| #1 | Kit (formerly ConvertKit) for WPForms | 96 | 11 | 19 | 1k+ | | | Non-prefixed global variable |
| #2 | Autopreenchimento de endereço em formulários | 96 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #3 | Date Time Picker for WPForms | 96 | 7 | 4 | 1k+ | | | Text Domain Mismatch |
| #4 | Smart Phone Field For WPForms, Contact Form 7, Fluent Forms, Elementor Forms, WooCommerce, Formidable Forms, Ninja Forms | 93 | 6 | 43 | 1k+ | | | Non-prefixed global variable |
| #5 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #6 | GSheetConnector – WPForms Google Sheets Connector, Save WPForms Lite & PRO Entries to Database & Sheets | 82 | 47 | 9 | 8k+ | | | Missing Arg Domain |
| #7 | Active Campaign & WPForms | 78 | 27 | 10 | 300 | | | Text Domain Mismatch |
| #8 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #9 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |
| #10 | File Upload For WPForms – Filenzo | 59 | 8 | 16 | 1k+ | | | Output is not escaped |
| #11 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #12 | Database Addon For WPForms ( wpforms entries ) – WPFormsDB | 43 | 17 | 53 | 20k+ | | | Nonce verification recommended |
| #13 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 40 | 27 | 45 | 80k+ | | | Missing nonce verification |
| #14 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #15 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #16 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | | | Output is not escaped |
| #17 | WP Forms Signature Contract Add-On | 35 | 127 | 39 | 900 | | | Text Domain Mismatch |
| #18 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #19 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 26 | 423 | 292 | 2k+ | | | Output is not escaped |
| #20 | Message Filter for Contact Form 7 | 25 | 782 | 1,598 | 1k+ | | | Non-prefixed global variable |
| #21 | PDF Importer for WPForms | 25 | 332 | 331 | 400 | | | Non-prefixed global variable |
| #22 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 226 | 516 | 7k+ | | | error log error log |
| #23 | PDF Builder for WPForms | 22 | 321 | 268 | 900 | | | SQL query is not prepared |
