PluginScore

Form WordPress Plugins with Most Issues

108 indexed plugins

Plugins

108

Active Installs

2m+

Average Score

54

Audited

108

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder234,7461,27930k+Non Singular String Literal Domain
#2Survey Maker by AYS255672,3976k+Non-prefixed global variable
#3Contact Form Generator : Creative form builder for WordPress271,0761,510800Output is not escaped
#4E2Pdf – Export Pdf Tool for WordPress221,07583610k+Unsafe printing function
#5Iptanus File Upload245091,32510k+Non-prefixed function
#6Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#7cformsII317775364k+Unsafe printing function
#8Contact Form Email254098989k+Non-prefixed global variable
#9Sellsy22586490400Non Singular String Literal Domain
#10The Innovative Form Builder – IvyForms22713250400Exception output is not escaped
#11Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#12Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2431861140k+Non-prefixed global variable
#13Quick Contact Form222606231k+Non-prefixed function
#14Gravity Forms Directory27202457600Non-prefixed global variable
#15AIO Forms – Craft Complex Forms Easily25189418700Mixed line endings
#16MailerLite – Signup forms (official)36430158100k+Output is not escaped
#17Gravity Forms + Stripe27368210600Output is not escaped
#18MW WP Form27334219200k+Output is not escaped
#19Dynamics 365 Integration24383166600Output is not escaped
#20FormLift for Keap (Legacy) Web Forms30162315400Request data is not unslashed
#21Advanced Forms for ACF331692783k+Non-prefixed hook name
#22Visual Form Builder348232920k+Direct Query
#23HTML Forms – Simple WordPress Forms Plugin3623116610k+Output is not escaped
#24RTMForm Builder3418820930k+Text Domain Mismatch
#25WP Subscription Forms – Subscription Form Plugin for WordPress34131220400Non-prefixed global variable
#26Forms: 3rd-Party Integration342341125k+Output is not escaped
#27Laposta Signup Basic28276672k+Output is not escaped
#28Formzu WP301671633k+Text Domain Mismatch
#29Send PDF for Contact Form 737223089k+Non-prefixed global variable
#30Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder36332110k+Nonce verification recommended
#31TotalSurvey for Survey, Quiz and Form4629033600Missing direct file access protection
#32VS Contact Form5533187k+Non-prefixed global variable
#33Hash Form – Drag & Drop Form Builder4392733k+Non-prefixed global variable
#34User Avatar261041734k+Non-prefixed constant
#35Gravity PDF5711615220k+Non-prefixed global variable
#36Contact Form Plugin33472202k+Non-prefixed function
#37PDF Forms Filler for CF736185793k+Text Domain Mismatch
#38Enormail Sign Up Forms36133126400Output is not escaped
#39Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress35106145500Non-prefixed global variable
#40MC4WP: Mailchimp for WordPress572381m+Non-prefixed global variable
#41PDF Forms Filler for WPForms3616154600Text Domain Mismatch
#42Contact Form 7 – Post Fields38167253k+Text Domain Mismatch
#43Contact Form 7 Signature Addon45147446k+Text Domain Mismatch
#44involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups3915832400Text Domain Mismatch
#45GravityWP – Merge Tags59161722k+Non-prefixed global variable
#46Conditional Fields for Contact Form 74110653100k+Output is not escaped
#47Contact Form 7 Gated Content3612236800Short PHP open tag found
#48Advanced Custom Fields: reCAPTCHA Field3410453800Text Domain Mismatch
#49Confetti42136173k+Unsafe printing function
#50Submission DOM tracking for Contact Form 7411448400Text Domain Mismatch