Hash Form – Drag & Drop Form Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 32% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ whbowls

   1.4y ago

   For a free plugin, the functionality is very good. It was easy to set up a reCAPTHCA for example. There are a few quirks, but the developers are very quick to respond and fix any bugs. I would give 5 stars, but the logic flow for conditionally hiding or showing a field is a little bit broken. I plan to log a ticket about it once I have more experience. Thank you very much to the makers of this plugin, I’m sure we will be able to make it work for us with some additional tweaks.

   Read on wp.org ↗
2. ★★★★★ evelin1973

   2.2y ago

   I want to say my thanks again for the form. I had to quickly build a new request form, but ran into a problem. After contacting the Admin who responded immediately /literally minutes/, my form was ready to use. Easy to build, easy to set up, easy to use. It works without a problem. I recommend for anyone who wants to be different from others. It’s a matter of imagination, everything else is there.p.p. I will look forward to being able to pay through it as well. Thank you very much.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.4.0 Added date display in Entry Detail page Compatibility test with WordPress 7.0 Design Fixes 1.4.0
2. — Version 1.3.9 Formatting of content not displaying in Entry detail page – Fixed 1.3.9
3. — Version 1.3.8 Compatibility test with WordPress version 6.9 1.3.8
4. — Version 1.3.7 Translation fixes Function naming prefix hf_ replaced with hashform_ 1.3.7
5. — Version 1.3.6 Zip code field not displaying in Address field – Fixed Plugin Check error fixed 1.3.6
6. — Version 1.3.5 Proper escaping functions added Security fixes 1.3.5

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Hash Form – Drag & Drop Form Builder <= 1.4.0 - Cross-Site Request Forgery ↗
   2026-08-24 CVE-2026-78280 Cross-Site Request Forgery (CSRF) Affects <= 1.4.0 Patched in 1.4.1
2. Medium · 4.3 Hash Form <= 1.2.8 - Cross-Site Request Forgery ↗
   2025-05-07 CVE-2025-47468 Cross-Site Request Forgery (CSRF) Affects <= 1.2.8 Patched in 1.2.9
3. Medium · 4.3 Hash Form <= 1.2.1 - Missing Authorization to Authenticated (Contributor+) Form Style Creation ↗
   2024-12-11 CVE-2024-12201 Missing Authorization Affects <= 1.2.1 Patched in 1.2.2
4. Medium · 6.1 Hash Form - Drag & Drop Form Builder <= 1.1.9 - Unauthenticated Limited File Upload ↗
   2024-10-04 CVE-2024-9417 Unrestricted Upload of File with Dangerous Type Affects <= 1.1.9 Patched in 1.2.0
5. High · 8.1 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated PHP Object Injection ↗
   2024-05-22 CVE-2024-5085 Deserialization of Untrusted Data Affects <= 1.1.0 Patched in 1.1.1
6. Critical · 9.8 Hash Form – Drag & Drop Form Builder <= 1.1.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution ↗
   2024-05-22 CVE-2024-5084 Unrestricted Upload of File with Dangerous Type Affects <= 1.1.0 Patched in 1.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 2 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-30 4K+ → 3K+ down after 20 days in tier
2. 2026-06-10 3K+ → 4K+ up after 7 days in tier
3. 2026-06-03 4K+ → 3K+ down after 4 days in tier
4. 2026-05-30 3K+ → 4K+ up after 3 days in tier
5. 2026-05-27 4K+ → 3K+ down after 95 days in tier
6. 2026-02-21 3K+ → 4K+ up after 22 days in tier
7. 2026-01-30 4K+ → 3K+ down after 257 days in tier
8. 2025-05-18 3K+ → 4K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 30K+ installs · 4.5★ · 3 shared tags A
• Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder 10K+ installs · 4.9★ · 3 shared tags A
• Gutenverse Form – Contact Form Builder, Block Form & Booking Form 10K+ installs · 4.0★ · 3 shared tags B
• HT Contact Form – Drag & Drop Form Builder for WordPress 10K+ installs · 4.0★ · 3 shared tags B
• Smart Forms – when you need more than just a contact form 5K+ installs · 4.5★ · 3 shared tags A
• Contact Form Plugin 2K+ installs · 3.2★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for Hash Form – Drag & Drop Form Builder into a readme, a review or a deck. It updates itself.

Hash Form – Drag & Drop Form Builder: 3K+ active installs, 5.0★ (2 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/hash-form