PluginScore

Form WordPress Plugins with Most Issues

108 indexed plugins

Plugins

108

Active Installs

2m+

Average Score

54

Audited

108

Most Issues

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51Contact Form Block336473500Non Singular String Literal Domain
#52Easy Subscribe46132800Direct Query
#53Address Autocomplete Anything409432900Unsafe printing function
#54Contact Form 7 to Mailjet407039600Output is not escaped
#55Add-on Contact Form 7 – MailPoet 34188123k+Output is not escaped
#56wpDataTables integration for Forminator Forms4562381k+Text Domain Mismatch
#57Mailster Cool Captcha426528400Text Domain Mismatch
#58uCalc35788600Text Domain Mismatch
#59Flamix: Bitrix24 and Contact Form 7 integrations427941k+Output is not escaped
#60Contact Form 7 add confirm42315150k+Text Domain Mismatch
#61Contact Form to Brevo7367111k+Text Domain Mismatch
#62Advanced Comment Form646864k+Output is not escaped
#63Multilingual Forms for Fluent Forms with WPML6752161k+Text Domain Mismatch
#64Gutenverse Form – Contact Form Builder, Block Form & Booking Form58174810k+Nonce verification recommended
#65Add-on Gravity Forms – MailPoet 3393133600Output is not escaped
#66Visual Builder for Contact Form 7402043500Output is not escaped
#67WP Eventbrite Embedded Checkout52497700Text Domain Mismatch
#68Gravity Forms Data Persistence Add-On Reloaded401438700Input is not sanitized
#69Advanced Custom Fields: Ninjaforms Add-on764381k+Text Domain Mismatch
#70reCAPTCHA for MW WP Form43371430k+Non Singular String Literal Domain
#71Multifile Upload Field for Contact Form 7734175k+Text Domain Mismatch
#72Form data to kintone5625221k+Output is not escaped
#73Advanced Custom Fields: Gravity Forms Add-on78331330k+Text Domain Mismatch
#74Contact Form 7 Confirm Email Field7135112k+Text Domain Mismatch
#75Fluent Forms Connector for MailPoet982871k+Text Domain Mismatch
#76WP Login Form4814207k+Request data is not unslashed
#77Integrate Ecomail and Elementor Forms96284600Text Domain Mismatch
#78Storefront Homepage Contact Section822621k+Output is not escaped
#79Kit (formerly ConvertKit) for WPForms9611161k+Non-prefixed global variable
#80Mailchimp Widget by ProteusThemes661791k+Output is not escaped
#81Confirm Plus Contact Form 78210157k+Non Singular String Literal Domain
#82SpreadsheetConverter Calculator99241600Text Domain Mismatch
#83Gravity Forms CSS Ready Class Selector721844k+Non Singular String Literal Domain
#84SurveyX Builder – Easy Feedback, Poll, Quiz & Survey81222k+Interpolated SQL is not prepared
#85Omnisend for Contact Form 7 Add-On9921500Non-prefixed global variable
#86Honeypot Plus for Contact Form 777317700Missing nonce verification
#87Mailster reCaptcha844151k+Missing nonce verification
#88More Mails for CF778136500Text Domain Mismatch
#89SearchWP Modal Search Form91995k+trademarked term
#90Cognito Forms751342k+wp function not compatible with requires wp
#91Doppler Easy Multichannel Marketing enhanced with IA96116600wp function not compatible with requires wp
#92International Telephone Input With Flags And Dial Codes98771k+badly named files
#93Gravity Forms: Multiple Form Instances3566700Hidden files included
#94Store file uploads for Contact Form 776561k+Output is not escaped
#95Contact Form 7 IE DatePicker and Number Spinner Fix97551k+trademarked term
#96Multiple Form Instances Add-on for Gravity Forms8255800Missing direct file access protection
#97Customize Submit Button for Gravity Forms9880600Text Domain Mismatch
#98GravityWP – CSS Selector98244k+trademarked term
#99Newsletters, Email Marketing, SMS and Popups by Omnisend3542100k+Hidden files included
#100Wufoo Shortcode973310k+Missing direct file access protection