PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#251BrikPanel: WooCommerce Dashboard, Abandoned Cart Recovery, Google Sheets Sync, Inventory Management & Bulk Editor244,2611,423500Text Domain Mismatch
#252BuddyPress Group Email Subscription24513361k+Non-prefixed function
#253Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2431961140k+Non-prefixed global variable
#254Event Calendar – Calendar241,1111,2622k+Text Domain Mismatch
#255Captivate Sync241735571k+Non-prefixed global variable
#256CleanTalk Anti-Spam. Spam Firewall & Bot protection248211,099200k+Missing nonce verification
#257CM Pop-Up – Create engaging popups to capture attention and boost interaction244664088k+Output is not escaped
#258RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress248283,665500Request data is not unslashed
#259CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7241,0341,396300k+Non-prefixed global variable
#260Contact Form by Supsystic241,9136336k+Non Singular String Literal Domain
#261Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress245293571k+Text Domain Mismatch
#262WPBot – ChatBot Conversational Forms241,2541,2262k+Text Domain Mismatch
#263CRM Perks Forms – WordPress Form Builder248195771k+Output is not escaped
#264Custom Twitter Feeds – A Tweets Widget or X Feed Widget24446922100k+Output is not escaped
#265WP Customer Area243,30694110k+Text Domain Mismatch
#266Customer Reviews for WooCommerce242,2022,44580k+Output is not escaped
#267WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes)248452,6434k+Non-prefixed global variable
#268Democracy Poll243874367k+Short PHP open tag found
#269Doubly – Cross Domain Copy Paste for WordPress242525510k+Output is not escaped
#270Easy Invoice – Invoice Generator, PDF Quotes & Payments241,3662,013500Non-prefixed global variable
#271eCommerce Product Catalog Plugin for WordPress246213,1777k+Non-prefixed function
#272EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents247111,588100k+Output is not escaped
#273Event Tickets and Registration243,4094,21790k+Non-prefixed global variable
#274Etsy Integration For WooCommerce241,2464,643900Non-prefixed global variable
#275FeedWordPress244963199k+Missing Arg Domain
#276Fix Alt Text245443461k+Non Singular String Literal Domain
#277Fuse Social Floating Sidebar241,8381,57810k+Non-prefixed global variable
#278Photo Gallery – Responsive Image Galleries by Supsystic242409120k+Text Domain Mismatch
#279Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2453632410k+Text Domain Mismatch
#280Assets manager, dequeue scripts, dequeue styles for WordPress245922552k+Output is not escaped
#281Easy Google Maps241,76438920k+Non Singular String Literal Domain
#282Grid/List View for WooCommerce241,1275432k+Output is not escaped
#283GS Behance Portfolio – Display Projects, Gallery & Slider248551,617400Non-prefixed global variable
#284Social Slider Feed – Social Media Feed & Gallery Widgets2492970720k+Non-prefixed global variable
#285Joli Table Of Contents246531,7557k+Non-prefixed global variable
#286Event Booking Manager for WooCommerce – Registration, RSVP, Calendar & Tickets249692,1407k+Non-prefixed global variable
#287Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails244,6961,4805k+Text Domain Mismatch
#288MailerPress – Newsletter, email marketing & AI automation248053,9311k+Direct Query
#289Mang Board WP241,2134,7209k+Non-prefixed global variable
#290Media Library Folders2488980710k+Text Domain Mismatch
#291MxChat – AI Chatbot & Content Generation for WordPress243,2301,4052k+Text Domain Mismatch
#292Newsletter – Send awesome emails from WordPress248982,217200k+Non-prefixed global variable
#293Newsletter Subscription Form – User Subscriptions Form, Capture Email243858291k+Non-prefixed global variable
#294NEX-Forms – Ultimate Forms Plugin for WordPress242,0081,1956k+Text Domain Mismatch
#295Ninja Forms – The Contact Form Builder That Grows With You247491,533600k+Nonce verification recommended
#296NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar2426740440k+Non-prefixed hook name
#297Page Builder: Pagelayer – Drag and Drop website builder24769556400k+Output is not escaped
#298Participants Database249518947k+SQL query is not prepared
#299Database Manager – WP Adminer241,0052,75220k+Non-prefixed global variable
#300PixelYourSite – Your smart PIXEL (TAG) & API Manager241,1762,416500k+Non-prefixed namespace