Really? This is the first report of any spam hitting Form. After a year and a half of my demo being up, I still haven’t received one.
The query would be:
DELETE FROM wp_connections WHERE status = "pending"
A few notes:
Backup the db first.
I would test by deleting a single row first, but that’s your call.
The “wp_” prefix in the SQL may have to be adjusted to match the correct table prefix.
Lastly, this will delete any valid submissions.