PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_fread

file system operations fread

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#3AnyComment174454495k+Output Not Escaped
#4wpForo Forum174,0332,92220k+Unsafe Printing Function
#5WPtouch – Make your WordPress Website Mobile-Friendly171,46632550k+Text Domain Mismatch
#6Podlove Podcast Publisher182,3261,4293k+Output Not Escaped
#7Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#8WP Import Export Lite1873897940k+Non Prefixed Variable Found
#9Download Monitor194251,36480k+Non Prefixed Hookname Found
#10Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#12Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#13Razorpay Payment Button Plugin19486982k+Exception Not Escaped
#14Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non Prefixed Variable Found
#15WP Email Template193423502k+Exception Not Escaped
#16Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#17Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#18Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#19Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#20WPJAM Basic203283564k+Output Not Escaped
#21Backup Migration219811,09380k+Non Prefixed Variable Found
#22rtMedia for WordPress, BuddyPress and bbPress213636338k+Non Prefixed Constant Found
#23CallTrackingMetrics219232863k+Unsafe Printing Function
#24Captcha Them All213003236k+Output Not Escaped
#25Smart Grid-Layout Design for Contact Form 7211,12673410k+Output Not Escaped
#26Comet Cache2185724520k+Output Not Escaped
#27Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#28EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#29FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#30MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non Prefixed Variable Found
#31Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#32Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred211,4693,33310k+Non Prefixed Variable Found
#33Packeta218023338k+Exception Not Escaped
#34Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#35Razorpay Quick Payments21399633k+Exception Not Escaped
#36Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#37Rocket Maintenance Mode & Coming Soon Page211,1761,4064k+Non Prefixed Variable Found
#38Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#39Buckaroo Woocommerce Payments Plugin215633262k+Exception Not Escaped
#40WebP Express21160427300k+Non Prefixed Variable Found
#41Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#42PPOM – Product Addons & Custom Fields for WooCommerce213361,32520k+Non Prefixed Variable Found
#43Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#44WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#45WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#46wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#47Ajax Load More – Infinite Scroll, Load More, & Lazy Load2264159540k+Unsafe Printing Function
#48All-in-One Video Gallery229112,89220k+Non Prefixed Variable Found
#49Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#50Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query