Most Downloaded Form WordPress Plugins
108 indexed plugins
Plugins
108
Active Installs
2m+
Average Score
54
Audited
108
Most Downloaded
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | Dynamics 365 Integration | 24 | 383 | 166 | 600 | Output is not escaped | ||
| #52 | GravityWP – CSS Selector | 98 | 2 | 4 | 4k+ | trademarked term | ||
| #53 | Mailchimp Widget by ProteusThemes | 66 | 17 | 9 | 1k+ | Output is not escaped | ||
| #54 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | Text Domain Mismatch | ||
| #55 | Multifile Upload Field for Contact Form 7 | 73 | 41 | 7 | 5k+ | Text Domain Mismatch | ||
| #56 | Laposta Signup Basic | 28 | 276 | 67 | 2k+ | Output is not escaped | ||
| #57 | Formzu WP | 30 | 167 | 163 | 3k+ | Text Domain Mismatch | ||
| #58 | Confirm Plus Contact Form 7 | 82 | 10 | 15 | 7k+ | Non Singular String Literal Domain | ||
| #59 | GravityWP – Merge Tags | 59 | 16 | 172 | 2k+ | Non-prefixed global variable | ||
| #60 | FormLift for Keap (Legacy) Web Forms | 30 | 162 | 315 | 400 | Request data is not unslashed | ||
| #61 | Confetti | 42 | 136 | 17 | 3k+ | Unsafe printing function | ||
| #62 | Contact Form 7 IE DatePicker and Number Spinner Fix | 97 | 5 | 5 | 1k+ | trademarked term | ||
| #63 | GravityWP – Count | 98 | 2 | 3 | 2k+ | trademarked term | ||
| #64 | Doppler Easy Multichannel Marketing enhanced with IA | 96 | 11 | 6 | 600 | wp function not compatible with requires wp | ||
| #65 | Customize Submit Button for Gravity Forms | 98 | 8 | 0 | 600 | Text Domain Mismatch | ||
| #66 | Mailster reCaptcha | 84 | 4 | 15 | 1k+ | Missing nonce verification | ||
| #67 | Contact Form Block | 33 | 64 | 73 | 500 | Non Singular String Literal Domain | ||
| #68 | Fluent Forms Connector for MailPoet | 98 | 28 | 7 | 1k+ | Text Domain Mismatch | ||
| #69 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | Output is not escaped | ||
| #70 | Form data to kintone | 56 | 25 | 22 | 1k+ | Output is not escaped | ||
| #71 | SpreadsheetConverter Calculator | 99 | 24 | 1 | 600 | Text Domain Mismatch | ||
| #72 | Add-on Gravity Forms – MailPoet 3 | 39 | 31 | 33 | 600 | Output is not escaped | ||
| #73 | Gravity Forms: Multiple Form Instances | 35 | 6 | 6 | 700 | Hidden files included | ||
| #74 | Sellsy | 22 | 586 | 490 | 400 | Non Singular String Literal Domain | ||
| #75 | WP Eventbrite Embedded Checkout | 52 | 49 | 7 | 700 | Text Domain Mismatch | ||
| #76 | Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress | 35 | 106 | 145 | 500 | Non-prefixed global variable | ||
| #77 | Advanced Custom Fields: Ninjaforms Add-on | 76 | 43 | 8 | 1k+ | Text Domain Mismatch | ||
| #78 | uCalc | 35 | 78 | 8 | 600 | Text Domain Mismatch | ||
| #79 | Contact Form 7 Confirm Email Field | 71 | 35 | 11 | 2k+ | Text Domain Mismatch | ||
| #80 | Contact Form 7 Gated Content | 36 | 122 | 36 | 800 | Short PHP open tag found | ||
| #81 | TotalSurvey for Survey, Quiz and Form | 46 | 290 | 33 | 600 | Missing direct file access protection | ||
| #82 | Multiple Form Instances Add-on for Gravity Forms | 82 | 5 | 5 | 800 | Missing direct file access protection | ||
| #83 | Advanced Custom Fields: reCAPTCHA Field | 34 | 104 | 53 | 800 | Text Domain Mismatch | ||
| #84 | TWST Login Block | 98 | 4 | 1 | 1k+ | Missing Translators Comment | ||
| #85 | WP Subscription Forms – Subscription Form Plugin for WordPress | 34 | 131 | 220 | 400 | Non-prefixed global variable | ||
| #86 | Store file uploads for Contact Form 7 | 76 | 5 | 6 | 1k+ | Output is not escaped | ||
| #87 | Flamix: Bitrix24 and Contact Form 7 integrations | 42 | 79 | 4 | 1k+ | Output is not escaped | ||
| #88 | International Telephone Input With Flags And Dial Codes | 98 | 7 | 7 | 1k+ | badly named files | ||
| #89 | Contact Form 7 to Mailjet | 40 | 70 | 39 | 600 | Output is not escaped | ||
| #90 | Submission DOM tracking for Contact Form 7 | 41 | 144 | 8 | 400 | Text Domain Mismatch | ||
| #91 | Address Autocomplete Anything | 40 | 94 | 32 | 900 | Unsafe printing function | ||
| #92 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | Text Domain Mismatch | ||
| #93 | Gravity Forms Data Persistence Add-On Reloaded | 40 | 14 | 38 | 700 | Input is not sanitized | ||
| #94 | Comments Shortcode | 98 | 3 | 1 | 900 | Missing direct file access protection | ||
| #95 | Contact Form to Brevo | 73 | 67 | 11 | 1k+ | Text Domain Mismatch | ||
| #96 | SurveyX Builder – Easy Feedback, Poll, Quiz & Survey | 81 | 22 | 2k+ | Interpolated SQL is not prepared | |||
| #97 | involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups | 39 | 158 | 32 | 400 | Text Domain Mismatch | ||
| #98 | The Innovative Form Builder – IvyForms | 22 | 750 | 309 | 600 | Exception output is not escaped | ||
| #99 | Omnisend for Contact Form 7 Add-On | 99 | 21 | 500 | Non-prefixed global variable | |||
| #100 | Honeypot Plus for Contact Form 7 | 77 | 3 | 17 | 700 | Missing nonce verification |