| #51 | Message Bridge for Contact Form 7 and Telegram | 100 | | 0 | 10k+ | | | No open findings |
| #52 | Contact Form 7 Signature Addon | 45 | 147 | 44 | 6k+ | | | Text Domain Mismatch |
| #53 | International Telephone Input for Contact Form 7 | 53 | 18 | 10 | 8k+ | | | Missing direct file access protection |
| #54 | DS CF7 Math Captcha | 100 | 1 | 0 | 10k+ | | | trunk stable tag |
| #55 | Accept PayPal Payments using Contact Form 7 | 22 | 359 | 127 | 600 | | | Text Domain Mismatch |
| #56 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #57 | Masks Form Fields | 99 | 2 | 0 | 9k+ | | | Missing direct file access protection |
| #58 | Contact Form 7 Shortcode Enabler | 92 | 4 | 3 | 10k+ | | | trademarked term |
| #59 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #60 | WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database | 99 | | 3 | 600 | | | trademarked term |
| #61 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #62 | Country State City Dropdown CF7 | 40 | 35 | 54 | 5k+ | | | Direct Query |
| #63 | WPGSI: Spreadsheet Integration | 24 | 784 | 1,587 | 2k+ | | | Non-prefixed global variable |
| #64 | reCaptcha Add-On for FormCraft | 85 | 4 | 16 | 7k+ | | | Missing Version |
| #65 | Multilingual Contact Form 7 with Polylang | 39 | 50 | 30 | 9k+ | | | Text Domain Mismatch |
| #66 | Contact Form 7: Accessible Defaults | 69 | 3 | 28 | 5k+ | | | Nonce verification recommended |
| #67 | Contact Form 7 – Repeatable Fields | 99 | 1 | 2 | 6k+ | | | trademarked term |
| #68 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | | | Text Domain Mismatch |
| #69 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #70 | Widget Contact Form 7 | 67 | 22 | 2 | 1k+ | | | Output is not escaped |
| #71 | Sticky Floating Forms Lite | 54 | 26 | 29 | 1k+ | | | Non-prefixed global variable |
| #72 | Contact Form7: Autocomplete | 73 | 27 | 8 | 500 | | | Text Domain Mismatch |
| #73 | Popups – Submission Messages For Contact Form 7 | 85 | 2 | 7 | 3k+ | | | Input is not sanitized |
| #74 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 600 | | | Missing Arg Domain |
| #75 | Notifications for Forms & WordPress Actions | 25 | 309 | 282 | 1k+ | | | Text Domain Mismatch |
| #76 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 500 | | | Non Singular String Literal Domain |
| #77 | Contact Form 7 IE DatePicker and Number Spinner Fix | 97 | 5 | 5 | 1k+ | | | trademarked term |
| #78 | Contact Form 7 styler for Elementor Page Builder | 40 | 126 | 10 | 900 | | | Unsafe printing function |
| #79 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #80 | Contact Form 7 Spam Killer | 87 | 1 | 21 | 4k+ | | | Missing nonce verification |
| #81 | Database for CF7 | 41 | 37 | 32 | 2k+ | | | Text Domain Mismatch |
| #82 | HTML Template for CF7 | 42 | 21 | 27 | 1k+ | | | Non-prefixed global variable |
| #83 | Popup for Contact Form 7 | 73 | 13 | 7 | 800 | | | Setting is missing a sanitization callback |
| #84 | Mailster Contact Form 7 | 68 | 35 | 20 | 1k+ | | | Text Domain Mismatch |
| #85 | Advanced Custom Fields – Contact Form 7 Field | 45 | 59 | 8 | 2k+ | | | Output is not escaped |
| #86 | Contact Form 7 Email Validation | 74 | 8 | 10 | 1k+ | | | Input is not validated |
| #87 | Duplicate Killer – Prevent Duplicate Form Submissions | 39 | 57 | 103 | 1k+ | | | Non-prefixed global variable |
| #88 | PVB Contact Form 7 Calculator | 99 | 4 | 3 | 600 | | | Missing direct file access protection |
| #89 | Form data to kintone | 56 | 25 | 22 | 1k+ | | | Output is not escaped |
| #90 | Contact Form 7 GetResponse Extension | 40 | 88 | 18 | 1k+ | | | Text Domain Mismatch |
| #91 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #92 | Easy UTM Tracking with Contact Form 7 | 85 | 3 | 10 | 2k+ | | | Input is not validated |
| #93 | UniqueID for Contact Form 7 | 64 | 21 | 18 | 2k+ | | | Text Domain Mismatch |
| #94 | Autopreenchimento de endereço em formulários | 96 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #95 | Autocomplete Location Field for Contact Form 7 | 88 | 3 | 9 | 1k+ | | | Missing nonce verification |
| #96 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #97 | TextMe SMS | 97 | 3 | 13 | 600 | | | Non-prefixed global variable |
| #98 | Double Opt-In for Contact Form 7 & Avada – Secure, GDPR-Compliant Email Verification | 23 | 675 | 643 | 1k+ | | | Unsafe printing function |
| #99 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | | | Text Domain Mismatch |
| #100 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |