| #1 | NEX-Forms ADD ON – Super Select | 100 | | 0 | 1k+ | | | No open findings |
| #2 | Contact Forms by Cimatti | 100 | 1 | 0 | 600 | | | Suppress Filters suppress filters |
| #3 | Online Forms — Customizable Payment, Contact, Quiz, Survey Form Builder – Jotform | 99 | 1 | 0 | 20k+ | | | outdated tested upto header |
| #4 | NEX-Forms ADD ON – Form Themes | 99 | 2 | 0 | 1k+ | | | Missing direct file access protection |
| #5 | NEX-Forms ADD ON – Digital Signatures | 99 | 1 | 0 | 600 | | | outdated tested upto header |
| #6 | Formsite | Embed online forms to collect orders, registrations, leads, and surveys | 98 | 3 | 2 | 900 | | | Missing direct file access protection |
| #7 | Quform WPML | 97 | 2 | 8 | 700 | | | trademarked term |
| #8 | Cool FormKit Lite – Advanced Form Builder for Elementor | 94 | 5 | 24 | 20k+ | | | Non-prefixed constant |
| #9 | فرم ساز فرم افزار | 94 | 8 | 9 | 500 | | | Non Enqueued Script |
| #10 | Fluent Forms Block | 92 | 4 | 18 | 2k+ | | | Non-prefixed global variable |
| #11 | WS Form LITE – Drag & Drop Contact Form Builder | 90 | 3 | 0 | 10k+ | | | SQL query is not prepared |
| #12 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |
| #13 | reCaptcha Add-On for FormCraft | 85 | 4 | 16 | 7k+ | | | Missing Version |
| #14 | FormFacade – Embed Google Forms in your website | 83 | 8 | 17 | 1k+ | | | Nonce verification recommended |
| #15 | FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More | 76 | 17 | 333 | 1k+ | | | Non-prefixed global variable |
| #16 | FlowForms – Conversational Form Builder | 75 | | 17 | 400 | | | Nonce verification recommended |
| #17 | Custom Form Builder, Contact Forms, Payment Forms, Surveys, Polls | 68 | 21 | 18 | 900 | | | Output is not escaped |
| #18 | Country and State Selection Addon for Gravity Forms | 61 | 14 | 26 | 1k+ | | | Non-prefixed constant |
| #19 | Leadpages | 60 | 4 | 53 | 10k+ | | | Direct Query |
| #20 | Gutenverse Form – Contact Form Builder, Block Form & Booking Form | 58 | 17 | 48 | 10k+ | | | Nonce verification recommended |
| #21 | Formstack Online Forms | 52 | 39 | 20 | 1k+ | | | Output is not escaped |
| #22 | FormCraft – Form Builder | 42 | 186 | 156 | 2k+ | | | Text Domain Mismatch |
| #23 | Hash Form – Drag & Drop Form Builder | 41 | 9 | 275 | 3k+ | | | Non-prefixed global variable |
| #24 | Custom Contact Forms | 40 | 15 | 114 | 6k+ | | | Missing nonce verification |
| #25 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | | | Output is not escaped |
| #26 | Quform Zapier | 39 | 60 | 123 | 1k+ | | | Nonce verification recommended |
| #27 | MailChimp Add-On for FormCraft | 39 | 56 | 29 | 800 | | | curl curl setopt |
| #28 | Quform Mailchimp | 39 | 65 | 147 | 800 | | | Nonce verification recommended |
| #29 | involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups | 39 | 158 | 32 | 400 | | | Text Domain Mismatch |
| #30 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 38 | 84 | 100 | 20k+ | | | SQL query is not prepared |
| #31 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #32 | Contact Form Widget – Responsive Contact Form, Query Form & Form Builder | 38 | 54 | 107 | 1k+ | | | Request data is not unslashed |
| #33 | Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder | 36 | 3 | 358 | 10k+ | | | Nonce verification recommended |
| #34 | SurveyJS: Drag & Drop Form Builder | 36 | 12 | 134 | 500 | | | Missing Version |
| #35 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #36 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #37 | DesignSetGo | 35 | 7 | 0 | 5k+ | | | Hidden files included |
| #38 | uCalc | 35 | 78 | 8 | 600 | | | Text Domain Mismatch |
| #39 | Lead Generation Form | 35 | 21 | 63 | 600 | | | Non-prefixed global variable |
| #40 | Contact Form Plugin | 33 | 47 | 220 | 2k+ | | | Non-prefixed function |
| #41 | Contact Form Builder by vcita | 32 | 666 | 174 | 700 | | | Text Domain Mismatch |
| #42 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | 31 | 167 | 332 | 5m+ | | | Non-prefixed global variable |
| #43 | ApplyOnline – Application Form Builder and Manager | 30 | 345 | 244 | 2k+ | | | Output is not escaped |
| #44 | SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz | 29 | 337 | 198 | 500k+ | | | Text Domain Mismatch |
| #45 | MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 28 | 62 | 246 | 600k+ | | | Non-prefixed global variable |
| #46 | Contact Form Generator : Creative form builder for WordPress | 27 | 1,076 | 1,510 | 800 | | | Output is not escaped |
| #47 | Kirki – Freeform Page Builder, Website Builder & Customizer | 26 | 190 | 801 | 500k+ | | | Nonce verification recommended |
| #48 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #49 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 597 | 10k+ | | | Non-prefixed global variable |
| #50 | Survey Maker by AYS | 25 | 567 | 2,394 | 6k+ | | | Non-prefixed global variable |