BSK Forms Blacklist

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 76% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

A small install base leaves thin data to model from. The range spans more than 10x because wp.org publishes install counts as broad bands, and conversion and price compound on top. Read the midpoint as an order of magnitude, not a valuation.

1. ★★★★★ penkalad

   1.7y ago

   Super plugin for Gravity Forms/Contact Forms 7 with excellent support and great communication! Highly recommend it to anyone. Thank you for your hard work!

   Read on wp.org ↗
2. ★★★★★ carollynn

   2.3y ago

   Get the premium version, it is 100% worth it. Support is instant and helpful. The plugin has saved me a ton of time trying to parse spam and I love having the blocked data so I can make sure nothing got filtered that shouldn’t have. I currently use it with Gravity Forms and it works like a charm.

   Read on wp.org ↗
3. ★★★★★ pinkish1

   2.4y ago

   After using the free version, I decided to purchase the Pro for the extra features (invitation list). The support offered is great and the plugin is very powerful and easy to use.

   Read on wp.org ↗
4. ★★★★★ vonkles

   2.5y ago

   I was really surprised by the personal, swift and helpful support. It gives me confidence that my website will work properly as I intended. Thanks!

   Read on wp.org ↗
5. ★★★★★ TekGirlyMama

   4.6y ago

   Thanks for this free plugin, for the ability to mark an entry as spam by creating blacklists. 50 black lists with 100 items per each is quite generous and typically enough. All other functionality is PRO paid version, but still was helpful for my needs, as had a sicko lowlife client thief trying to get hundreds of dollars worth of our goods for free. PayPal closed his fake cheat claim and chargebacks and he attacked again and again and began pounding with dirty filthy emails that passed honeypot and other spam email plugins. Thanks to yours I could create a list with his 8 frequently used filth and block him from submitting. Thank you!

   Read on wp.org ↗
6. ★★★★★ Jon Fuller

   4.8y ago

   Description says: Supports block IP address by country or only allow IP addresses in a country. Upon install, plugin says: This feature only available Pro version So don’t advertise a paid feature that’s not in your fee plugin here, without such a disclaimer.

   Read on wp.org ↗
7. ★★★★★ chicagola

   4.9y ago

   This plugin is an excellent easy tool to fight spam and scam website form messages. My clients were getting all types of messages trying to trick them into scams, and it wasted so much of our time dealing with it. Now we can stop them and it feels so good to have this stress and hassle gone. If you have a website contact form, this plugin is a requirement.

   Read on wp.org ↗
8. ★★★★★ mjoudrey

   6.0y ago

   Was seeking advice about the plugin, and support was swift to respond and concretely give me the information to make my decision. With the usage of VPN, and other external applications users have nowadays it’s really a hard thing to combat, but plugins like this can be a piece of the puzzle to set yourself up with a proper solution for your GravityForms on your website.

   Read on wp.org ↗

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 BSK Forms Blacklist <= 3.9 - Cross-Site Request Forgery ↗
   2025-01-03 CVE-2025-22347 Cross-Site Request Forgery (CSRF) Affects <= 3.9 Patched in 4.0
2. Medium · 6.1 BSK Forms Blacklist <= 3.8.1 - Reflected Cross-Site Scripting ↗
   2024-09-30 CVE-2024-47624 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8.1 Patched in 3.9
3. Medium · 6.1 BSK Forms Blacklist <= 3.8 - Reflected Cross-Site Scripting ↗
   2024-08-09 CVE-2024-43233 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.8 Patched in 3.8.1
4. Medium · 4.4 BSK Forms Blacklist <= 3.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2023-11-28 CVE-2023-5980 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.3 Patched in 3.7
5. High · 7.2 BSK Forms Blacklist <= 3.6.2 - Authenticated (Administrator+) SQL Injection via 'order' and 'orderby' ↗
   2023-04-24 CVE-2023-30872 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.6.2 Patched in 3.6.3

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.2

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-29 2K+ → 1K+ down after 370 days in tier
2. 2023-11-25 1K+ → 2K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Gravity Forms Email Blacklist 10K+ installs · 4.1★ · 1 shared tag A
• WP Contact Slider – Contact Form Slider Widget 9K+ installs · 4.6★ · 1 shared tag B
• G Gravity Forms CSS Ready Class Selector 4K+ installs · 4.3★ · 1 shared tag D
• GravityWP – CSS Selector 4K+ installs · 4.3★ · 1 shared tag C
• Block List Updater 4K+ installs · 4.0★ · 1 shared tag B
• Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification 2K+ installs · 3.8★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for BSK Forms Blacklist into a readme, a review or a deck. It updates itself.

BSK Forms Blacklist: 1K+ active installs, 4.3★ (12 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/bsk-gravityforms-blacklist