PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_is_writeable

file system operations is writeable

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Intercom060716k+Non Prefixed Function Found
#2Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more1532163500k+Direct Query
#3Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#4Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#5SendPress Newsletters192,2931,4222k+Output Not Escaped
#6MAS Videos205191,6931k+Non Prefixed Variable Found
#7Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#8Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception Not Escaped
#9rtMedia for WordPress, BuddyPress and bbPress213636338k+Non Prefixed Constant Found
#10Captcha Them All213003236k+Output Not Escaped
#11Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#12FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#13Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction211,9185,06510k+Non Prefixed Hookname Found
#14Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#15Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#16File Manager Pro – Filester22565391100k+Missing Unslash
#17InfiniteWP Client222,2861,812200k+Exception Not Escaped
#18Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#19Simple Job Board226341,35510k+Non Prefixed Variable Found
#20WooCommerce221,3556,1297m+Non Prefixed Variable Found
#21File Manager227405201m+Unsafe Printing Function
#22Wp-Insert2226730110k+Output Not Escaped
#23Advanced Contact form 7 DB237611,95970k+Non Prefixed Variable Found
#24BSK PDF Manager231,5766257k+Text Domain Mismatch
#25NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23315631100k+Output Not Escaped
#26Slider Hero with Video Background, Animation231,5651,2533k+Text Domain Mismatch
#27Strong Testimonials2319239390k+Recommended
#28UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP236952,43420k+Non Prefixed Hookname Found
#29WP BackItUp Community Edition232579896k+Non Prefixed Variable Found
#30WP Migrate Lite – Migration Made Easy23368254200k+Exception Not Escaped
#31WP STAGING – WordPress Backup, Restore & Migration231,4141,327100k+Non Prefixed Variable Found
#32YITH WooCommerce Affiliates235491,5276k+Non Prefixed Variable Found
#33AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress245,2301,4647k+Output Not Escaped
#34Backuply – Backup, Restore, Migrate and Clone24704551700k+Non Prefixed Variable Found
#35Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN243,41086670k+Text Domain Mismatch
#36Import and export users and customers241,04635670k+Unsafe Printing Function
#37Limit Attempts by BestWebSoft – WordPress Anti-Bot and Security Plugin for Login and Forms245635484k+Text Domain Mismatch
#38Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception Not Escaped
#39PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non Prefixed Variable Found
#40Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress242,5762,103100k+Output Not Escaped
#41AdRotate Banner Manager251,36584620k+Unsafe Printing Function
#42All 404 Redirect to Homepage25140301200k+date date
#43CSS & JavaScript Toolbox2515561710k+Non Prefixed Class Found
#44Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin2596073860k+Text Domain Mismatch
#45VikBooking Hotel Booking Engine & PMS2513,2328,3128k+Output Not Escaped
#46VikRentCar Car Rental Management System255,5375,0484k+Non Prefixed Variable Found
#47WPvivid — Backup, Migration & Staging258991,461900k+Non Prefixed Namespace Found
#48Backup, Restore and Migrate your sites with XCloner2523886410k+Input Not Sanitized
#49Translate WordPress – Google Language Translator26200317100k+Non Prefixed Variable Found
#50Visitors Online by BestWebSoft265122691k+Text Domain Mismatch