PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_readfile

file system operations readfile

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2AnyComment174454495k+Output Not Escaped
#3Podlove Podcast Publisher182,3261,4293k+Output Not Escaped
#4Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#5WP Import Export Lite1873897940k+Non Prefixed Variable Found
#6Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#7Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization191,2952,6799k+Output Not Escaped
#8Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#9Link Library201,9411,39710k+Unsafe Printing Function
#10Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#11Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception Not Escaped
#12Backup Migration219811,09380k+Non Prefixed Variable Found
#13Free Downloads WooCommerce214303594k+Output Not Escaped
#14Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#15Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21521,959300k+Non Prefixed Variable Found
#16JCH Optimize219531334k+Output Not Escaped
#17Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#18Paysera Payment Gateway for WooCommerce211,8661957k+Exception Not Escaped
#19Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#20WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#21WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#22wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin211,3541,14070k+Output Not Escaped
#23Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#24Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots221,6042,01910k+Direct Query
#25Better WordPress Minify224124848k+Non Singular String Literal Domain
#26Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#27RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#28Download Manager222,2901,301100k+Output Not Escaped
#29FireBox Popups – Increase Sales and Grow Your Email List221538127k+Non Prefixed Variable Found
#30Gutenberg22628342300k+missing direct file access protection
#31Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#32InfiniteWP Client222,2861,812200k+Exception Not Escaped
#33Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#34LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#35MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.222,6192,45310k+Output Not Escaped
#36PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#37Seraphinite Accelerator2259425550k+Output Not Escaped
#38Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#3910Web Booster – Website speed optimization, Cache & Page Speed optimizer2251360180k+Non Prefixed Variable Found
#40Theme Editor2279868550k+Output Not Escaped
#41File Manager227405201m+Unsafe Printing Function
#42WP Super Minify • Minify, Compress and Cache HTML, CSS & JavaScript221642579k+Non Prefixed Constant Found
#43WP-WebAuthn229573962k+Exception Not Escaped
#44Advanced Contact form 7 DB237611,95970k+Non Prefixed Variable Found
#45BSK PDF Manager231,5766257k+Text Domain Mismatch
#46Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#47Front End PM239782,2645k+Non Prefixed Variable Found
#48Tracking and Consent Manager – WP Full Picture231,2803,2233k+Non Prefixed Variable Found
#49Kadence Blocks — Page Builder Toolkit for Gutenberg Editor23552,127600k+Non Prefixed Variable Found
#50Masteriyo LMS – LMS Course Builder, Quizzes & Certificates231971,7485k+Non Prefixed Variable Found