| #51 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #52 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,037 | 722 | 20k+ | | | Unsafe printing function |
| #53 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 594 | 10k+ | | | Non-prefixed global variable |
| #54 | RD Station | 74 | | 65 | 20k+ | | | Non-prefixed global variable |
| #55 | Integration for Elementor forms – Sendinblue | 65 | 94 | 56 | 7k+ | | | Text Domain Mismatch |
| #56 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 90k+ | | | Text Domain Mismatch |
| #57 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 3 | 252 | 10k+ | | | Dynamic hook name |
| #58 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #59 | LeadConnector | 100 | | 0 | 20k+ | | | No open findings |
| #60 | HubSpot All-In-One Marketing – Forms, Popups, Live Chat | 97 | 6 | 4 | 200k+ | | | Missing direct file access protection |
| #61 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #62 | Mailster Cool Captcha | 42 | 65 | 28 | 400 | | | Text Domain Mismatch |
| #63 | Gist All-In-One Marketing – Live Chat, Popups, Email | 69 | 24 | 11 | 500 | | | Output is not escaped |
| #64 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #65 | mosparo Integration | 35 | 114 | 301 | 900 | | | Missing nonce verification |
| #66 | Multi Step Form | 34 | 277 | 136 | 9k+ | | | Output is not escaped |
| #67 | reCAPTCHA for Ninja Forms | 56 | 21 | 9 | 600 | | | Output is not escaped |
| #68 | Account Engagement | 32 | 115 | 74 | 2k+ | | | Output is not escaped |
| #69 | Payment Forms for Paystack | 90 | 494 | 23 | 3k+ | | | Text Domain Mismatch |
| #70 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #71 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | | | Non-prefixed global variable |
| #72 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #73 | Quform Mailchimp | 39 | 65 | 147 | 800 | | | Nonce verification recommended |
| #74 | Quform WPML | 97 | 2 | 8 | 700 | | | trademarked term |
| #75 | Quform Zapier | 39 | 60 | 123 | 1k+ | | | Nonce verification recommended |
| #76 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 20 | 401 | 368 | 3k+ | | | Text Domain Mismatch |
| #77 | Email Marketing for WordPress and WooCommerce – Retainful | 100 | | 2 | 500 | | | trademarked term |
| #78 | Retainful – WooCommerce Abandoned Cart, Newsletters, Email Marketing, Signup Forms and Automation | 79 | 15 | 26 | 1k+ | | | Non-prefixed hook name |
| #79 | SendWP | 37 | 47 | 42 | 10k+ | | | Output is not escaped |
| #80 | Smart Forms – when you need more than just a contact form | 21 | 776 | 574 | 5k+ | | | Output is not escaped |
| #81 | Superb Addons: Blocks, Patterns, Pre-built Pages, Sliders, Popups, Free Forms, Animations & More | 100 | | 0 | 80k+ | | | No open findings |
| #82 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #83 | uCalc | 35 | 78 | 8 | 600 | | | Text Domain Mismatch |
| #84 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #85 | Unique Submissions for Elementor Forms | 99 | 1 | 2 | 500 | | | No Caching |
| #86 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | | | Missing nonce verification |
| #87 | User Role for Flamingo | 89 | 2 | 4 | 700 | | | Non-prefixed function |
| #88 | Visual Form Builder | 34 | 82 | 329 | 20k+ | | | Direct Query |
| #89 | WebConnex Form Management | 97 | 3 | 13 | 500 | | | Missing Version |
| #90 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #91 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #92 | Widget Contact Form 7 | 67 | 22 | 2 | 1k+ | | | Output is not escaped |
| #93 | Woorise – Landing Pages, Forms & Surveys | 71 | 8 | 14 | 1k+ | | | Input is not sanitized |
| #94 | WP Max Submit Protect | 65 | 19 | 12 | 400 | | | Output is not escaped |
| #95 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #96 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #97 | Wrap form fields in Gravity Forms | 84 | 22 | 3 | 1k+ | | | Text Domain Mismatch |
| #98 | WS Form LITE – Drag & Drop Contact Form Builder | 100 | | 0 | 10k+ | | | No open findings |
| #99 | Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More | 85 | 16 | 2 | 10k+ | | | Non Enqueued Script |