PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_readfile

file system operations readfile

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2AnyComment174454495k+Output Not Escaped
#3Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#4WP Import Export Lite1873897940k+Non Prefixed Variable Found
#5Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#6Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#7Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#8Link Library201,9411,39710k+Unsafe Printing Function
#9Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#10Backup Migration219811,09380k+Non Prefixed Variable Found
#11Free Downloads WooCommerce214303594k+Output Not Escaped
#12Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#13Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#14JCH Optimize219531334k+Output Not Escaped
#15Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#16Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#17Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#18WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#19wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#20Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#21Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#22Better WordPress Minify224124848k+Non Singular String Literal Domain
#23Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#24RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#25Download Manager222,2901,301100k+Output Not Escaped
#26FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#27Gutenberg22628342300k+missing direct file access protection
#28Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#29InfiniteWP Client222,2861,812200k+Exception Not Escaped
#30Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#31LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#32MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output Not Escaped
#33PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#34Seraphinite Accelerator2259425550k+Output Not Escaped
#35Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#3610Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non Prefixed Variable Found
#37Theme Editor2279868550k+Output Not Escaped
#38File Manager227405201m+Unsafe Printing Function
#39WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non Prefixed Constant Found
#40Advanced Contact form 7 DB237611,95970k+Non Prefixed Variable Found
#41BSK PDF Manager231,5766257k+Text Domain Mismatch
#42Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#43Front End PM239782,2645k+Non Prefixed Variable Found
#44Tracking and Consent Manager – WP Full Picture231,2803,2233k+Non Prefixed Variable Found
#45Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non Prefixed Variable Found
#46Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231971,7485k+Non Prefixed Variable Found
#47MailPoet – Newsletters, Email Marketing, and Automation23858711500k+Exception Not Escaped
#48Media Library Assistant231,1443,94370k+Recommended
#49MultiParcels Shipping For WooCommerce231773834k+Missing Unslash
#50Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,119986400k+Text Domain Mismatch