| #1 | FormsCRM – Connect Forms to CRM directly | 86 | 5 | 8 | 1k+ | | | Missing direct file access protection |
| #2 | Smart Phone Field For WPForms, Contact Form 7, Fluent Forms, Elementor Forms, WooCommerce, Formidable Forms | 93 | 6 | 44 | 1k+ | | | Non-prefixed global variable |
| #3 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | | | Direct Query |
| #4 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #5 | Kit (formerly ConvertKit) for WPForms | 96 | 11 | 16 | 1k+ | | | Non-prefixed global variable |
| #6 | File Upload For WPForms – Filenzo | 59 | 8 | 16 | 1k+ | | | Output is not escaped |
| #7 | Date Time Picker for WPForms | 96 | 7 | 4 | 1k+ | | | Text Domain Mismatch |
| #8 | Views for WPForms – Display & Edit WPForms Entries on your site frontend | 37 | 80 | 64 | 1k+ | | | Output is not escaped |
| #9 | HT Form Widget for Elementor and WPForms | 35 | 8 | 9 | 2k+ | | | Output is not escaped |
| #10 | Icegram Collect – Easy Form, Lead Collection and Subscription plugin | 25 | 424 | 290 | 2k+ | | | Output is not escaped |
| #11 | Privyr CRM – Instant Lead Alerts for Contact Forms | 71 | 2 | 25 | 4k+ | | | Non-prefixed function |
| #12 | Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent | 22 | 225 | 519 | 8k+ | | | error log error log |
| #13 | GSheetConnector For WPForms – WPForms Google Sheets Integration (Real-Time Sync) | 32 | 120 | 145 | 8k+ | | | Non-prefixed global variable |
| #14 | Database Addon For WPForms ( wpforms entries ) – WPFormsDB | 43 | 17 | 53 | 20k+ | | | Nonce verification recommended |
| #15 | Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) | 39 | 28 | 45 | 80k+ | | | Missing nonce verification |
