PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_chmod

file system operations chmod

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2Intercom060716k+Non Prefixed Function Found
#3JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#4wpForo Forum174,0332,92220k+Unsafe Printing Function
#5WP Import Export Lite1873897940k+Non Prefixed Variable Found
#6Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#7Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#8Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#9Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non Prefixed Variable Found
#10Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#11Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#12BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non Prefixed Variable Found
#13Brizy – Page Builder2058972070k+Output Not Escaped
#14Filter Everything — WordPress & WooCommerce Filters2056873050k+Output Not Escaped
#15GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#16MBE eShip205277401k+Non Prefixed Variable Found
#17Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#18Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#19Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#20Backup Migration219811,09380k+Non Prefixed Variable Found
#21Captcha Them All213003236k+Output Not Escaped
#22Comet Cache2185724520k+Output Not Escaped
#23Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#24FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#25Campaign Monitor for WordPress213864612k+Non Prefixed Variable Found
#26Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#27Packeta218023338k+Exception Not Escaped
#28Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#29User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#30Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#31Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#32Buckaroo Woocommerce Payments Plugin215633262k+Exception Not Escaped
#33WebP Express21160427300k+Non Prefixed Variable Found
#34Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#35wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#36All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#37Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#38Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#39Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#40RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#41WP Customer Area223,30894110k+Text Domain Mismatch
#42Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#43Download Manager222,2901,301100k+Output Not Escaped
#44E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#45File Manager Pro – Filester22565391100k+Missing Unslash
#46Anti-Malware Security and Brute-Force Firewall22544965100k+Output Not Escaped
#47InfiniteWP Client222,2861,812200k+Exception Not Escaped
#48Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider22207323500k+Non Prefixed Variable Found
#49Modula Image Gallery – Photo Grid & Video Gallery22474436100k+Text Domain Mismatch
#50Motors – Car Dealership & Classified Listings Plugin225,3405,9589k+Text Domain Mismatch