PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_rmdir

file system operations rmdir

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234855802k+Missing nonce verification
#102Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery232,129993400k+Text Domain Mismatch
#103NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization2331663990k+Output is not escaped
#104Photo Gallery by 10Web – Mobile-Friendly Image Gallery234,1591,553100k+Output is not escaped
#105Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#106Print My Blog – Print, PDF, & eBook Converter WordPress Plugin231,0771,6608k+Non-prefixed global variable
#107Seraphinite Post .DOCX Source231,156110900Output is not escaped
#108Slider by 10Web – Responsive Image Slider235,81497610k+Output is not escaped
#109Smart Slider 323261268800k+Non-prefixed global variable
#110Strong Testimonials2319439390k+Nonce verification recommended
#111The Events Calendar233,5093,850700k+Text Domain Mismatch
#112Travelpayouts237691106k+Output is not escaped
#113Worth The Read238731383k+Text Domain Mismatch
#114WP BackItUp Community Edition232579896k+Non-prefixed global variable
#115Clone2324426240k+Output is not escaped
#116WP-Lister Lite for Amazon233,0614,177800Output is not escaped
#117WP Migrate Lite – Migration Made Easy23369255200k+Exception output is not escaped
#118Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning231,11820230k+Missing Translators Comment
#119WP STAGING – WordPress Backup, Restore, Migration & Clone231,5041,567100k+Non-prefixed global variable
#120WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1583,64220k+Interpolated SQL is not prepared
#121WP Webhooks – Automate repetitive tasks by creating powerful automation workflows directly within WordPress234,37689020k+Output is not escaped
#122Comments – wpDiscuz236201,18070k+Non-prefixed global variable
#123Zephyr Project Manager236672,4541k+Non-prefixed global variable
#1241 Click Migration & Backup: Free WordPress Migration Plugin with Zero Downtime & Easy Clone24140193400Direct Query
#125404 Solution244831,35510k+Non-prefixed class
#126A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#127AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2341,4647k+Output is not escaped
#128Advanced Contact form 7 DB247641,96070k+Non-prefixed global variable
#129Backuply – Backup, Restore, Migrate and Clone24704551700k+Non-prefixed global variable
#130Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More243429306k+Non-prefixed global variable
#131Builderall for WordPress244,7781,3071k+Text Domain Mismatch
#132CleanTalk Anti-Spam. Spam Firewall & Bot protection248211,099200k+Missing nonce verification
#133CMP – Coming Soon & Maintenance Plugin by NiteoThemes249491,336200k+Non-prefixed global variable
#134Complianz – GDPR/CCPA Cookie Consent244874031m+Missing Arg Domain
#135Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#136Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress245293571k+Text Domain Mismatch
#137WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#138WP Customer Area243,30694110k+Text Domain Mismatch
#139Doubly – Cross Domain Copy Paste for WordPress242525510k+Output is not escaped
#140Enable Media Replace24212276600k+Output is not escaped
#141Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns24120684200k+Non-prefixed global variable
#142Export WordPress Pages to Static HTML & PDF — Static Site Export245093044k+Text Domain Mismatch
#143F12 Profiler24282451500Direct Query
#144Fast Velocity Minify2428225640k+Unsafe printing function
#145FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution2419375380k+Direct Query
#146Formidable PRO2PDF242184771k+Non-prefixed global variable
#147Fuse Social Floating Sidebar241,8381,57810k+Non-prefixed global variable
#148Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#149Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2453632410k+Text Domain Mismatch
#150Easy Google Maps241,76438920k+Non Singular String Literal Domain