| #1 | Connect Contact Form 7 and Mailchimp | 53 | 236 | 52 | 40k+ | | | Text Domain Mismatch |
| #2 | Database Addon for Contact Form 7 – CFDB7 | 40 | 35 | 56 | 600k+ | | | Nonce verification recommended |
| #3 | Conditional Fields for Contact Form 7 | 41 | 113 | 52 | 100k+ | | | Output is not escaped |
| #4 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #5 | ReCaptcha v2 for Contact Form 7 | 44 | 12 | 30 | 200k+ | | | Nonce verification recommended |
| #6 | Ultra Addons for Contact Form 7 | 24 | 1,538 | 460 | 60k+ | | | Text Domain Mismatch |
| #7 | Contact Form 7 – Dynamic Text Extension | 39 | 103 | 28 | 100k+ | | | Output is not escaped |
| #8 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #9 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #10 | Advanced Contact form 7 DB | 23 | 761 | 1,959 | 70k+ | | | Non-prefixed global variable |
| #11 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #12 | Contact Form 7 Captcha | 41 | 7 | 75 | 100k+ | | | Request data is not unslashed |
| #13 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #14 | Contact Form 7 Multi-Step Forms | 40 | 65 | 40 | 50k+ | | | Output is not escaped |
| #15 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #16 | Advanced Form Integration — Connect Forms to 200+ Apps | 22 | 5,771 | 4,678 | 10k+ | | | wp function not compatible with requires wp |
| #17 | CF7 Mate – AI Form Builder, Styler & Multi-Step Forms for Contact Form 7 | 93 | 3 | 9 | 20k+ | | | Non-prefixed class |
| #18 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #19 | Form Vibes – Database Manager for Forms | 31 | 176 | 284 | 10k+ | | | Text Domain Mismatch |
| #20 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #21 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #22 | WP Contact Slider – Contact Form Slider Widget | 24 | 1,355 | 2,589 | 9k+ | | | Non-prefixed global variable |
| #23 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #24 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 20k+ | | | Text Domain Mismatch |
| #25 | Contact Form 7 Modules | 60 | 47 | 15 | 5k+ | | | Text Domain Mismatch |
| #26 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 24 | 236 | 214 | 10k+ | | | Database parameter is not escaped |
| #27 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #28 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #29 | Controls for Contact Form 7 (Redirects, Analytics & Tracking) | 68 | 4 | 14 | 10k+ | | | Missing nonce verification |
| #30 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 6k+ | | | Text Domain Mismatch |
| #31 | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 24 | 534 | 1,559 | 3k+ | | | Non-prefixed global variable |
| #32 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #33 | Date Time Picker for Contact Form 7 | 97 | 8 | 2 | 20k+ | | | Text Domain Mismatch |
| #34 | Contact Form 7 Google Analytics | 90 | 6 | 5 | 7k+ | | | trademarked term |
| #35 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | | | Missing nonce verification |
| #36 | Awesome Contact Form7 for Elementor | 67 | 20 | 30 | 7k+ | | | Non-prefixed global variable |
| #37 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #38 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #39 | Cost Calculator for Contact Form 7 – Price Calculator Free | 92 | 261 | 10 | 6k+ | | | wp function not compatible with requires wp |
| #40 | FormCraft – Form Builder | 42 | 186 | 156 | 2k+ | | | Text Domain Mismatch |
| #41 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #42 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #43 | Contact Form to Any API | 97 | 1 | 15 | 8k+ | | | Non-prefixed class |
| #44 | Contact Form 7 – Success Page Redirects | 65 | 5 | 15 | 10k+ | | | Input is not sanitized |
| #45 | Post My CF7 Form | 74 | 21 | 168 | 2k+ | | | Non-prefixed global variable |
| #46 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | | | Output is not escaped |
| #47 | Active Campaign & Contact Form 7 | 43 | 40 | 27 | 3k+ | | | Output is not escaped |
| #48 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #49 | Slick Popup: Contact Form 7 Popup Plugin | 22 | 2,322 | 316 | 2k+ | | | Text Domain Mismatch |
| #50 | Message Bridge for Contact Form 7 and Telegram | 100 | | 0 | 10k+ | | | No open findings |