| #101 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #102 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #103 | Multilingual Contact Form 7 with Polylang | 39 | 50 | 30 | 9k+ | | | Text Domain Mismatch |
| #104 | Innozilla Skins for Contact Form 7 | 39 | 152 | 22 | 2k+ | | | Output is not escaped |
| #105 | Serial Number for Contact Form 7 | 39 | 105 | 53 | 2k+ | | | Non Singular String Literal Domain |
| #106 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #107 | Contact Form 7 extension for Google Map fields | 39 | 118 | 58 | 500 | | | Missing Arg Domain |
| #108 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 10k+ | | | Text Domain Mismatch |
| #109 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #110 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | | | Missing nonce verification |
| #111 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | | | Text Domain Mismatch |
| #112 | Country Code Selector | 38 | 91 | 20 | 1k+ | | | Unsafe printing function |
| #113 | WPAppsDev – CF7 Form Submission Limit | 38 | 104 | 33 | 1k+ | | | Text Domain Mismatch |
| #114 | WP Redirects – Contact Form 7 | 38 | 50 | 71 | 400 | | | Unsafe printing function |
| #115 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #116 | Images Optimize and Upload CF7 | 37 | 130 | 36 | 600 | | | Non Singular String Literal Domain |
| #117 | Eazy CF Captcha | 37 | 93 | 54 | 500 | | | Text Domain Mismatch |
| #118 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #119 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 4k+ | | | Output is not escaped |
| #120 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | | | Short PHP open tag found |
| #121 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #122 | CF7 Submissions – Securely Store Contact Form 7 Data and Attachments, Reply to the Sender and more | 35 | 16 | 119 | 2k+ | | | Non-prefixed global variable |
| #123 | Email Validator for Contact Form 7 | 35 | 111 | 74 | 500 | | | SQL query is not prepared |
| #124 | CF7 Spreadsheets | 35 | 100 | 62 | 400 | | | Text Domain Mismatch |
| #125 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #126 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #127 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 5k+ | | | Text Domain Mismatch |
| #128 | User Registration Using Contact Form 7 | 32 | 103 | 15 | 400 | | | wp function not compatible with requires wp |
| #129 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #130 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #131 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #132 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #133 | Redirection for Contact Form 7 | 27 | 34 | 374 | 200k+ | | | Non-prefixed global variable |
| #134 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 27 | 246 | 225 | 10k+ | | | Database parameter is not escaped |
| #135 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #136 | Database for Contact Form 7, WPforms, Elementor forms | 26 | 317 | 489 | 60k+ | | | Non-prefixed global variable |
| #137 | Integrate Razorpay for Contact Form 7 | 26 | 152 | 97 | 500 | | | curl curl setopt |
| #138 | Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database | 25 | 716 | 1,509 | 10k+ | | | Non-prefixed global variable |
| #139 | Rate limiting for Contact Form 7 | 25 | 547 | 1,306 | 600 | | | Non-prefixed global variable |
| #140 | Advanced Contact form 7 DB | 24 | 765 | 1,961 | 70k+ | | | Non-prefixed global variable |
| #141 | Ultra Addons for Contact Form 7 | 24 | 1,556 | 453 | 60k+ | | | Text Domain Mismatch |
| #142 | Advanced Form Integration — Connect Forms to 200+ Apps | 24 | 5,740 | 4,560 | 10k+ | | | wp function not compatible with requires wp |
| #143 | WP Contact Slider – Contact Form Slider Widget | 24 | 1,355 | 2,589 | 9k+ | | | Non-prefixed global variable |
| #144 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #145 | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 24 | 534 | 1,559 | 3k+ | | | Non-prefixed global variable |
| #146 | WPGSI: Spreadsheet Integration | 24 | 784 | 1,587 | 2k+ | | | Non-prefixed global variable |
| #147 | Message Filter for Contact Form 7 | 24 | 1,044 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #148 | Double Opt-In for Contact Form 7 – Secure, GDPR-Compliant Email Verification | 24 | 233 | 441 | 1k+ | | | Non-prefixed hook name |
| #149 | Sitepact's Contact Form 7 Extension For Klaviyo | 24 | 541 | 1,412 | 500 | | | Non-prefixed global variable |
| #150 | Grid & Styler For Contact Form 7 And Divi | 23 | 548 | 1,341 | 500 | | | Non-prefixed global variable |