PluginScore

WordPress.WP.AlternativeFunctions.rand_rand

rand rand

The plugin uses a random function that may not be appropriate for the task.

medium weight

Why It Shows Up

The scan found functions such as `rand()`, `mt_rand()`, `srand()`, or `mt_srand()`.

Why It Matters

General random functions are not suitable for security-sensitive tokens and manual seeding can reduce randomness.

How to Fix

  • Use `wp_rand()` for ordinary WordPress randomness.
  • Use PHP cryptographic randomness for security-sensitive tokens.
  • Avoid manual random seeding unless there is a narrow, documented reason.

Affected Plugins

RankPluginScoreErrorsWarningsInstallsUpdatedTop Issue
#1Themify Builder95,1952,0965k+Text Domain Mismatch
#2JetBackup – Backup, Restore & Migrate101,559145100k+Exception Not Escaped
#3wpForo Forum174,0332,92220k+Unsafe Printing Function
#4Prime Slider Addons for Elementor183,500230100k+Text Domain Mismatch
#5Podlove Podcast Publisher182,3261,4293k+Output Not Escaped
#6Shopping Cart & eCommerce Store185,45917,2984k+Non Prefixed Variable Found
#7WP Import Export Lite1873897940k+Non Prefixed Variable Found
#8WP Directory Kit182,1192,6172k+Non Prefixed Variable Found
#9Element Pack – Widgets, Templates & Addons for Elementor199,448517100k+Text Domain Mismatch
#10Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)193,2753,22810k+Output Not Escaped
#11Matomo Analytics – Powerful, Privacy-First Insights for WordPress191,909878100k+Exception Not Escaped
#12Realtyna Organic IDX plugin + WPL Real Estate199473,6532k+Non Prefixed Variable Found
#13Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)195413853m+Missing Translators Comment
#14Membership Plugin – Kadence Memberships195,0822,9829k+Text Domain Mismatch
#15Brizy – Page Builder2058972070k+Output Not Escaped
#16Filter Everything — WordPress & WooCommerce Filters2056873050k+Output Not Escaped
#17GiveWP – Donation Plugin and Fundraising Platform203,4353,580100k+Output Not Escaped
#18Link Library201,9411,39710k+Unsafe Printing Function
#19Nimble Page Builder201,5911,68430k+Missing Arg Domain
#20Pix por Piggly (para Woocommerce)205471954k+Exception Not Escaped
#21Robin Image Optimizer – Unlimited Image Optimization, WebP & AVIF20557541100k+Output Not Escaped
#22Razorpay for WooCommerce20974855100k+Non Prefixed Function Found
#23WPJAM Basic203283564k+Output Not Escaped
#24Backup Migration219811,09380k+Non Prefixed Variable Found
#25CallTrackingMetrics219232863k+Unsafe Printing Function
#26Captcha Them All213003236k+Output Not Escaped
#27CartFlows – Funnel Builder & Checkout Plugin for WooCommerce21461614200k+Text Domain Mismatch
#28Duplicator – Backups & Migration Plugin – Cloud Backups, Scheduled Backups, & More212,5721,2771m+Output Not Escaped
#29ERP: Complete HR, Accounting & CRM Suite with Recruitment and WooCommerce CRM Support218295,9665k+Direct Query
#30EventPrime – Events Calendar, Bookings and Tickets218724,2977k+Non Prefixed Variable Found
#31Feeds for YouTube (YouTube video, channel, and gallery plugin)21558978100k+Output Not Escaped
#32Campaign Monitor for WordPress213864612k+Non Prefixed Variable Found
#33JCH Optimize219531334k+Output Not Escaped
#34MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder211,1333,0112k+Non Prefixed Variable Found
#35MotoPress Hotel Booking213,0611,03710k+Text Domain Mismatch
#36Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages211,1732,9839k+Non Prefixed Variable Found
#37User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor216961,48350k+Recommended
#38Five Star Restaurant Reservations – WordPress Booking Plugin211,0991,14710k+Output Not Escaped
#39Royal Addons for Elementor – Addons and Templates Kit for Elementor2113,0112,530600k+Text Domain Mismatch
#40Professional Social Sharing Buttons, Icons & Related Posts – Shareaholic2132718110k+Output Not Escaped
#41Smart Forms – when you need more than just a contact form217765745k+Output Not Escaped
#42ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin2119066030k+Non Prefixed Variable Found
#43Revive Social – Social Media Auto Post and Scheduling Automation Plugin2125542520k+Non Prefixed Hookname Found
#44WCFM – Frontend Manager for WooCommerce214,7215,06720k+Non Prefixed Variable Found
#45WebP Express21160427300k+Non Prefixed Variable Found
#46Wise Chat214705065k+Output Not Escaped
#47Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ Tools217863,39530k+Non Prefixed Variable Found
#48Wordfence Security – Firewall, Malware Scan, and Login Security211,5922,9735m+Output Not Escaped
#49WP-Lister Lite for eBay216,6975,1292k+Output Not Escaped
#50WP phpMyAdmin214,5286,43550k+Missing Arg Domain