| #1 | JetFormBuilder — Dynamic Blocks Form Builder | 18 | 2,093 | 1,594 | 80k+ | | | Text Domain Mismatch |
| #2 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) | 20 | 736 | 2,112 | 900 | | | Non-prefixed global variable |
| #3 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #4 | Ninja Forms – The Contact Form Builder That Grows With You | 24 | 749 | 1,533 | 600k+ | | | Nonce verification recommended |
| #5 | Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 24 | 826 | 1,314 | 600k+ | | | Non-prefixed global variable |
| #6 | Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More | 21 | 52 | 2,063 | 300k+ | | | Non-prefixed global variable |
| #7 | Ultra Addons for Contact Form 7 | 24 | 1,543 | 452 | 60k+ | | | Text Domain Mismatch |
| #8 | E2Pdf – Export Pdf Tool for WordPress | 22 | 1,082 | 847 | 10k+ | | | Unsafe printing function |
| #9 | Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms | 22 | 1,031 | 722 | 20k+ | | | Unsafe printing function |
| #10 | Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI | 23 | 395 | 1,342 | 90k+ | | | Non-prefixed global variable |
| #11 | weForms – Easy Drag & Drop Contact Form Builder For WordPress | 25 | 916 | 450 | 10k+ | | | Output is not escaped |
| #12 | Smart Forms – when you need more than just a contact form | 21 | 776 | 574 | 5k+ | | | Output is not escaped |
| #13 | Brevo – Email, SMS, Web Push, Chat, and more. | 20 | 460 | 646 | 100k+ | | | Request data is not unslashed |
| #14 | Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form | 23 | 419 | 542 | 2k+ | | | Non-prefixed global variable |
| #15 | Quill Forms | Conversational Multi Step Forms, Surveys & quizzes | 21 | 401 | 369 | 3k+ | | | Text Domain Mismatch |
| #16 | HT Contact Form – Drag & Drop Form Builder for WordPress | 25 | 160 | 597 | 10k+ | | | Non-prefixed global variable |
| #17 | Lead Form Builder & Contact Form | 35 | 400 | 345 | 9k+ | | | Output is not escaped |
| #18 | PDF Importer for WPForms | 25 | 332 | 329 | 400 | | | Non-prefixed global variable |
| #19 | Gravity Forms Directory | 27 | 202 | 457 | 600 | | | Non-prefixed global variable |
| #20 | Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder | 22 | 407 | 236 | 700k+ | | | Text Domain Mismatch |
| #21 | AIO Forms – Craft Complex Forms Easily | 25 | 189 | 418 | 700 | | | Mixed line endings |
| #22 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #23 | Mollie Forms | 41 | 14 | 565 | 3k+ | | | Request data is not unslashed |
| #24 | Gravity Forms + Stripe | 27 | 368 | 210 | 600 | | | Output is not escaped |
| #25 | SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator | 29 | 336 | 198 | 500k+ | | | Text Domain Mismatch |
| #26 | Payment Forms for Paystack | 90 | 494 | 23 | 3k+ | | | Text Domain Mismatch |
| #27 | WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More | 31 | 167 | 332 | 5m+ | | | Non-prefixed global variable |
| #28 | WebHotelier for WordPress | 39 | 451 | 40 | 500 | | | Text Domain Mismatch |
| #29 | Multi Step Form | 34 | 277 | 139 | 9k+ | | | Output is not escaped |
| #30 | mosparo Integration | 35 | 114 | 301 | 900 | | | Missing nonce verification |
| #31 | Visual Form Builder | 34 | 82 | 329 | 20k+ | | | Direct Query |
| #32 | Get a Newsletter | 35 | 138 | 144 | 400 | | | Output is not escaped |
| #33 | Kali Forms — Contact Form & Drag-and-Drop Builder | 38 | 4 | 252 | 10k+ | | | Dynamic hook name |
| #34 | Quform Mailchimp | 39 | 65 | 147 | 800 | | | Nonce verification recommended |
| #35 | Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder | 37 | 83 | 113 | 20k+ | | | SQL query is not prepared |
| #36 | Contact Form 7 Signature Addon | 45 | 147 | 44 | 6k+ | | | Text Domain Mismatch |
| #37 | Account Engagement | 32 | 115 | 74 | 2k+ | | | Output is not escaped |
| #38 | Quform Zapier | 39 | 60 | 123 | 1k+ | | | Nonce verification recommended |
| #39 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | | | Nonce verification recommended |
| #40 | Multi Step for Contact Form 7 | 36 | 61 | 106 | 10k+ | | | Missing nonce verification |
| #41 | CMB2 | 36 | 148 | 19 | 300k+ | | | Output is not escaped |
| #42 | Conditional Fields for Contact Form 7 | 41 | 106 | 53 | 100k+ | | | Output is not escaped |
| #43 | Integration for Elementor forms – Sendinblue | 65 | 94 | 56 | 7k+ | | | Text Domain Mismatch |
| #44 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | | | Missing nonce verification |
| #45 | Contact Form & SMTP Plugin for WordPress by PirateForms | 93 | 14 | 102 | 30k+ | | | Non-prefixed hook name |
| #46 | Add-on Contact Form 7 – MailPoet 3 | 41 | 88 | 12 | 3k+ | | | Output is not escaped |
| #47 | Mailster Cool Captcha | 42 | 65 | 28 | 400 | | | Text Domain Mismatch |
| #48 | Gravity Slider Fields | 39 | 56 | 36 | 2k+ | | | Text Domain Mismatch |
| #49 | Country State City Dropdown CF7 | 40 | 35 | 54 | 5k+ | | | Direct Query |
| #50 | SendWP | 37 | 47 | 42 | 10k+ | | | Output is not escaped |