HTML Forms – Simple WordPress Forms Plugin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 58% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ folbert

   5mo ago

   Very nice, developer friendly, plugin!

   Read on wp.org ↗
2. ★★★★★ George Paschetto

   6mo ago

   I needed to convert a large form from PDF to online. After trying several other plugins I found Hf. There was some trouble at first, but the developer quickly replied to my email with an easy fix. I now have full control without the kinds of constraints that come with the more automated approach.

   Read on wp.org ↗
3. ★★★★★ aryanrajseo

   10mo ago

   This should be a native core feature to WordPress as a form builder. This plugin is amazing, powerful yet very light. I can customize it as per my needs. Thank you for this plugin. This topic was modified 8 months, 3 weeks ago by aryanrajseo.

   Read on wp.org ↗
4. ★★★★★ frisbee9580

   1.4y ago

   So glad I found this plugin so I don’t need to design my forms in some visual editor!Would be lovely if more captcha solutions (ie. Turnstile) were supported.

   Read on wp.org ↗
5. ★★★★★ karel0017

   1.9y ago

   Lightweight and efficient! Very basic but customizable in any way.

   Read on wp.org ↗
6. ★★★★★ kxpro

   2.1y ago

   I can create forms with full control of the html I love it thank you

   Read on wp.org ↗
7. ★★★★★ stevejcoates

   2.2y ago

   The plugin works really well and gives great flexibility. The support is first class and they were able to resolve a very specific issue that I had in my slightly more unusual set up. Highly recommend

   Read on wp.org ↗
8. ★★★★★ shlxng

   2.5y ago

   I was strugling about 2years every time I tried to customize cf7 forms so its looks like in my desidns.Thanks to HTML Forms now it’s over!Huge thanks guys 🙌 🙌 🙌

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.6.4 Minor change to Google reCAPTCHA v3 implementation for features in HTML Forms Premium 1.7.0. 1.6.4
2. — Version 1.6.3 Bug fix for File Uploads field display. 1.6.3
3. — Version 1.6.2 Bug fix for PHP deprecation notice. 1.6.2
4. — Version 1.6.1 Bug fix for File Uploads field. 1.6.1
5. — Version 1.6.0 Added support for Google reCAPTCHA v3 as an anti-spam solution. Added an “Enable Nonce” option to the plugin’s settings. 1.6.0
6. — Version 1.5.6 Bug fix to prevent XSS on Send Email action interface. 1.5.6

9 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.1 HTML Forms – Simple WordPress Forms Plugin <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2025-12-16 CVE-2025-13861 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.0 Patched in 1.6.1
2. Medium · 4.4 HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-11-07 CVE-2025-12125 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.5 Patched in 1.5.6
3. Medium · 6.4 HTML Forms <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-22 CVE-2025-46236 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.2 Patched in 1.5.3
4. High · 7.2 HTML Forms <= 1.5.1 - Unauthenticated Stored Cross-Site Scripting ↗
   2025-04-01 CVE-2025-31080 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.5.1 Patched in 1.5.2
5. Medium · 6.1 HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting ↗
   2024-12-18 CVE-2024-56060 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.1 Patched in 1.4.2
6. Medium · 4.3 HTML Forms – Simple WordPress Forms Plugin <= 1.3.33 - Cross-Site Request Forgery ↗
   2024-07-10 CVE-2024-6412 Cross-Site Request Forgery (CSRF) Affects <= 1.3.33 Patched in 1.3.34
7. Medium · 4.4 HTML Forms – Simple WordPress Forms <= 1.3.32 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-07-01 CVE-2024-6243 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.32 Patched in 1.3.33
8. Medium · 5.5 HTML Forms <= 1.3.28 - Authenticated (Administrator+) Cross-Site Scripting ↗
   2023-12-21 CVE-2023-50836 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.28 Patched in 1.3.30
9. High · 7.2 HTML Forms <= 1.3.24 - Authenticated (Administrator+) SQL Injection ↗
   2022-11-07 CVE-2022-3689 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.3.24 Patched in 1.3.25

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 7 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-10-06 9K+ → 10K+ up after 225 days in tier
2. 2024-02-24 8K+ → 9K+ up after 406 days in tier
3. 2023-01-14 7K+ → 8K+ up after 21 days in tier
4. 2022-12-24 8K+ → 7K+ down after 1 days in tier
5. 2022-12-23 7K+ → 8K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Quick Contact Form 1K+ installs · 4.5★ · 3 shared tags B
• C Contact Form 7 add confirm 50K+ installs · 4.2★ · 2 shared tags D
• Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More 40K+ installs · 4.8★ · 2 shared tags A
• Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder 30K+ installs · 4.5★ · 2 shared tags A
• Gravity PDF 20K+ installs · 4.9★ · 2 shared tags B
• Visual Form Builder 20K+ installs · 4.1★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for HTML Forms – Simple WordPress Forms Plugin into a readme, a review or a deck. It updates itself.

HTML Forms – Simple WordPress Forms Plugin: 10K+ active installs, 4.9★ (57 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/html-forms