BuddyForms
by Themekraft · Forms
Also makes 11 other plugins · 4.3K+ installs across the portfolio →
BuddyForms is a versatile plugin that allows the creation of post forms, registration forms, profile forms, content forms, and supports file uploads.
Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.
Health
B 77/100
Open vulnerability
Active installs
800+
≈900 estimated
Momentum
+283%
downloads vs prior 30d
Biggest opportunity: “custom form”, “form builder” and “forms” aren't earning a slot. You list them, but you're not in the first 24 results for those searches. WordPress.org counts only your first five tags, so free the slot for a search you can win.
77 health vs 65 average across 2,509 Forms plugins
Install conversion
How it's measured →0.4%
of downloads still active
At least 800 of 219.9K lifetime downloads are still running, below its category: the median Forms plugin keeps 1.3%, across 1,667 plugins.
Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Forms plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.
This plugin shipped 6 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.
Details
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Well tuned across the board
Updated 24 days ago
Tested up to WordPress 7.1.4, the current branch or newer
4.8★ over 180 reviews, smoothed to 4.65★
5 of 5 tags set · short description in place
Search visibility
How it's tracked →Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.
48
Momentum
Holding steady
+0.5
Velocity
places per keyword, 27d
42%
Breadth
of keywords climbing, 27d
-0.4
Acceleration
recent half vs earlier
wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.
| Keyword | wp.org | On merit | wp.org move, 90 days |
|---|---|---|---|
| buddyforms | #1 | #1 | 0 |
| custom form your tag | Not in the top 24 | ||
| form builder your tag | Not in the top 24 | ||
| forms your tag | Not in the top 24 | ||
| registration your tag | Not in the top 24 | ||
| user registration your tag | Not in the top 24 | ||
21 searches this plugin appeared in over the last 90 days, 1 listed. 20 left out as unrelated or noise (years, numbers, stray words). 5 of its tags aren't in the top 24 for their own search.
What to do about it
- “custom form”, “form builder” and “forms” aren't earning a slot. You list them, but you're not in the first 24 results for those searches. WordPress.org counts only your first five tags, so free the slot for a search you can win.
- Already on top for “buddyforms”. #1 without listing it. A tag would change little there; your slots are better spent on a search you don't yet win.
Daily downloads
Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peak 2.9K · peaks are release surges
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Health trend
Composite health score, snapshotted daily
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
6
releases in the last 12 months
24d ago
latest release · v2.10.5 · 7 Oct 2026
79
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “800+”. Our estimate pins where the real number sits.
Crossed into this band yesterday and a band this size takes about a year or more to cross, so the real count is still just under 900.
Install history since 7 Apr 2017
Recent reviews
All reviews on wp.org ↗- ★★★★★ nemwang2.8y ago
it shows an error when other user roles like editor, author , subscriber or any other roles except administrator tries to upload the media or attch file to it. But for admin roles its a perfect to upload any post from frontend but whats the use of plugin if it works only for admin role.
Read on wp.org ↗ - ★★★★★ bigcheesez3.2y ago
too much stuff added that are pro features. if i want to buy rhe plugin i will.
Read on wp.org ↗ - ★★★★★ marcos83.6y ago
É joia, os recursos básicos já atenderam as expectativas. This topic was modified 3 years, 3 months ago by marcos8.
Read on wp.org ↗ - ★★★★★ kaotai053.7y ago
I like buddyforms very much. It is the best form-builder I have ever seen. Support is perfectly and fast.
Read on wp.org ↗ - ★★★★★ sirhc3.7y ago
There are very few plugins that can do what this does, let users submit information for the front end but also can keep it private. Very easy to use! I found some limitations but notified support who quickly fixed them. My only constructive feedback is for support to respond more quickly, that’s what will turn a free user into a paid one (in my case eventually I was able to communicate more directly with support through slack and believe they will be more responsive for others) This topic was modified 3 years, 4 months ago by sirhc.
Read on wp.org ↗ - ★★★★★ Joanni Davis3.9y ago
Great. Thank you for making this course available online. I look forward to more.
Read on wp.org ↗ - ★★★★★ isbgonlin4.5y ago
It`s easy to use and it gives you a lot of different options and functionality to build your forms.
Read on wp.org ↗ - ★★★★★ mrinalkanti994.5y ago
This is a very helpful plugin. The Ultimate Memeber extension is helping me a lot. And moderation extension also.
Read on wp.org ↗
Security history
via Wordfence Intelligence3 open vulnerabilities affect the current version (2.10.5). 18 of 21 disclosed are patched.
- 2025-04-04 CVE-2025-32151 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 2.8.17 No patch available
- Patched Medium · 6.4 Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode ↗2025-02-21 CVE-2024-12038 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.15 Patched in 2.8.16
- Patched Medium · 6.4 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗2025-01-30 CVE-2024-12037 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.13 Patched in 2.8.14
- 2024-09-30 CVE-2024-47377 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.12 Patched in 2.8.13
- Patched Medium · 6.5 BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness ↗
- Patched Critical · 9.3 BuddyForms <= 2.8.8 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery ↗
- 2024-03-25 CVE-2024-30198 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.5 Patched in 2.8.6
- 2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.2 Patched in 2.8.3
- Patched Medium · 6.4 Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗2023-05-11 CVE-2023-25981 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.1 Patched in 2.8.2
- Patched Medium · 6.4 BuddyForms <= 2.7.2 - Authenticated (Contributor+) Stored Stored Cross-Site Scripting ↗2022-10-27 CVE-2022-38971 Improper Neutralization of Input During Web Page Generation Affects <= 2.7.2 Patched in 2.7.3
- Patched Medium · 6.1 Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.6.9 - Cross-Site Scripting ↗2022-06-26 Improper Neutralization of Input During Web Page Generation Affects <= 2.6.9 Patched in 2.6.10
- 2019-02-25 Missing Authorization Affects < 2.3.2 Patched in 2.3.2
- Patched Critical · 9.8 Post, Registration and Profile Form Builder – FrontEnd Editor BuddyForms – Easy WordPress Forms <= 2.2.7 - SQL Injection ↗2018-11-09 CVE-2018-21003 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.2.7 Patched in 2.2.8
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 6.8.1
Languages
via translate.wordpress.orgTranslated into 8 languages, 0 at 90% or more
AI assistants
How it's measured →Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.
Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.
Readme readiness
8 of 8 pass · checked 27 Oct 2026Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.
- ✓ Says what it does "BuddyForms is a versatile plugin that allows the creation of post forms, registration forms, profile forms,..."
- ✓ Has a FAQ 7 questions in the FAQ.
- ✓ FAQ asks real questions 7 of 7 read like questions a user would type.
- ✓ Names who it is for Names its audience or use cases ("if you need", "use this", "ideal for").
- ✓ Names what it works with Mentions WooCommerce, Gutenberg, HubSpot, Advanced Custom Fields and 4 more.
- ✓ Headings and lists 42 headings and 13 lists.
- ✓ Enough to quote 8,786 characters of description.
- ✓ Tags match the text 4 of 5 tags appear in the text; "custom form" does not.
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-10-30 900+ → 800+ down after 3 days in tier
- 2026-10-27 800+ → 900+ up after 3 days in tier
- 2026-10-24 900+ → 800+ down after 1 days in tier
- 2026-10-23 800+ → 900+ up after 1 days in tier
- 2026-10-22 900+ → 800+ down after 1 days in tier
- 2026-10-21 800+ → 900+ up after 3 days in tier
- 2026-10-18 900+ → 800+ down after 4 days in tier
- 2026-10-14 800+ → 900+ up after 1 days in tier
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 3 shared tags A -
Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 800K+ installs · 4.8★ · 3 shared tags A -
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder 300K+ installs · 4.8★ · 3 shared tags A -
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI 90K+ installs · 4.8★ · 3 shared tags A -
Ultra Addons for Contact Form 7 60K+ installs · 4.7★ · 3 shared tags A -
Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 20K+ installs · 4.2★ · 3 shared tags A
Embed this report card
Drop a live Pulse card for BuddyForms into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/buddyforms" width="480" height="300" style="border:0" loading="lazy" title="BuddyForms — Plugin Pulse"></iframe> BuddyForms: 800+ active installs, 4.8★ (180 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/buddyforms
Spotted a number that looks wrong? Report a data issue and we'll check it against the source.