PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#51Wise Chat214705065k+Output Not Escaped
#52Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#53Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#54WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#55WP phpMyAdmin214,5286,43550k+Missing Arg Domain
#56Premium Packages – Sell Digital Products Securely212,7652,4443k+Output Not Escaped
#57WPScan – WordPress Security Scanner215272658k+Text Domain Mismatch
#58Frontend Admin by DynamiApps225,9223,20810k+Text Domain Mismatch
#59Booking for Appointments and Events Calendar – Amelia221,48948090k+Exception Not Escaped
#60Borderless – Addons and Templates for Elementor224381,3885k+Non Prefixed Variable Found
#61BuddyPress225839,008100k+Non Prefixed Function Found
#62Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#63Clearfy Cache – WordPress optimization plugin, Minify HTML, CSS & JS, Defer222,8581,27050k+Text Domain Mismatch
#64RegistrationMagic – User Registration Forms Plugin223,6545,0628k+Non Prefixed Variable Found
#65WP Customer Area223,30894110k+Text Domain Mismatch
#66Directorist: AI-Powered Business Directory, Listings & Classified Ads224432,12920k+Non Prefixed Variable Found
#67Dynamic QR Code – generator222382086k+missing direct file access protection
#68E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe Printing Function
#69Events Manager – Calendar, Bookings, Tickets, and more!224,7225,62170k+Output Not Escaped
#70Five Star Restaurant Menu and Food Ordering227526095k+Output Not Escaped
#71GeoDirectory – WP Business Directory Plugin and Classified Listings Directory224,4623,97210k+Output Not Escaped
#72Csomagpontok és Címkék WooCommerce-hez222,0017697k+Text Domain Mismatch
#73IMPress for IDX Broker221,0856367k+Text Domain Mismatch
#74Insert or Embed Articulate Content into WordPress226591,4372k+Non Prefixed Variable Found
#75Számlázz.hu integráció WooCommerce-hez221,1694607k+Text Domain Mismatch
#76InfiniteWP Client222,2861,812200k+Exception Not Escaped
#77LearnPress – WordPress LMS Plugin for Create and Sell Online Courses222,3613,38470k+Non Prefixed Variable Found
#78Newsletters222,9682,2482k+Text Domain Mismatch
#79PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#80Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#81Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non Prefixed Variable Found
#82Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non Prefixed Variable Found
#83Salon Booking System – Free Version226506193k+missing direct file access protection
#84ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044799300k+Non Prefixed Variable Found
#85Simple Job Board226341,35510k+Non Prefixed Variable Found
#86Slim Jetpack222,5861,9472k+Text Domain Mismatch
#87NextScripts: Social Networks Auto-Poster222,4081,13330k+Output Not Escaped
#88SportsPress – Sports Club & League Manager224602,24210k+Non Prefixed Variable Found
#89Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output Not Escaped
#90Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#91Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non Prefixed Variable Found
#92URL Shortify – Simple and Easy URL Shortener221,5202,68910k+Non Prefixed Variable Found
#93Welcart e-Commerce2210,37710,89610k+Text Domain Mismatch
#94WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9371,96910k+Non Prefixed Variable Found
#95WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non Prefixed Variable Found
#96WooCommerce221,3556,1297m+Non Prefixed Variable Found
#97Simple Shopping Cart2279653610k+Unsafe Printing Function
#98Asset CleanUp: Page Speed Booster222,0302,485100k+Non Prefixed Variable Found
#99File Manager227405201m+Unsafe Printing Function
#100WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222766835k+Recommended