | 237 | 400 | Exception output is not escaped | ||
| #7 | Next Active Directory Integration | 23 | 683 | 284 | 2k+ | Exception output is not escaped | ||
| #8 | EU VAT Assistant for WooCommerce | 24 | 1,742 | 495 | 5k+ | Non Singular String Literal Domain | ||
| #9 | DecaLog | 25 | 943 | 236 | 1k+ | Exception output is not escaped | ||
| #10 | Site Kit by Google – Analytics, Search Console, AdSense, Speed | 25 | 1,310 | 248 | 5m+ | Missing direct file access protection | ||
| #11 | Media Cloud Sync | 25 | 1,097 | 275 | 1k+ | Exception output is not escaped |