How many vulnerabilities does Elzo Forms have?

The audit found 202 findings: 0 critical, 11 high, 75 medium severity.

Should I use Elzo Forms?

Based on the latest audit (grade D, risk HIGH), review the 202 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Elzo Forms

Q: Is Elzo Forms secure?

WP HealthKit's independent audit rates Elzo Forms overall risk as HIGH with a report-card grade of D.

Audited at release

v1.0.0WordPress PluginAudited 19 days ago

Build contact and custom forms with a visual builder: multi-step, file uploads, conditional logic, email alerts, and spam protection.

HIGH

Total Findings

202

Security Grade

Security Findings

202

Critical0

High11

Medium75

Low77

Info39

Executive Summary

Is Elzo Forms secure? In WP HealthKit's independent 2026 audit, Elzo Forms received an overall risk of HIGH and a report-card grade of D across 202 findings (0 critical, 11 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

PHP Compatibility

Requires PHP 8.2Declared minimum: 7.4Mismatch detected

Categories with Findings

PHP CompatibilityPlugin LifecycleCoding StandardsPHP CompatibilityType SafetyPlugin ConflictsHook WiringPerformanceInternationalizationDatabaseAccessibilitySecurityTheme StandardsUpdate SafetyWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Elzo Forms security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/elzo-forms)](https://wphealthkit.com/directory/elzo-forms)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.2Declared minimum: 7.4Mismatch detected

Elzo Forms

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings