| #101 | WOW Styler for CF7 – Visual Styler for Contact Form 7 Forms | 24 | 534 | 1,559 | 3k+ | | | Non-prefixed global variable |
| #102 | Lead info with country for Contact Form 7 | 70 | 25 | 28 | 3k+ | | | Text Domain Mismatch |
| #103 | Zoho CRM Lead Magnet | 30 | 101 | 1,025 | 3k+ | | | Request data is not unslashed |
| #104 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | | | Text Domain Mismatch |
| #105 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | | | Output is not escaped |
| #106 | Contact Form 7 Spam Killer | 87 | 1 | 21 | 4k+ | | | Missing nonce verification |
| #107 | Date Picker For Contact Form 7 | 78 | 3 | 8 | 4k+ | | | Missing nonce verification |
| #108 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | | | Output is not escaped |
| #109 | Contact Form 7 Polylang Module | 36 | 32 | 45 | 5k+ | | | Output is not escaped |
| #110 | Contact Form 7 Modules | 60 | 47 | 15 | 5k+ | | | Text Domain Mismatch |
| #111 | Digital Signature For Contact Form 7 | 84 | 22 | 11 | 5k+ | | | file system operations fwrite |
| #112 | Forms: 3rd-Party Integration | 34 | 234 | 112 | 5k+ | | | Output is not escaped |
| #113 | Country State City Dropdown CF7 | 40 | 35 | 54 | 5k+ | | | Direct Query |
| #114 | Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms | 27 | 720 | 367 | 5k+ | | | Text Domain Mismatch |
| #115 | Contact Form 7: Accessible Defaults | 69 | 3 | 28 | 5k+ | | | Nonce verification recommended |
| #116 | Contact Form 7 Connector | 30 | 324 | 196 | 5k+ | | | Text Domain Mismatch |
| #117 | Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) | 32 | 560 | 198 | 6k+ | | | Text Domain Mismatch |
| #118 | Contact Form 7 – Repeatable Fields | 99 | 1 | 2 | 6k+ | | | trademarked term |
| #119 | Contact Form 7 Signature Addon | 45 | 147 | 44 | 6k+ | | | Text Domain Mismatch |
| #120 | Contact Form 7 Google Analytics | 90 | 6 | 5 | 7k+ | | | trademarked term |
| #121 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | | | Missing nonce verification |
| #122 | Awesome Contact Form7 for Elementor | 67 | 20 | 30 | 7k+ | | | Non-prefixed global variable |
| #123 | reCaptcha Add-On for FormCraft | 85 | 4 | 16 | 7k+ | | | Missing Version |
| #124 | Business Essentials for Contact Form 7 | 24 | 674 | 403 | 8k+ | | | Text Domain Mismatch |
| #125 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #126 | International Telephone Input for Contact Form 7 | 53 | 18 | 10 | 8k+ | | | Missing direct file access protection |
| #127 | Contact Form to Any API | 97 | 1 | 15 | 8k+ | | | Non-prefixed class |
| #128 | Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms | 28 | 649 | 357 | 9k+ | | | Text Domain Mismatch |
| #129 | Send PDF for Contact Form 7 | 37 | 22 | 308 | 9k+ | | | Non-prefixed global variable |
| #130 | WP Contact Slider – Contact Form Slider Widget | 24 | 1,355 | 2,589 | 9k+ | | | Non-prefixed global variable |
| #131 | Masks Form Fields | 99 | 2 | 0 | 9k+ | | | Missing direct file access protection |
| #132 | Multilingual Contact Form 7 with Polylang | 39 | 50 | 30 | 9k+ | | | Text Domain Mismatch |
| #133 | MultiLine Files for Contact Form 7 | 38 | 98 | 40 | 9k+ | | | Text Domain Mismatch |
| #134 | Advanced Form Integration — Connect Forms to 200+ Apps | 22 | 5,771 | 4,678 | 10k+ | | | wp function not compatible with requires wp |
| #135 | Contact Form 7 – Success Page Redirects | 65 | 5 | 15 | 10k+ | | | Input is not sanitized |
| #136 | Bootstrap for Contact Form 7 | 35 | 35 | 73 | 10k+ | | | Nonce verification recommended |
| #137 | Message Bridge for Contact Form 7 and Telegram | 100 | | 0 | 10k+ | | | No open findings |
| #138 | Contact Form 7 Shortcode Enabler | 92 | 4 | 3 | 10k+ | | | trademarked term |
| #139 | Form Vibes – Database Manager for Forms | 31 | 176 | 284 | 10k+ | | | Text Domain Mismatch |
| #140 | Controls for Contact Form 7 (Redirects, Analytics & Tracking) | 68 | 4 | 14 | 10k+ | | | Missing nonce verification |
| #141 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #142 | Availability Datepicker – Booking Calendar for Contact Form 7 – Input WP | 38 | 344 | 30 | 20k+ | | | Text Domain Mismatch |
| #143 | Contact Form 7 – Phone mask field | 60 | 21 | 7 | 20k+ | | | Unsafe printing function |
| #144 | Date Time Picker for Contact Form 7 | 97 | 8 | 2 | 20k+ | | | Text Domain Mismatch |
| #145 | Country & Phone Field Contact Form 7 | 39 | 117 | 34 | 40k+ | | | Text Domain Mismatch |
| #146 | GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real Time | 25 | 614 | 1,431 | 40k+ | | | Non-prefixed global variable |
| #147 | Contact Form 7 Multi-Step Forms | 40 | 65 | 40 | 50k+ | | | Output is not escaped |
| #148 | Drag and Drop Multiple File Upload for Contact Form 7 | 36 | 82 | 36 | 60k+ | | | wp function not compatible with requires wp |
| #149 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #150 | Contact Form 7 Captcha | 41 | 7 | 75 | 100k+ | | | Request data is not unslashed |