PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#101myCred Addons – Ultimate myCred Modules To Support WordPress Gamification and Loyalty Rewards222,3441,320400Output is not escaped
#102Newsletters222,9682,2482k+Text Domain Mismatch
#103Packlink PRO for WooCommerce2246816020k+badly named files
#104PAYCOMET for WooCommerce221,2064232k+Text Domain Mismatch
#105Smart Popup by Supsystic223,17250310k+Non Singular String Literal Domain
#106Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App221,5812,326300k+Non-prefixed global variable
#107Prime Mover – Migrate WordPress Website & Backups221,3261,60010k+Non-prefixed global variable
#108Salon Booking System – Free Version226556202k+Missing direct file access protection
#109Sellsy22586490400Non Singular String Literal Domain
#110ShortPixel Image Optimizer – Optimize Images, Convert WebP & AVIF221,044800300k+Non-prefixed global variable
#111Simple Job Board226341,35510k+Non-prefixed global variable
#112Slim Jetpack222,5861,9472k+Text Domain Mismatch
#113NextScripts: Social Networks Auto-Poster222,4081,13330k+Output is not escaped
#114SportsPress – Sports Club & League Manager224602,24610k+Non-prefixed global variable
#115Stylish Price List – Price Table Builder & QR Code Restaurant Menu226746783k+Output is not escaped
#116Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent222255198k+error log error log
#117Search & Replace Everything – Quick and Easy Way to Find and Replace Text, Links221,0441,79720k+Non-prefixed global variable
#118Welcart e-Commerce2210,37810,93110k+Text Domain Mismatch
#119WCFM – Frontend Manager for WooCommerce224,7545,05420k+Non-prefixed global variable
#120WCFM Marketplace – Multivendor Marketplace for WooCommerce221,9341,96610k+Non-prefixed global variable
#121WCFM Membership – WooCommerce Memberships for Multivendor Marketplace2255967510k+Non-prefixed global variable
#122WooCommerce221,3596,1727m+Non-prefixed global variable
#123Simple Shopping Cart2279653610k+Unsafe printing function
#124Asset CleanUp: Page Speed Booster222,0302,485100k+Non-prefixed global variable
#125Master Accordion ( Former WP Awesome FAQ Plugin )221,7741,286700Non-prefixed global variable
#126File Manager227405201m+Unsafe printing function
#127WP Fusion Lite – Marketing Automation and CRM Integration for WordPress222756835k+Nonce verification recommended
#128WP Umbrella: Update Backup Restore & Monitoring2292191970k+Exception output is not escaped
#129Wp-Insert2226730110k+Output is not escaped
#130SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Post Publisher2230724510k+Output is not escaped
#131WPBITS Addons For Elementor Page Builder229961,3992k+Non-prefixed global variable
#132WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell226,0022,7905k+Text Domain Mismatch
#133WUPO Group Attributes for WooCommerce225921,391400Non-prefixed global variable
#134Recipe Cards For Your Food Blog from Zip Recipes221,1261,7311k+Non-prefixed global variable
#135Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce231,1851,0271k+Text Domain Mismatch
#136Frontend Admin by DynamiApps235,9383,2089k+Text Domain Mismatch
#137Admin and Site Enhancements (ASE)23136331200k+Nonce verification recommended
#138AI Engine – The Chatbot, AI Framework & MCP for WordPress23408539100k+error log error log
#139Affiliate Super Assistent231,2802671k+Text Domain Mismatch
#140Autoptimize23288191800k+Output is not escaped
#141BlossomThemes Email Newsletter2333723920k+Output is not escaped
#142BSK PDF Manager231,5766257k+Text Domain Mismatch
#143BuddyPress235849,012100k+Non-prefixed function
#144Builderall for WordPress234,7821,3081k+Text Domain Mismatch
#145Business Directory Plugin – Easy Listing Directories for WordPress236111,06310k+Non-prefixed global variable
#146Products Suggestions for WooCommerce23707505700Output is not escaped
#147Geo Controller23914501k+Non-prefixed global variable
#148Classified Listing – AI-Powered Classified ads & Business Directory231552,0749k+Non-prefixed global variable
#149CLUEVO LMS, E-Learning Platform231,8431,176400Text Domain Mismatch
#150Content Egg – Affiliate Product Importer & Price Comparison231,2451,27510k+Non-prefixed global variable