WP-FormAssembly

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 78% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ crowinck

   8.3y ago

   I was glad to see that this plugin does more than just insert an iframe on the page. However, when you use the shortcode it wraps the entire page in it’s own wrapper and applies its own styles to all of your page content. So if you try to add any text above and below the form, you’ll find that it’s now in a tiny 13px and generally looks terrible. It doesn’t have an option to turn styling off, you can override it with your own CSS, but it’s a pain.

   Read on wp.org ↗
2. ★★★★★ klaudiom

   9.1y ago

   Just place the shortcode anywhere you want the form to appear and replace the ID with your own from TFA. This topic was modified 9 years ago by klaudiom.

   Read on wp.org ↗
3. ★★★★★ sunset2015

   11.4y ago

   I’ve been searching for an easy way to add a contact form to my site for a long time, and this plugin actually works. Thanks!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.0.3 Test against WordPress 7.0 3.0.3
2. — Version 3.0.2 Fix Save & Resume feature 3.0.2
3. — Version 3.0.1 Update documentation 3.0.1
4. — Version 3.0.0 Security improvements Dropped support/use of custom domain in server shortcode Introduced shortname shortcode Bump ‘Tested up to’ version 3.0.0
5. — Version 2.0.11 XSS security fix 2.0.11
6. — Version 2.0.10 Security improvements 2.0.10

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 WP-FormAssembly <= 2.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2025-02-17 CVE-2024-13501 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.11 Patched in 3.0.0
2. Medium · 6.4 WP-FormAssembly <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-04-16 CVE-2023-49768 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.10 Patched in 2.0.11
3. Medium · 5.0 WP-FormAssembly <= 2.0.8 - Limited Server Side Request Forgery via 'formassembly' shortcode ↗
   2023-05-02 Server-Side Request Forgery (SSRF) Affects < 2.0.9 Patched in 2.0.9
4. Medium · 6.4 WP-FormAssembly <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-04-18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.7 Patched in 2.0.8
5. Medium · 6.5 WP-FormAssembly <= 2.0.5 - Authenticated (Contributor+) Arbitrary File Read ↗
   2022-11-23 CVE-2022-45852 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.0.5 Patched in 2.0.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-30 3K+ → 2K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 1 shared tag A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 1 shared tag A
• Forminator Forms – Contact Form, Payment Form & Custom Form Builder 600K+ installs · 4.8★ · 1 shared tag A
• Ninja Forms – The Contact Form Builder That Grows With You 600K+ installs · 4.4★ · 1 shared tag A
• SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz 500K+ installs · 4.7★ · 1 shared tag A
• Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 300K+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for WP-FormAssembly into a readme, a review or a deck. It updates itself.

WP-FormAssembly: 2K+ active installs, 4.0★ (3 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/formassembly-web-forms