PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#151Free Theme Builder for Elementor – CRT Addons (Header, Footer, Archive, WooCommerce & 50+ Widgets)237912,331400Non-prefixed global variable
#152Currency Exchange for WooCommerce23692505500Output is not escaped
#153Easy Digital Downloads – eCommerce Payments and Subscriptions made easy233,72310,28340k+Non-prefixed namespace
#154Ecwid by Lightspeed Ecommerce Shopping Cart2333930720k+Missing direct file access protection
#155Error Log Monitor236941,41420k+Non-prefixed global variable
#156Essential Real Estate235295,0608k+Non-prefixed global variable
#157Events Addon for Elementor237791,3397k+Non-prefixed global variable
#158Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34290k+Non-prefixed global variable
#159Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light23386999400Non-prefixed global variable
#160Ezoic2343251610k+Output is not escaped
#161Fastcache by Host.it231,327203800Text Domain Mismatch
#162Finpose – Accounting for WooCommerce231,6491,307400Non-prefixed global variable
#163Image Photo Gallery Final Tiles Grid235781,50220k+Non-prefixed global variable
#164Flexmls® IDX Plugin231,2689571k+Output is not escaped
#165Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#166FV Flowplayer Video Player231,3111,45420k+Output is not escaped
#167GAinWP Google Analytics Integration for WordPress235251768k+Output is not escaped
#168Groovy Menu Plugin (Free)231,7292834k+Text Domain Mismatch
#169Ibtana – Ecommerce Product Addons231,5471,7186k+Non Singular String Literal Domain
#170IP Geo Block233995898k+Output is not escaped
#171Joli FAQ SEO – WordPress FAQ Plugin231,0831,526700Non-prefixed global variable
#172Justified Gallery235891,4178k+Non-prefixed global variable
#173King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder231,8343,87710k+Non-prefixed global variable
#174License Manager for WooCommerce231297976k+Nonce verification recommended
#175Link Whisper Free233,8825,30330k+Text Domain Mismatch
#176Locatoraid Store Locator233186451k+Non-prefixed global variable
#177Login With Ajax – Fast Logins, 2FA, Redirects2362352010k+Output is not escaped
#178MailPoet – Newsletters, Email Marketing, and Automation23931718500k+Exception output is not escaped
#179Master Slider – Responsive Touch Slider2380040860k+Output is not escaped
#180Media Library Assistant231,1313,75970k+Nonce verification recommended
#181Order Bump for WooCommerce231,7201,562600Output is not escaped
#182MotoPress Appointment Booking232,3628572k+Text Domain Mismatch
#183Restaurant Menu and Food Ordering233858532k+Non-prefixed global variable
#184MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar234,06548820k+Text Domain Mismatch
#185ND Shortcodes236212,42620k+Non-prefixed global variable
#186Ocean Extra231,4942,107500k+Non-prefixed global variable
#187PayPal Brasil para WooCommerce235543281k+Unsafe printing function
#188Photo Gallery by 10Web – Mobile-Friendly Image Gallery234,1591,553100k+Output is not escaped
#189Gallery PhotoBlocks239041,3453k+Non-prefixed global variable
#190Postie2340825910k+Output is not escaped
#191PowerPress Podcasting plugin by Blubrry234,8072,39420k+Output is not escaped
#192Pricing Table by Supsystic231,29944710k+Non Singular String Literal Domain
#193Primary Addon for Elementor237651,3067k+Non-prefixed global variable
#194Read More WP235701,3111k+Non-prefixed global variable
#195Request a Quote – Quote Forms for Any WordPress Site232401,099900Non-prefixed hook name
#196Restaurant & Cafe Addon for Elementor238891,3261k+Non-prefixed global variable
#197Manago AI & Leadoo AI236444291k+Unsafe printing function
#198SEO Redirection Plugin – 301 Redirect Manager2327272710k+Non-prefixed global variable
#199Local Google Analytics for WordPress – caches external requests235511993k+Output is not escaped
#200Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management232952984k+Non-prefixed global variable