PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#3wpForo Forum174,0332,92220k+Unsafe Printing Function
#4Prime Slider Addons for Elementor183,500230100k+Text Domain Mismatch
#5Podlove Podcast Publisher182,3261,4293k+Output Not Escaped
#6Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#7WP Import Export Lite1873897940k+Non Prefixed Variable Found
#8WP Directory Kit182,1192,6172k+Non Prefixed Variable Found
#9Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#10Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,22810k+Output Not Escaped
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#12Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#13Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#14Brizy – Page Builder2058972070k+Output Not Escaped
#15Filter Everything — WordPress & WooCommerce Filters2056873050k+Output Not Escaped
#16GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#17Link Library201,9411,39710k+Unsafe Printing Function
#18Nimble Page Builder201,5911,68430k+Missing Arg Domain
#19Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#20Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#21Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#22WPJAM Basic203283564k+Output Not Escaped
#23Backup Migration219811,09380k+Non Prefixed Variable Found
#24CallTrackingMetrics219232863k+Unsafe Printing Function
#25Captcha Them All213003236k+Output Not Escaped
#26CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+Text Domain Mismatch
#27Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#28ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support218295,9665k+Direct Query
#29EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#30Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output Not Escaped
#31JCH Optimize219531334k+Output Not Escaped
#32MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#33Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#34User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#35Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#36Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#37Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output Not Escaped
#38Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#39ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non Prefixed Variable Found
#40Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#41WCFM – Frontend Manager for WooCommerce214,7215,06720k+Non Prefixed Variable Found
#42WebP Express21160427300k+Non Prefixed Variable Found
#43Wise Chat214705065k+Output Not Escaped
#44Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#45Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#46WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#47Premium Packages – Sell Digital Products Securely212,7652,4443k+Output Not Escaped
#48WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#49Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#50Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception Not Escaped