PluginScore

Forms WordPress Plugins That Need Review

99 indexed plugins

Plugins

99

Active Installs

9m+

Average Score

57

Audited

99

Needs Review

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1JetFormBuilder — Dynamic Blocks Form Builder192,1031,60480k+Text Domain Mismatch
#2Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)207362,112900Non-prefixed global variable
#3Brevo – Email, SMS, Web Push, Chat, and more.20460646100k+Request data is not unslashed
#4Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More21522,063300k+Non-prefixed global variable
#5Quill Forms | Conversational Multi Step Forms, Surveys & quizzes214013703k+Text Domain Mismatch
#6Smart Forms – when you need more than just a contact form217765745k+Output is not escaped
#7E2Pdf – Export Pdf Tool for WordPress221,08184710k+Unsafe printing function
#8Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms221,03172220k+Unsafe printing function
#9PDF Builder for WPForms22321266900SQL query is not prepared
#10Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI233951,34390k+Non-prefixed global variable
#11Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder23407236700k+Text Domain Mismatch
#12Subscribe Forms – Beautiful Email Forms, Embedded Newsletter Forms & MailChimp Form234195422k+Non-prefixed global variable
#13WPBot – ChatBot Conversational Forms241,2541,2261k+Text Domain Mismatch
#14Forminator Forms – Contact Form, Payment Form & Custom Form Builder248201,326600k+Non-prefixed global variable
#15Ninja Forms – The Contact Form Builder That Grows With You247451,532600k+Nonce verification recommended
#16Ultra Addons for Contact Form 7241,55645360k+Text Domain Mismatch
#17AIO Forms – Craft Complex Forms Easily25189419700Mixed line endings
#18HT Contact Form – Drag & Drop Form Builder for WordPress2515859710k+Non-prefixed global variable
#19PDF Importer for WPForms25332329400Non-prefixed global variable
#20weForms – Easy Drag & Drop Contact Form Builder For WordPress2591645010k+Output is not escaped
#21Gravity Forms Directory27202457600Non-prefixed global variable
#22Gravity Forms + Stripe27368210600Output is not escaped
#23SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29337198500k+Text Domain Mismatch
#24WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More311673325m+Non-prefixed global variable
#25Account Engagement32115742k+Output is not escaped
#26Lead Form Builder & Contact Form344013529k+Output is not escaped
#27Multi Step Form342771399k+Output is not escaped
#28Visual Form Builder348232920k+Direct Query
#29Get a Newsletter35138144400Output is not escaped
#30mosparo Integration35114301900Missing nonce verification
#31uCalc35788600Text Domain Mismatch
#32WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress357310910k+Nonce verification recommended
#33Multi Step for Contact Form 7366110610k+Missing nonce verification
#34CMB23614819300k+Output is not escaped
#35SendWP37474210k+Output is not escaped
#36Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder388410020k+SQL query is not prepared
#37Kali Forms — Contact Form & Drag-and-Drop Builder38425210k+Dynamic hook name
#38Add-on Gravity Forms – MailPoet 3393133600Output is not escaped
#39Gravity Slider Fields3956362k+Text Domain Mismatch
#40Quform Mailchimp3965147800Nonce verification recommended
#41Quform Zapier39601231k+Nonce verification recommended
#42WebHotelier for WordPress3945140500Text Domain Mismatch
#43Universal Honey Pot4023941k+Missing nonce verification
#44Add-on Contact Form 7 – MailPoet 34188123k+Output is not escaped
#45Conditional Fields for Contact Form 74110653100k+Output is not escaped
#46Mollie Forms41145653k+Request data is not unslashed
#47Mailster Cool Captcha426528400Text Domain Mismatch
#48Database Addon For WPForms ( wpforms entries ) – WPFormsDB43175320k+Nonce verification recommended
#49Contact Form 7 Signature Addon45147446k+Text Domain Mismatch
#50Gravity Forms Constant Contact4636273k+Non-prefixed class