Contact WordPress Plugins with Most Issues

45 indexed plugins

Plugins

45

Active Installs

975k+

Average Score

55

Audited

45

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Contact Widgets For Elementor all the contact links you need in one place249081,188500Non-prefixed global variable
#2cformsII317775364k+Unsafe printing function
#3Contact Form Email254098989k+Non-prefixed global variable
#4Sellsy22586490400Non Singular String Literal Domain
#5Contact Form Builder by vcita32666174700Text Domain Mismatch
#6WP Email Template193423502k+Exception output is not escaped
#7Anything Popup371641852k+Non-prefixed global variable
#8Simple Webchat391422041k+Output is not escaped
#9VS Contact Form5533187k+Non-prefixed global variable
#10Flamingo4015228800k+Nonce verification recommended
#11Contact Form 7 – Post Fields38167253k+Text Domain Mismatch
#12Contact Info Widget4018431k+Output is not escaped
#13WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress357410910k+Nonce verification recommended
#14Database for Contact Form 738341287k+Missing nonce verification
#15WDV About Me Widget381508900Output is not escaped
#16Contact Form Block326477500Non Singular String Literal Domain
#17EchBay Phonering Alo3374471k+Output is not escaped
#18ATP Call Now41987700Output is not escaped
#19Contact Form 7 BWP reCAPTCHA Extension489210500Non Singular String Literal Domain
#20WP Click to Chat – Email, Live Chat, Call & Book Now Buttons9443471k+wp function not compatible with requires wp
#21Flamix: Bitrix24 and Contact Form 7 integrations427941k+Output is not escaped
#22Contact Form 7 add confirm42315150k+Text Domain Mismatch
#23Widget Contact Now42696600Output is not escaped
#24Contact Form 7 Widget417042k+Output is not escaped
#25Contact Information Widget51695500Output is not escaped
#26Speed Contact Bar4253205k+Output is not escaped
#27Contact Details4543291k+Non Singular String Literal Text
#28Visual Builder for Contact Form 7402043500Output is not escaped
#29Confirm Plus Contact Form 74919367k+Non Singular String Literal Domain
#30Inazo's flamingo automatically delete old messages4533204k+Output is not escaped
#31Awesome Contact Form7 for Elementor6720307k+Non-prefixed global variable
#32Multifile Upload Field for Contact Form 7734175k+Text Domain Mismatch
#33Sticky Side Buttons6427410k+Unsafe printing function
#34Storefront Homepage Contact Section822621k+Output is not escaped
#35More Mails for CF778136500Text Domain Mismatch
#36Contact Form 7 Translate Messages Extension771051k+Output is not escaped
#37Rich Contact Widget801329k+Output is not escaped
#38Speed up Contact Form 797110400wp function not compatible with requires wp
#39Store file uploads for Contact Form 776561k+Output is not escaped
#40Contact Form 7 IE DatePicker and Number Spinner Fix97551k+trademarked term
#41WPCasa Contact Form 78845500Output is not escaped
#42Contact Form Clean and Simple98237k+Non-prefixed class
#43Generate PDF using Contact Form 79334k+Input is not sanitized
#44Very Simple Google Maps99203k+Missing direct file access protection
#45Contact Form Query10001k+No open findings