PluginScore

Top Form WordPress Plugins

108 indexed plugins

Plugins

108

Active Installs

2m+

Average Score

54

Audited

108

Top Scores

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#51reCAPTCHA for MW WP Form43371430k+Non Singular String Literal Domain
#52Confetti42136173k+Unsafe printing function
#53Contact Form 7 add confirm42315150k+Text Domain Mismatch
#54Flamix: Bitrix24 and Contact Form 7 integrations427941k+Output is not escaped
#55Mailster Cool Captcha426528400Text Domain Mismatch
#56Add-on Contact Form 7 – MailPoet 34188123k+Output is not escaped
#57Conditional Fields for Contact Form 74110653100k+Output is not escaped
#58Submission DOM tracking for Contact Form 7411448400Text Domain Mismatch
#59Hash Form – Drag & Drop Form Builder4192753k+Non-prefixed global variable
#60Address Autocomplete Anything409432900Unsafe printing function
#61Contact Form 7 to Mailjet407039600Output is not escaped
#62Gravity Forms Data Persistence Add-On Reloaded401438700Input is not sanitized
#63Visual Builder for Contact Form 7402043500Output is not escaped
#64Add-on Gravity Forms – MailPoet 3393133600Output is not escaped
#65involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups3915832400Text Domain Mismatch
#66Contact Form 7 – Post Fields38167253k+Text Domain Mismatch
#67Send PDF for Contact Form 737223089k+Non-prefixed global variable
#68Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder36332210k+Nonce verification recommended
#69Contact Form 7 Gated Content3612236800Short PHP open tag found
#70Enormail Sign Up Forms36133126400Output is not escaped
#71HTML Forms – Simple WordPress Forms Plugin3623116610k+Output is not escaped
#72MailerLite – Signup forms (official)36430158100k+Output is not escaped
#73PDF Forms Filler for CF736185793k+Text Domain Mismatch
#74PDF Forms Filler for WPForms3616154600Text Domain Mismatch
#75Gravity Forms: Multiple Form Instances3566700Hidden files included
#76Newsletters, Email Marketing, SMS and Popups by Omnisend3542100k+Hidden files included
#77Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress35106145500Non-prefixed global variable
#78uCalc35788600Text Domain Mismatch
#79Advanced Custom Fields: reCAPTCHA Field3410453800Text Domain Mismatch
#80Forms: 3rd-Party Integration342341125k+Output is not escaped
#81RTMForm Builder3418820930k+Text Domain Mismatch
#82Visual Form Builder348232920k+Direct Query
#83WP Subscription Forms – Subscription Form Plugin for WordPress34131220400Non-prefixed global variable
#84Advanced Forms for ACF331692783k+Non-prefixed hook name
#85Contact Form Block336473500Non Singular String Literal Domain
#86Contact Form Plugin33472202k+Non-prefixed function
#87cformsII317775363k+Unsafe printing function
#88FormLift for Keap (Legacy) Web Forms30162315400Request data is not unslashed
#89Formzu WP301671633k+Text Domain Mismatch
#90Laposta Signup Basic28276672k+Output is not escaped
#91Contact Form Generator : Creative form builder for WordPress271,0761,510800Output is not escaped
#92Gravity Forms Directory27202457600Non-prefixed global variable
#93Gravity Forms + Stripe27368210600Output is not escaped
#94MW WP Form27334219200k+Output is not escaped
#95User Avatar261041734k+Non-prefixed constant
#96AIO Forms – Craft Complex Forms Easily25189418700Mixed line endings
#97Contact Form Email254098989k+Non-prefixed global variable
#98Survey Maker by AYS255672,3976k+Non-prefixed global variable
#99Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2431961140k+Non-prefixed global variable
#100Dynamics 365 Integration24383166600Output is not escaped