PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fopen

file system operations fopen

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2Intercom060716k+Non Prefixed Function Found
#3Plugin Check (PCP)012813210k+Exception Not Escaped
#4Themify Builder95,1952,0965k+Text Domain Mismatch
#5JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#6AnyComment174454495k+Output Not Escaped
#7wpForo Forum174,0332,92220k+Unsafe Printing Function
#8WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#9Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#10WP Import Export Lite1873897940k+Non Prefixed Variable Found
#11Download Monitor194251,36480k+Non Prefixed Hookname Found
#12Event Organiser191,10654420k+Text Domain Mismatch
#13Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#14Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#15Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#16Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#17Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#18BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot205081,40630k+Non Prefixed Variable Found
#19Brizy – Page Builder2058972070k+Output Not Escaped
#20GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#21Link Library201,9411,39710k+Unsafe Printing Function
#22Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#23Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#24Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#25Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#26WPJAM Basic203283564k+Output Not Escaped
#27Backup Migration219811,09380k+Non Prefixed Variable Found
#28rtMedia for WordPress, BuddyPress and bbPress213636338k+Non Prefixed Constant Found
#29Captcha Them All213003236k+Output Not Escaped
#30CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+Text Domain Mismatch
#31Smart Grid-Layout Design for Contact Form 7211,12673410k+Output Not Escaped
#32Comet Cache2185724520k+Output Not Escaped
#33Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#34Envo Extra2187860020k+Text Domain Mismatch
#35EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#36Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output Not Escaped
#37FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#38Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#39Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#40MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#41Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#42Packeta218023338k+Exception Not Escaped
#43Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#44User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#45Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#46Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#47Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#48Accept Stripe Payments2137388220k+Missing
#49Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#50WCFM – Frontend Manager for WooCommerce214,7215,06720k+Non Prefixed Variable Found