PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_readfile

file system operations readfile

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,119986400k+Text Domain Mismatch
#52Photo Gallery by 10Web – Mobile-Friendly Image Gallery234,1591,553100k+Output Not Escaped
#53Local Google Analytics for WordPress – caches external requests235511993k+Output Not Escaped
#54Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management232952984k+Non Prefixed Variable Found
#55Slider by 10Web – Responsive Image Slider235,81497610k+Output Not Escaped
#56SiteOrigin Widgets Bundle23607455400k+Output Not Escaped
#57Strong Testimonials2319239390k+Recommended
#58WP BackItUp Community Edition232579896k+Non Prefixed Variable Found
#59WP Compress – Instant Performance & Speed Optimization233,0532,38410k+Non Singular String Literal Domain
#60WP Editor2350233520k+Unsafe Printing Function
#61FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce231,1252,15320k+missing direct file access protection
#62WP Mega Menu239927928k+Non Prefixed Variable Found
#63WP Migrate Lite – Migration Made Easy23368254200k+Exception Not Escaped
#64WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#65404 Solution244831,08710k+Missing Unslash
#66A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#67AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output Not Escaped
#68Ad Inserter – Ad Manager & AdSense Ads244,241811300k+Output Not Escaped
#69Auto-Install Free SSL – Generate & Install Free SSL Certificates249911,4958k+Non Prefixed Variable Found
#70Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#71CM Pop-Up – Create engaging popups to capture attention and boost interaction244664089k+Output Not Escaped
#72Custom Twitter Feeds – A Tweets Widget or X Feed Widget24446922100k+Output Not Escaped
#73Customer Reviews for WooCommerce242,2052,45280k+Output Not Escaped
#74Doubly – Cross Domain Copy Paste for WordPress242525510k+Output Not Escaped
#75DSGVO All in one for WP24751,63720k+Non Prefixed Variable Found
#76eCommerce Product Catalog Plugin for WordPress246213,1777k+Non Prefixed Function Found
#77FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler243044397k+Non Prefixed Variable Found
#78Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#79InstaWP Connect – 1-click WP Staging & Migration2425381140k+Non Prefixed Variable Found
#80LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes244141,17710k+Non Prefixed Variable Found
#81Generate Images (AI) – Magic Post Thumbnail241,9401,7616k+Non Prefixed Variable Found
#82Mang Board WP241,2494,7209k+Non Prefixed Variable Found
#83My Agile Privacy® – CMP, Cookie Consent & Privacy Tools241,1706747k+Text Domain Mismatch
#84Newsletter – Send awesome emails from WordPress248942,212200k+Non Prefixed Variable Found
#85PeproDev Ultimate Invoice243792344k+Output Not Escaped
#86PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1602,407500k+Non Prefixed Namespace Found
#87SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator24351250500k+Text Domain Mismatch
#88Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non Prefixed Variable Found
#89Unlimited Elements For Elementor247092,092300k+Non Prefixed Variable Found
#90UpdraftPlus: WP Backup & Migration Plugin242772993m+Non Prefixed Variable Found
#91WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247314995k+Output Not Escaped
#92Yoast SEO – Advanced SEO with real-time guidance and built-in AI2415938610m+Non Prefixed Variable Found
#93WP Layouts243491463k+Text Domain Mismatch
#94SlimStat Analytics241,16973770k+Exception Not Escaped
#95Export All Posts, Products, Orders, Refunds & Users243631,1307k+Direct Query
#96WPeMatico RSS Feed Fetcher241,37658210k+Output Not Escaped
#97WpStream – Live Streaming, Video on Demand, Pay Per View241,7127404k+Text Domain Mismatch
#98Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation241,2113,15230k+Non Prefixed Variable Found
#99Advanced WordPress Reset – Debug, Recover & Reset WP2547546420k+Output Not Escaped
#100Appointment Hour Booking – Booking Calendar252611,25410k+Non Prefixed Variable Found