PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#301Post Slider and Post Carousel with Post Vertical Scrolling Widget – A Responsive Post Slider245991,53210k+Non-prefixed global variable
#302Post Status Notifier Lite24984451700Missing direct file access protection
#303Premium Blocks – Gutenberg Blocks, Patterns & Templates241403082k+Non-prefixed function
#304Product Tabs Manager for WooCommerce246344822k+Text Domain Mismatch
#305Quick Event Manager241523881k+Non-prefixed function
#306reGenerate Thumbnails Advanced2422012270k+Unsafe printing function
#307Registrations for the Events Calendar – Event Registration Plugin244049447k+Non-prefixed global variable
#308Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More24141718100k+Non-prefixed global variable
#309Screen Reader Accessibility – WCAG, Text-to-Speech & AI Accessibility Fixes24235330600Non-prefixed global variable
#310Security Plugin, Firewall & Malware Scanner with Auto Removal241,18877030k+Output is not escaped
#311SEO Engine – Smart SEO with AI, Schema & Redirection for WordPress242393041k+Direct Query
#312SEOKEY – Powerful SEO plugin with Expert Insights and SEO Audit246059281k+Non-prefixed global variable
#313Servebolt Optimizer241,9586811k+Text Domain Mismatch
#314Service Box Slider246181,410400Non-prefixed global variable
#315ShiftController Employee Shift Scheduling24358196700Output is not escaped
#316Simple Membership242,2971,73440k+Unsafe printing function
#317SKT Templates – 100% Free Templates for Elementor & Gutenberg245531,35320k+Non-prefixed global variable
#318Slideshow Gallery LITE248964145k+Output is not escaped
#319MoreConvert Wishlist for WooCommerce243,6816299k+Text Domain Mismatch
#320SMS Alert – SMS & OTP for WooCommerce, Order Notifications & Abandoned Cart Recovery248321,8913k+Non-prefixed global variable
#321SiteOrigin Widgets Bundle24605455400k+Output is not escaped
#322Social Media Auto Publish241,4687136k+Unsafe printing function
#323Spotlight Social Feeds – Block, Shortcode, and Widget2441114760k+Output is not escaped
#324GEO Plugin by Squirrly SEO241,19522430k+Missing Translators Comment
#325StreamWeasels Online Status Bar245551,349500Non-prefixed global variable
#326StreamWeasels YouTube Integration245441,3841k+Non-prefixed global variable
#327Stripe Payment Forms by WP Simple Pay – Accept Credit Card Payments + Subscriptions with Stripe246346529k+Exception output is not escaped
#328Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform2442895610k+Output is not escaped
#329Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers243601,4721k+Nonce verification recommended
#330TI WooCommerce Wishlist24467546100k+Output is not escaped
#331Tiered Pricing Table for WooCommerce246061,99010k+Non-prefixed global variable
#332Ultra Addons for Contact Form 7241,54345260k+Text Domain Mismatch
#333Ultimate Maps by Supsystic241,03437410k+Non Singular String Literal Domain
#334Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin249382,935200k+Non-prefixed global variable
#335Ultimate Product Catalog245545255k+Unsafe printing function
#336Ultimate WP Mail24400546700Unsafe printing function
#337UpdraftPlus: WP Backup & Migration Plugin242772993m+Non-prefixed global variable
#338User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder246633,35350k+Non-prefixed global variable
#339Video Conferencing with Zoom241,10544010k+Unsafe printing function
#340VikRentItems Flexible Rental Management System244,7554,639600Non-prefixed global variable
#341Vimeography: Vimeo Video Gallery WordPress Plugin24982125k+Nonce verification recommended
#342PDF Ink Lite – Free PDF Watermark & Password Protection242265612k+Non-prefixed global variable
#343WCMultiShipping — Mondial Relay, Inpost & Chronopost for WooCommerce247334995k+Output is not escaped
#344Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping & Social Channels241,6151,38170k+Text Domain Mismatch
#345Disable Updates – Updates Manager, Disable Automatic Updates, Disable All Updates2452213510k+Output is not escaped
#346Coupon Affiliates – Affiliate Plugin for WooCommerce249473,1335k+Non-prefixed global variable
#347Product Attachment for WooCommerce241,2331,7777k+Non-prefixed global variable
#348wallee24331220400Exception output is not escaped
#349European VAT Compliance Assistant for WooCommerce245153173k+Output is not escaped
#350WPML Multilingual & Multicurrency for WooCommerce241,4531,618100k+SQL query is not prepared