Top Contact WordPress Plugins
45 indexed plugins
Plugins
45
Active Installs
975k+
Average Score
55
Audited
45
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Contact Form Query | 100 | 0 | 1k+ | No open findings | |||
| #2 | Very Simple Google Maps | 99 | 2 | 0 | 3k+ | Missing direct file access protection | ||
| #3 | Contact Form Clean and Simple | 98 | 2 | 3 | 7k+ | Non-prefixed class | ||
| #4 | Contact Form 7 IE DatePicker and Number Spinner Fix | 97 | 5 | 5 | 1k+ | trademarked term | ||
| #5 | Speed up Contact Form 7 | 97 | 11 | 0 | 400 | wp function not compatible with requires wp | ||
| #6 | WP Click to Chat – Email, Live Chat, Call & Book Now Buttons | 94 | 43 | 47 | 1k+ | wp function not compatible with requires wp | ||
| #7 | Generate PDF using Contact Form 7 | 93 | 3 | 4k+ | Input is not sanitized | |||
| #8 | WPCasa Contact Form 7 | 88 | 4 | 5 | 500 | Output is not escaped | ||
| #9 | Storefront Homepage Contact Section | 82 | 26 | 2 | 1k+ | Output is not escaped | ||
| #10 | Rich Contact Widget | 80 | 13 | 2 | 9k+ | Output is not escaped | ||
| #11 | More Mails for CF7 | 78 | 13 | 6 | 500 | Text Domain Mismatch | ||
| #12 | Contact Form 7 Translate Messages Extension | 77 | 10 | 5 | 1k+ | Output is not escaped | ||
| #13 | Store file uploads for Contact Form 7 | 76 | 5 | 6 | 1k+ | Output is not escaped | ||
| #14 | Multifile Upload Field for Contact Form 7 | 73 | 41 | 7 | 5k+ | Text Domain Mismatch | ||
| #15 | Awesome Contact Form7 for Elementor | 67 | 20 | 30 | 7k+ | Non-prefixed global variable | ||
| #16 | Sticky Side Buttons | 64 | 27 | 4 | 10k+ | Unsafe printing function | ||
| #17 | VS Contact Form | 55 | 3 | 318 | 7k+ | Non-prefixed global variable | ||
| #18 | Contact Information Widget | 51 | 69 | 5 | 500 | Output is not escaped | ||
| #19 | Confirm Plus Contact Form 7 | 49 | 19 | 36 | 7k+ | Non Singular String Literal Domain | ||
| #20 | Contact Form 7 BWP reCAPTCHA Extension | 48 | 92 | 10 | 500 | Non Singular String Literal Domain | ||
| #21 | Contact Details | 45 | 43 | 29 | 1k+ | Non Singular String Literal Text | ||
| #22 | Inazo's flamingo automatically delete old messages | 45 | 33 | 20 | 4k+ | Output is not escaped | ||
| #23 | Contact Form 7 add confirm | 42 | 31 | 51 | 50k+ | Text Domain Mismatch | ||
| #24 | Flamix: Bitrix24 and Contact Form 7 integrations | 42 | 79 | 4 | 1k+ | Output is not escaped | ||
| #25 | Speed Contact Bar | 42 | 53 | 20 | 5k+ | Output is not escaped | ||
| #26 | Widget Contact Now | 42 | 69 | 6 | 600 | Output is not escaped | ||
| #27 | ATP Call Now | 41 | 98 | 7 | 700 | Output is not escaped | ||
| #28 | Contact Form 7 Widget | 41 | 70 | 4 | 2k+ | Output is not escaped | ||
| #29 | Flamingo | 40 | 15 | 228 | 800k+ | Nonce verification recommended | ||
| #30 | Contact Info Widget | 40 | 184 | 3 | 1k+ | Output is not escaped | ||
| #31 | Visual Builder for Contact Form 7 | 40 | 20 | 43 | 500 | Output is not escaped | ||
| #32 | Simple Webchat | 39 | 142 | 204 | 1k+ | Output is not escaped | ||
| #33 | Database for Contact Form 7 | 38 | 34 | 128 | 7k+ | Missing nonce verification | ||
| #34 | Contact Form 7 – Post Fields | 38 | 167 | 25 | 3k+ | Text Domain Mismatch | ||
| #35 | WDV About Me Widget | 38 | 150 | 8 | 900 | Output is not escaped | ||
| #36 | Anything Popup | 37 | 164 | 185 | 2k+ | Non-prefixed global variable | ||
| #37 | WPZOOM Forms – Drag & Drop Contact Form Builder for WordPress | 35 | 74 | 109 | 10k+ | Nonce verification recommended | ||
| #38 | EchBay Phonering Alo | 33 | 74 | 47 | 1k+ | Output is not escaped | ||
| #39 | Contact Form Block | 32 | 64 | 77 | 500 | Non Singular String Literal Domain | ||
| #40 | Contact Form Builder by vcita | 32 | 666 | 174 | 700 | Text Domain Mismatch | ||
| #41 | cformsII | 31 | 777 | 536 | 4k+ | Unsafe printing function | ||
| #42 | Contact Form Email | 25 | 409 | 898 | 9k+ | Non-prefixed global variable | ||
| #43 | Contact Widgets For Elementor all the contact links you need in one place | 24 | 908 | 1,188 | 500 | Non-prefixed global variable | ||
| #44 | Sellsy | 22 | 586 | 490 | 400 | Non Singular String Literal Domain | ||
| #45 | WP Email Template | 19 | 342 | 350 | 2k+ | Exception output is not escaped |
