| #1 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
| #2 | Database Addon For WPForms ( wpforms entries ) – WPFormsDB | 43 | 17 | 53 | 20k+ | | | Nonce verification recommended |
| #3 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #4 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #5 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #6 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | | | Output is not escaped |
| #7 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 25 | 424 | 290 | 2k+ | | | Output is not escaped |
| #8 | Autopreenchimento de endereço em formulários | 96 | 5 | 1 | 1k+ | | | Missing direct file access protection |
| #9 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #10 | Date Time Picker for WPForms | 96 | 7 | 4 | 1k+ | | | Text Domain Mismatch |
| #11 | File Upload For WPForms – Filenzo | 59 | 8 | 16 | 1k+ | | | Output is not escaped |
| #12 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #13 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #14 | Kit (formerly ConvertKit) for WPForms | 96 | 11 | 16 | 1k+ | | | Non-prefixed global variable |
| #15 | Smart Phone Field For WPForms, Contact Form 7, Fluent Forms, Elementor Forms, WooCommerce, Formidable Forms | 93 | 6 | 44 | 1k+ | | | Non-prefixed global variable |
| #16 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #17 | PDF Builder for WPForms | 22 | 321 | 266 | 900 | | | SQL query is not prepared |
| #18 | WP Forms Signature Contract Add-On | 34 | 128 | 35 | 900 | | | Text Domain Mismatch |
| #19 | PDF Forms Filler for WPForms | 36 | 161 | 54 | 600 | | | Text Domain Mismatch |
| #20 | Campi Moduli Italiani | 34 | 72 | 363 | 500 | | | Unquoted Complex Placeholder |
| #21 | Repeater Fields for WPForms | 71 | 173 | 18 | 500 | | | wp function not compatible with requires wp |
| #22 | Active Campaign & WPForms | Pending | - | - | 400 | | | Pending scan |
| #23 | PDF Importer for WPForms | Pending | - | - | 400 | | | Pending scan |
