PluginScore

WordPress.WP.AlternativeFunctions.file_system_operations_touch

file system operations touch

The plugin performs filesystem work with raw PHP functions where WordPress expects safer filesystem handling.

medium weight

Why It Shows Up

Plugin Check found functions such as `fopen`, `fwrite`, `chmod`, `mkdir`, `readfile`, or related operations.

Why It Matters

WordPress sites can use different filesystem permissions and transports. Raw filesystem calls can fail on common hosts or write to unsafe locations.

How to Fix

  • Use WordPress filesystem helpers when writing, reading, or changing files in plugin-managed paths.
  • Validate paths and keep writes inside directories owned by the plugin or WordPress uploads.
  • Never write PHP code from user input or remote responses.

References

WordPress Filesystem API

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1BulletProof Security05,0484,94920k+Output Not Escaped
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#3WP Import Export Lite1873897940k+Non Prefixed Variable Found
#4Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution191,218901100k+Exception Not Escaped
#5Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#6Microthemer Lite – Visual Editor to Customize CSS201,0041,69910k+Non Prefixed Variable Found
#7Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#8Powered Cache – Caching and Optimization for WordPress – Easily Improve PageSpeed & Web Vitals Score201472313k+Exception Not Escaped
#9Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#10Backup Migration219811,09380k+Non Prefixed Variable Found
#11rtMedia for WordPress, BuddyPress and bbPress213636338k+Non Prefixed Constant Found
#12Captcha Them All213003236k+Output Not Escaped
#13Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#14FileOrganizer – WordPress File Manager21536241200k+unlink unlink
#15LA-Studio Element Kit for Elementor218,3901,96410k+Text Domain Mismatch
#16Modular DS: Monitor, update, and backup multiple websites211618140k+Exception Not Escaped
#17Packeta218023338k+Exception Not Escaped
#18Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#19Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#20WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#21Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#22Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#23Code Profiler – WordPress Performance Profiling and Debugging Made Easy222654008k+Non Prefixed Variable Found
#24File Manager Pro – Filester22565391100k+Missing Unslash
#25InfiniteWP Client222,2861,812200k+Exception Not Escaped
#26Import WP – Export and Import CSV and XML files to WordPress225803304k+Exception Not Escaped
#27NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall221,2652,065100k+Non Prefixed Variable Found
#28NinjaScanner – Virus & Malware scan2259655130k+Non Prefixed Variable Found
#29Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#30PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP229844075k+Unsafe Printing Function
#31RabbitLoader Cache: Optimize your Website for Speed222411632k+Output Not Escaped
#32Seraphinite Accelerator2259425550k+Output Not Escaped
#33ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#34SNS Count Cache229181208k+Non Singular String Literal Domain
#35Swift Performance Lite222,3461,3257k+Text Domain Mismatch
#36ManageWP Worker225075651m+Non Prefixed Class Found
#37File Manager227405201m+Unsafe Printing Function
#38WP-WebAuthn229573962k+Exception Not Escaped
#39WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell225,9962,7905k+Text Domain Mismatch
#40YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports2265443510k+Exception Not Escaped
#41ЮKassa для WooCommerce225911689k+Echo Found
#42Autoptimize23288191800k+Output Not Escaped
#43Kadence Security – Password, Two Factor Authentication, and Brute Force Protection231,053967700k+Missing Translators Comment
#44Export WordPress Pages to Static HTML & PDF — Static Site Export234903015k+Text Domain Mismatch
#45Fuse Social Floating Sidebar231,8401,57310k+Non Prefixed Variable Found
#46FV Flowplayer Video Player231,3111,45420k+Output Not Escaped
#47Media Library Assistant231,1443,94370k+Recommended
#48Next Active Directory Integration236832842k+Exception Not Escaped
#49NitroPack – Performance, Page Speed & Cache Plugin for Core Web Vitals, CDN & Image Optimization23315631100k+Output Not Escaped
#50PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output Not Escaped