PluginScore

Most Installed Form WordPress Plugins

69 indexed plugins

Plugins

69

Active Installs

2m+

Average Score

55

Audited

69

Most Installed

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1MC4WP: Mailchimp for WordPress572381m+Non-prefixed global variable
#2MW WP Form27334219200k+Output is not escaped
#3Conditional Fields for Contact Form 74111352100k+Output is not escaped
#4MailerLite – Signup forms (official)36430158100k+Output is not escaped
#5Newsletters, Email Marketing, SMS and Popups by Omnisend3552100k+Hidden files included
#6Contact Form 7 add confirm42315150k+Text Domain Mismatch
#7Calculated Fields Form2428359940k+Non-prefixed global variable
#8Advanced Custom Fields: Gravity Forms Add-on78331330k+Text Domain Mismatch
#9Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#10reCAPTCHA for MW WP Form43371430k+Non Singular String Literal Domain
#11RTMForm Builder3418820930k+Text Domain Mismatch
#12Gravity PDF5711615220k+Non-prefixed global variable
#13Visual Form Builder348232920k+Direct Query
#14Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder36332110k+Nonce verification recommended
#15E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe printing function
#16Gutenverse Form – Contact Form Builder, Block Form & Booking Form58174810k+Nonce verification recommended
#17HTML Forms – Simple WordPress Forms Plugin3623116610k+Output is not escaped
#18Iptanus File Upload245091,32510k+Non-prefixed function
#19Wufoo Shortcode973310k+Missing direct file access protection
#20Contact Form Email254098989k+Non-prefixed global variable
#21Masks Form Fields99209k+Missing direct file access protection
#22Send PDF for Contact Form 737223089k+Non-prefixed global variable
#23Contact Form Clean and Simple98237k+Non-prefixed class
#24Confirm Plus Contact Form 74919367k+Non Singular String Literal Domain
#25VS Contact Form5533187k+Non-prefixed global variable
#26WP Login Form4814207k+Request data is not unslashed
#27Contact Form 7 Signature Addon45147446k+Text Domain Mismatch
#28Survey Maker by AYS255662,3976k+Non-prefixed global variable
#29Forms: 3rd-Party Integration342341125k+Output is not escaped
#30Multifile Upload Field for Contact Form 7734175k+Text Domain Mismatch
#31SearchWP Modal Search Form91995k+trademarked term
#32Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#33cformsII317775364k+Unsafe printing function
#34Advanced Comment Form646864k+Output is not escaped
#35Gravity Forms CSS Ready Class Selector721844k+Non Singular String Literal Domain
#36GravityWP – CSS Selector98244k+trademarked term
#37Hash Form – Drag & Drop Form Builder4392734k+Non-prefixed global variable
#38User Avatar261041734k+Non-prefixed constant
#39Add-on Contact Form 7 – MailPoet 34188123k+Output is not escaped
#40Advanced Forms for ACF331692783k+Non-prefixed hook name
#41Contact Form 7 – Post Fields38167253k+Text Domain Mismatch
#42Confetti42136173k+Unsafe printing function
#43Formzu WP301671633k+Text Domain Mismatch
#44PDF Forms Filler for CF736185793k+Text Domain Mismatch
#45Cognito Forms751342k+wp function not compatible with requires wp
#46Contact Form 7 Confirm Email Field7135112k+Text Domain Mismatch
#47Contact Form Plugin33472202k+Non-prefixed function
#48GravityWP – Count98232k+trademarked term
#49GravityWP – Merge Tags59161722k+Non-prefixed global variable
#50Laposta Signup Basic28275662k+Output is not escaped