Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 53% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ tranxhdr

   9mo ago

   4.3.5 has a major vulnerability that needs to be fixed asap! WP Engine summary of the vulnerability: This vulnerability allows any unauthenticated user to perform actions that only an administrator should be allowed to do. This vulnerability’s information has been verified by Patchstack. Please note that questions related to this notification should be directed to Patchstack, the plugin author or the 3rd-party researcher for the most accurate information. Resources providing further information on this vulnerability: patchstack.com/database/vulnerability/contact-form-plugin/wordpress-contact-form-by-bestwebsoft-plugin-4-3-5-broken-access-control-vulnerability?_a_id=473

   Read on wp.org ↗
2. ★★★★★ Emilio Lejit

   2.6y ago

   Magnificent plugin, and works great.

   Read on wp.org ↗
3. ★★★★★ electricwatches

   2.8y ago

   I’ve been happily using the free version of this plug-in for many years and had been very pleased with it — thank you BestWesbSoft. But a recent update meant it was un-useable for my customers. I raised a support issue, was then asked questions, which I immediately answered…and then nothing. No fix, no reply, just silence.

   Read on wp.org ↗
4. ★★★★★ gaburata

   3.6y ago

   This app worked great, untill something went wrong and it stopped work. People cant send me a messages, they see in red “the message cant be send”. I don`t know what happened. Then I triend to change some setting and it started working again, but I didnt see the messages in the text box. I decided to write the support team. They asked me for an acces to my admin wordpress panel and for ftp acces and I gave them the passords. They found and solve the problem fast. The support was great! Now I highly reccomend this plugin! This topic was modified 3 years, 6 months ago by gaburata.

   Read on wp.org ↗
5. ★★★★★ kathtam

   5.3y ago

   A PHP session was created by a session_start() function call. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.

   Read on wp.org ↗
6. ★★★★★ wordpressreviewer

   5.5y ago

   I needed hosting support to install the contact form because some adjustments were required by FTP. Also, the upgrade to contact form pro and multi didn’t go smoothly. WEBSOFT support was fast and effective, no major issues. Awesome support from Websoft tech. Many thanks!! I recommend Websoft contact form.

   Read on wp.org ↗
7. ★★★★★ kpurushotham

   5.9y ago

   Needs to update 3 columns and responsive all screens. This topic was modified 5 years, 9 months ago by kpurushotham.

   Read on wp.org ↗
8. ★★★★★ taavi_miku

   6.0y ago

   Plugin Inspector plugin generates several serious warnings on that. Had to remove.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.9 Update : All functionality was updated for WordPress 7.0. NEW : Block Non-Latin Characters functionality has been added. 3.9
2. — Version 3.7 Update : All functionality was updated for WordPress 6.9.1. NEW : Display in popup has been added. PRO : Popup animation and display popup on scroll has been added. 3.7
3. — Version 3.6 Update : All functionality was updated for WordPress 6.9. NEW : E-sign field has been added. 3.6
4. — Version 3.5 Bugfix : HTML issue in the letters has been fixed. 3.5
5. — Version 3.4 Update : All functionality was updated for WordPress 6.8.2. NEW : Send test email functionality has been added. NEW : The Gutenberg block has been added. PRO : Honeypot field has been added. 3.4
6. — Version 3.3 Update : All functionality was updated for WordPress 6.8. NEW : New dropdown field has been added. 3.3

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Contact Form by BestWebSoft <= 4.3.6 - Missing Authorization ↗
   2025-12-07 CVE-2025-63056 Missing Authorization Affects <= 4.3.6 Patched in 4.3.7
2. Medium · 6.1 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject ↗
   2024-03-13 CVE-2024-2200 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.8 Patched in 4.2.9
3. Medium · 6.1 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address ↗
   2024-03-13 CVE-2024-2198 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.2.8 Patched in 4.2.9
4. Medium · 6.1 Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress <= 4.0.1 - Cross-Site Scripting ↗
   2019-08-13 CVE-2016-10869 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 4.0.2 Patched in 4.0.2
5. Medium · 6.1 Contact Form by BestWebSoft <= 3.95 - ReflectedCross-Site Scripting ↗
   2017-04-12 CVE-2015-9295 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.96 Patched in 3.96
6. Medium · 6.1 Advanced Contact Us Form Builder for WordPress <= 4.0.5 - Reflected Cross-Site Scripting ↗
   2017-04-12 CVE-2017-18491 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 4.0.6 Patched in 4.0.6
7. Medium · 6.4 Contact Form <= 3.82 - Authorization Bypass ↗
   2015-01-22 Missing Authorization Affects <= 3.82 Patched in 3.83
8. High · 7.2 Contact Form Plugin <= 3.81 - Unauthenticated Stored Cross-Site Scripting ↗
   2014-08-07 CVE-2014-125095 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.81 Patched in 3.82
9. Medium · 6.1 Contact Form By BestWebSoft<= 3.34 - Cross-Site Scripting ↗
   2013-08-26 CVE-2013-7481 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.34 Patched in 3.35
10. Medium · 6.1 Contact Form by BestWebSoft <= 3.51 - Cross-Site Scripting ↗
    2013-08-13 CVE-2013-7475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.51 Patched in 3.52

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 108 languages, 1 at 90% or more

Plus 84 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-28 40K+ → 30K+ down after 463 days in tier
2. 2024-11-22 50K+ → 40K+ down after 376 days in tier
3. 2023-11-12 60K+ → 50K+ down after 240 days in tier
4. 2023-03-17 70K+ → 60K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• V Visitor Contact Forms 20+ installs · 3.6★ · 2 shared tags D
• Call Now Button – The #1 Click to Call Button for WordPress 200K+ installs · 4.7★ · 1 shared tag A
• Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button 50K+ installs · 4.6★ · 1 shared tag A
• Button Generator – Easily Create Custom Buttons with Icons and Analytics 4K+ installs · 4.1★ · 1 shared tag B
• Floating Button – Easily Create Sticky, Fixed & Floating Buttons 4K+ installs · 3.4★ · 1 shared tag B
• Bolt CTA Button – Floating Call Button for WordPress 1K+ installs · 4.2★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress into a readme, a review or a deck. It updates itself.

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress: 30K+ active installs, 4.0★ (291 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/contact-form-plugin