PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_touch

file system operations touch

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#101Custom Scrollbar271841912k+Output Not Escaped
#102Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin271221353k+Non Prefixed Variable Found
#103MLSImport – Download and synchronize real estate data from various MLS (Multiple Listing Services)271545515k+Non Prefixed Variable Found
#104WP Hide & Security Enhancer2712437550k+Input Not Sanitized
#105Database Cleaner2913529710k+Direct Query
#106DoLogin Security293123057k+Output Not Escaped
#107PhastPress29955210k+Exception Not Escaped
#108Urvanov Syntax Highlighter30221873k+Output Not Escaped
#109SpeedyCache – Cache, Optimization, Performance3165115600k+Input Not Validated
#110Volunteer Sign Up Sheets329674011k+Output Not Escaped
#111Extra Product Options Builder for WooCommerce331011552k+Non Prefixed Hookname Found
#112Companion Sitemap Generator – Simple, Smart, and SEO-Ready33118577k+Missing Translators Comment
#113FastPixel Cache – Optimize Page Speed: Compress Images, Minify, Clean Database & CDN34493244k+Missing Unslash
#114Meow Lightbox34755210k+Non Singular String Literal Domain
#115Child Theme Creator by Orbisius34863910k+Output Not Escaped
#116Tidio – Live Chat & AI Chatbots34521980k+curl curl setopt
#117EWWW Image Optimizer352257291m+Direct Query
#118Imsanity353229200k+Direct Query
#119Less PHP Compiler35163473k+Exception Not Escaped
#120Database Backup for WordPress351288870k+Output Not Escaped
#121XServer Migrator35395310k+Interpolated Not Prepared
#122Constant Contact Forms36408120k+Missing
#123Custom PHP Settings361537610k+Output Not Escaped
#124Image Watermark367617940k+Missing
#125QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly361721088k+Non Singular String Literal Domain
#126Export Themes36122902k+Non Prefixed Constant Found
#127Skroutz & Bestprice XML feed for WooCommerce37161411k+Text Domain Mismatch
#128All-in-One WP Migration and Backup4028615m+Missing
#129MaxLimits – Increase Maximum Upload, Post & PHP Limits4199161k+Unsafe Printing Function
#130Simple Cache4133591k+Input Not Sanitized
#131Hyper Cache45361008k+Non Prefixed Variable Found
#132PDF Invoices & Packing Slips for WooCommerce – Challan49561513k+Non Prefixed Variable Found
#133Debug This5243322k+Missing Translators Comment
#134Easy SSL Plugin for SAKURA Rental Server62231750k+Input Not Sanitized