PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fputs

file system operations fputs

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#2WPJAM Basic203283564k+Output Not Escaped
#3Backup Migration219811,09380k+Non Prefixed Variable Found
#4Captcha Them All213003236k+Output Not Escaped
#5EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#6FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#7Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#8Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#9Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#10All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#11Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#12RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#13File Manager Pro – Filester22565391100k+Missing Unslash
#14FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#15Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder22409236700k+Text Domain Mismatch
#16InfiniteWP Client222,2861,812200k+Exception Not Escaped
#17Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#18Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#19NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#20ManageWP Worker225075651m+Non Prefixed Class Found
#21File Manager227405201m+Unsafe Printing Function
#22YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception Not Escaped
#23FV Flowplayer Video Player231,3111,45420k+Output Not Escaped
#24Restaurant Menu and Food Ordering233858532k+Non Prefixed Variable Found
#25MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO234885802k+Missing
#26MyWorks Sync for WooCommerce & QuickBooks Online232,2929,1015k+Non Prefixed Variable Found
#27RSVP and Event Management233466223k+Direct Query
#28Local Google Analytics for WordPress – caches external requests235511993k+Output Not Escaped
#29Softaculous231164910k+file system operations fread
#30پارسی دیت – Parsi Date23102289100k+Non Prefixed Hookname Found
#31WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#32WP Ultimate CSV Importer – WordPress Import & Export for CSV, XML & Excel231,1193,51620k+Interpolated Not Prepared
#33A2 Optimized WP – Turbocharge and secure your WordPress site2427123160k+Missing Arg Domain
#34Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#35WOLF – WordPress Posts Bulk Editor and Manager Professional244856234k+Output Not Escaped
#36FV Simpler SEO247663082k+Text Domain Mismatch
#37ProfileGrid – User Profiles, Groups and Communities244732,4636k+Non Prefixed Variable Found
#38Pz-LinkCard249511,58120k+Non Prefixed Variable Found
#39Security Plugin, Firewall & Malware Scanner with Auto Removal241,19178830k+Output Not Escaped
#40SiteGuard WP Plugin24329333500k+Output Not Escaped
#41Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non Prefixed Variable Found
#42Video Conferencing with Zoom241,10544010k+Unsafe Printing Function
#43European VAT Compliance Assistant for WooCommerce245153173k+Output Not Escaped
#44WP-Members Membership Plugin2466938250k+Output Not Escaped
#45WP Travel – Ultimate Travel Booking System, Tour Management Engine244271,9624k+Non Prefixed Hookname Found
#46WP Travel Engine – Tour Booking Plugin – Tour Operator Software242,0105,68820k+Non Prefixed Variable Found
#47Site Kit by Google – Analytics, Search Console, AdSense, Speed251,3042425m+missing direct file access protection
#48Secure Copy Content Protection and Content Locking2595879920k+Output Not Escaped
#49Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2596073860k+Text Domain Mismatch
#50VikBooking Hotel Booking Engine & PMS2513,2328,3128k+Output Not Escaped