Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ 4threv

   1mo ago

   I used this extensively on several sites, the latest update had a few issues but I believe they are in the process of resolving them. This topic was modified 4 days, 4 hours ago by 4threv.

   Read on wp.org ↗
2. ★★★★★ Nicholas Birch

   2mo ago

   As a new user, I recently needed support with a form. It turns that it was down to my inexperience, but the agent was very patient and sorted things out. Turning to the product, I think I have used most of the major WordPress form plugins and Bit Form has all of the advanced features I look for e.g. multi step, conditional fields etc. The problem Bit Form solves is that unlike nearly all form plugins it comes with the ability to view, and importantly edit, the data after submission. With most plugins this a missing feature, or at best an expensive add-on. While this is not important for a simple contact form, it is for my applications, which are typically more complicated interactions with clients, such as assessments that require feedback. Bit Form has a neat implementation of this feature, and it works for any authorised role, not just for the submitter. As a result, Bit Form looks like becoming my goto form plugin and I look forward to new features as they are added.

   Read on wp.org ↗
3. ★★★★★ mikefury

   3mo ago

   Bit Forms is an excellent form builder that is easy to use, very flexible and lightweight. It has all the features I need, works smoothly, and saves a lot of time. The interface is clean, and the overall experience is great. Highly recommended!

   Read on wp.org ↗
4. ★★★★★ propagatica

   7mo ago

   Over the years, we’ve used various form plugins (around 30). Bit Form not only impressed us positively but turned out to be a true game-changer—it’s the #1 plugin in its category. We’ve never seen such a wealth of settings in a free plugin (e.g., phone number fields with pre-filled country codes), but above all, such high-quality code and minimal memory usage: just 150.61 KiB. That’s an outstanding result!

   Read on wp.org ↗
5. ★★★★★ corin10

   7mo ago

   Great form builder and excellent support! The tool is intuitive and powerful, and the support team is incredibly responsive and helpful whenever I need assistance. Highly recommended.

   Read on wp.org ↗
6. ★★★★★ diceman

   7mo ago

   I previously used Fluent Forms as my go to form creator but was left with a bad taste in my mouth after learning that they charge an extra $299 for a signature add-on. That is crazy! I found BitForms and haven’t looked back since. I can accomplish all I need and more using this highly functional and wonderfully executed plugin. If you are looking for a form builder or are thinking of making a change from your current one, you should definitely check-out Bit Form. You won’t be disappointed.

   Read on wp.org ↗
7. ★★★★★ gransort

   7mo ago

   Bit Form is my go-to form builder for all my WordPress websites. It has many useful features and works great even for more advanced forms. The support team is responsive and very helpful whenever something comes up. Highly recommended.

   Read on wp.org ↗
8. ★★★★★ mediamatic

   7mo ago

   I love Bitapps; they are always helpful and great working apps. Thanks

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.2.0 Release Date: 20 July, 2026 New: After Submit Behavior: Added a new setting to control the form behavior after submission (Hide Form, Reset Form, or Keep Form Values). Active Status Toggle: Added an enable/disable toggle 3.2.0
2. — Version 3.1.4 Release Date: 13 July, 2026 Improvements: Enhanced security by adding missing output escaping in the Conversational Form view to help prevent potential Cross-Site Scripting (XSS) vulnerabilities. 3.1.4
3. — Version 3.1.3 Release Date: 12 July, 2026 Improvements: Added a setting to show or hide the search input in Dropdown fields. Improved handling of previously uploaded files during entry updates. Fixes: Fixed an escaping issue during re 3.1.3
4. — Version 3.1.2 Release Date: 7th July, 2026 Fixes: Hardened file upload entry updates to prevent path traversal from deleting arbitrary files through the file field “_old” value. Restricted file deletion to files that remain inside the 3.1.2
5. — Version 3.1.1 Release Date: 18 June, 2026 Fix: Length Validation: Resolve length validation functionality with Checkbox Field 3.1.1
6. — Version 3.1.0 Release Date: 17 June, 2026 New: Address Field: Added a new Address field with multiple sub-fields for comprehensive address collection. Custom Filter Events: Added new filter JS event hooks for modifying Address and Pay 3.1.0

28 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 Bit Form <= 3.2.0 - Authenticated (Administrator+) SQL Injection via 'filterText' Parameter ↗
   2026-08-13 CVE-2026-16810 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.2.0 Patched in 3.2.1
2. Medium · 4.4 Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder < 3.1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2026-08-01 CVE-2025-15669 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.1.4 Patched in 3.1.4
3. Medium · 5.3 Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder < 3.1.2 - Missing Authorization to Unauthenticated Unauthorized Form Submission ↗
   2026-07-30 CVE-2026-15054 Missing Authorization Affects < 3.1.2 Patched in 3.1.2
4. High · 7.2 Bit Form <= 3.1.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-27 CVE-2026-16573 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.0 Patched in 3.2.0
5. High · 7.1 Bit Form <= 3.1.1 - Authenticated (Subscriber+) Arbitrary File Deletion via '_old' Parameter ↗
   2026-07-08 CVE-2026-14372 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.1.1 Patched in 3.1.2
6. Medium · 5.3 Bit Form <= 3.0.0 - Missing Authorization ↗
   2026-06-30 CVE-2026-13694 Missing Authorization Affects <= 3.0.0 Patched in 3.1.0
7. High · 7.5 Bit Form <= 3.0.0 - Unauthenticated Arbitrary File Read ↗
   2026-06-30 CVE-2026-13693 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.0.0 Patched in 3.1.0
8. Medium · 4.9 Bit Form <= 2.21.10 - Authenticated (Administrator+) SQL Injection ↗
   2026-01-28 CVE-2026-25418 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.21.10 Patched in 2.21.11
9. Medium · 6.5 Bit Form – Contact Form Plugin <= 2.21.6 - Missing Authorization to Unauthenticated Workflow Replay ↗
   2026-01-06 CVE-2025-14901 Missing Authorization Affects <= 2.21.6 Patched in 2.21.7
10. Critical · 9.8 Contact Form by Bit Form - Bit Form <= 2.20.3 - Unauthenticated Arbitrary File Upload ↗
    2025-08-14 CVE-2025-6679 Unrestricted Upload of File with Dangerous Type Affects <= 2.20.3 Patched in 2.20.4
11. Medium · 5.3 Contact Form by Bit Form <= 2.17.5 - Unauthenticated Sensitive Information Exposure ↗
    2025-07-01 CVE-2024-13451 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.17.5 Patched in 2.17.6
12. Medium · 4.9 Contact Form by Bit Form <= 2.18.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
    2025-04-24 CVE-2025-2580 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.18.3 Patched in 2.18.4
13. High · 7.2 Bit Form – Contact Form Plugin <= 2.18.0 - Open Redirect ↗
    2025-03-27 CVE-2025-30885 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 2.18.0 Patched in 2.18.1
14. Low · 3.8 Contact Form by Bit Form <= 2.17.4 - Authenticated (Administrator+) Server-Side Request Forgery ↗
    2025-01-24 CVE-2024-13450 Server-Side Request Forgery (SSRF) Affects <= 2.17.4 Patched in 2.17.5
15. Medium · 4.3 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure ↗
    2024-12-24 CVE-2024-12190 Missing Authorization Affects <= 2.17.3 Patched in 2.17.4
16. Medium · 4.9 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read ↗
    2024-10-10 CVE-2024-9507 Improper Input Validation Affects <= 2.15.2 Patched in 2.15.3
17. Medium · 4.9 Bit Form – Contact Form Plugin <= 2.13.11 - Authenticated (Administrator+) SQL Injection ↗
    2024-09-26 CVE-2024-47335 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.13.11 Patched in 2.13.12
18. High · 7.2 Bit Form – Contact Form Plugin <= 2.13.10 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2024-09-25 CVE-2024-47319 Unrestricted Upload of File with Dangerous Type Affects <= 2.13.10 Patched in 2.13.11
19. High · 7.2 Bit Form – Contact Form Plugin <= 2.13.10 - Unauthenticated Stored Cross-Site Scripting ↗
    2024-09-24 CVE-2024-47301 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.13.10 Patched in 2.13.11
20. High · 7.2 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection via getLogHistory Function ↗
    2024-08-19 CVE-2024-7702 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects 2.0 - 2.13.9 Patched in 2.13.10
21. Medium · 5.5 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary JavaScript File Uploads ↗
    2024-08-19 CVE-2024-7775 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 2.0 - 2.13.9 Patched in 2.13.10
22. Critical · 9.0 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) Arbitrary File Read And Deletion ↗
    2024-08-19 CVE-2024-7777 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects 2.0 - 2.13.9 Patched in 2.13.10
23. High · 7.2 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.9 - Authenticated (Administrator+) SQL Injection ↗
    2024-08-19 CVE-2024-7780 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects 2.0 - 2.13.9 Patched in 2.13.10
24. High · 8.7 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder 2.0 - 2.13.4 - Authenticater (Administrator+) Arbitrary File Deletion ↗
    2024-08-19 CVE-2024-7782 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects 2.0 - 2.13.4 Patched in 2.13.5
25. High · 7.2 Bit Form <= 2.13.3 - Authenticated (Administrator+) Arbitrary File Upload ↗
    2024-07-08 CVE-2024-6123 Unrestricted Upload of File with Dangerous Type Affects <= 2.13.3 Patched in 2.13.4
26. Medium · 5.3 Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form <= 2.10.1 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration ↗
    2024-03-13 CVE-2024-1640 Authorization Bypass Through User-Controlled Key Affects <= 2.10.1 Patched in 2.10.2
27. Medium · 4.4 Contact Form Builder by Bit Form <= 2.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-07-24 CVE-2023-3645 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.0 Patched in 2.2.0
28. Critical · 9.8 Bit Form <= 1.8.1 - Unauthenticated Arbitrary File Upload to Remote Code Execution ↗
    2023-04-19 CVE-2022-4774 Unrestricted Upload of File with Dangerous Type Affects <= 1.8.1 Patched in 1.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 12 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-05-21 9K+ → 10K+ up after 82 days in tier
2. 2025-02-28 8K+ → 9K+ up after 98 days in tier
3. 2024-11-22 7K+ → 8K+ up after 73 days in tier
4. 2024-09-10 6K+ → 7K+ up after 94 days in tier
5. 2024-06-08 5K+ → 6K+ up after 67 days in tier
6. 2024-04-02 4K+ → 5K+ up after 1 days in tier
7. 2024-04-01 5K+ → 4K+ down after 1 days in tier
8. 2024-03-31 4K+ → 5K+ up after 74 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Contact Form Plugin 2K+ installs · 3.2★ · 4 shared tags B
• The Innovative Form Builder – IvyForms 900+ installs · 4.3★ · 4 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 3 shared tags A
• Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 30K+ installs · 4.5★ · 3 shared tags A
• Gutenverse Form – Contact Form Builder, Block Form & Booking Form 10K+ installs · 4.0★ · 3 shared tags B
• Zoho Forms – Drag & Drop Form Builder for Websites – Contact Forms, Payment Forms, Order Forms & More 10K+ installs · 3.3★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder into a readme, a review or a deck. It updates itself.

Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder: 10K+ active installs, 5.0★ (260 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/bit-form