PluginScore

Recently Scanned Form WordPress Plugins

107 indexed plugins

Plugins

107

Active Installs

2m+

Average Score

54

Audited

107

Recently Scanned

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Contact Form Query10001k+No open findings
#2Survey Maker by AYS255682,3976k+Non-prefixed global variable
#3Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More2436463740k+Non-prefixed global variable
#4MC4WP: Mailchimp for WordPress5712381m+Non-prefixed global variable
#5Contact Form Block346582500Non Singular String Literal Domain
#6Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder244,7451,27930k+Non Singular String Literal Domain
#7Iptanus File Upload255171,33710k+Non-prefixed function
#8Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder341535810k+Nonce verification recommended
#9SurveyX Builder – Easy Feedback, Poll, Quiz & Survey10012k+mismatched plugin name
#10AIO Forms – Craft Complex Forms Easily25189419700Mixed line endings
#11E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#12Newsletters, Email Marketing, SMS and Popups by Omnisend3552100k+Hidden files included
#13Omnisend for Contact Form 7 Add-On99121500Non-prefixed global variable
#14Kit (formerly ConvertKit) for WPForms9611161k+Non-prefixed global variable
#15The Innovative Form Builder – IvyForms22750309800Exception output is not escaped
#16Hash Form – Drag & Drop Form Builder4192753k+Non-prefixed global variable
#17Conditional Fields for Contact Form 74110653100k+Output is not escaped
#18Confirm Plus Contact Form 78210157k+Non Singular String Literal Domain
#19Laposta Signup Basic28276672k+Output is not escaped
#20SpreadsheetConverter Calculator99241600Text Domain Mismatch
#21Dynamics 365 Integration24383166600Output is not escaped
#22MailerLite – Signup forms (official)36430158100k+Output is not escaped
#23FormLift for Keap (Legacy) Web Forms30162315400Request data is not unslashed
#24Mailster Cool Captcha426528400Text Domain Mismatch
#25Sellsy22586490400Non Singular String Literal Domain
#26involve.me – Create Surveys, Quizzes, Calculators & Forms as Embedded Widgets or Pop-ups3915832400Text Domain Mismatch
#27Enormail Sign Up Forms36133126400Output is not escaped
#28WP Subscription Forms – Subscription Form Plugin for WordPress34131220400Non-prefixed global variable
#29Submission DOM tracking for Contact Form 7411448400Text Domain Mismatch
#30Visual Builder for Contact Form 7402043500Output is not escaped
#31More Mails for CF778136500Text Domain Mismatch
#32Subscribe to Unlock Lite – Opt In Content Locker Plugin for WordPress35106145500Non-prefixed global variable
#33Contact Form 7 to Mailjet407039500Output is not escaped
#34PDF Forms Filler for WPForms3616154600Text Domain Mismatch
#35TotalSurvey for Survey, Quiz and Form4629033600Missing direct file access protection
#36Gravity Forms Directory27202457600Non-prefixed global variable
#37uCalc35788600Text Domain Mismatch
#38Doppler Easy Multichannel Marketing enhanced with IA96116600wp function not compatible with requires wp
#39Integrate Ecomail and Elementor Forms96284600Text Domain Mismatch
#40Gravity Forms + Stripe27368210600Output is not escaped
#41Customize Submit Button for Gravity Forms9880600Text Domain Mismatch
#42Add-on Gravity Forms – MailPoet 3393133600Output is not escaped
#43Honeypot Plus for Contact Form 777317800Missing nonce verification
#44Gravity Forms Data Persistence Add-On Reloaded401438600Input is not sanitized
#45Improving Search Form Accessibility9910700outdated tested upto header
#46WP Eventbrite Embedded Checkout52497700Text Domain Mismatch
#47Gravity Forms: Multiple Form Instances3566700Hidden files included
#48Contact Form Generator : Creative form builder for WordPress271,0761,510800Output is not escaped
#49Contact Form 7 Gated Content3612236800Short PHP open tag found
#50Advanced Custom Fields: reCAPTCHA Field3410453800Text Domain Mismatch