Lead Form Builder & Contact Form

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 25% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ circusshirt

   3mo ago

   I noticed a bug and they fixed the issue within 2 hours of submitting the ticket.

   Read on wp.org ↗
2. ★★★★★ mtcomodo

   8.5y ago

   …properly.

   Read on wp.org ↗
3. ★★★★★ leha200520092010

   9.1y ago

   Amazing great Contact Form! Thank you very much. You are best!

   Read on wp.org ↗
4. ★★★★★ Alfred Fistcock

   9.9y ago

   Hi, I like the Plugin. Simple. Minimalist and you can easy integrate Captcha Question. The Problem is the Plugin will not shows correctly on mobile devices(vertical). Look this Picture: http://suckmypic.net/0ugBrZxM.png Maybe you have a Idea or you can integrate mobile support in the future 😉 Friendly Regards

   Read on wp.org ↗
5. ★★★★★ smfu49

   10.1y ago

   I installed and setting easier

   Read on wp.org ↗
6. ★★★★★ satyendra

   10.2y ago

   Awesome builder plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.2.4 New: AJAX-based form save and update — no page reload required. New: “Updated successfully.” notice auto-shows and hides after 3 seconds. Fix: Updated successfully notice display selector fixed. 2.2.4
2. — Version 2.2.3 Fix: Form save/update redirect issue fixed. Fix: Edit form routing improved by checking formid only. Fix: Nonce redirect issue fixed to prevent broken GET parameters. Fix: Field label/default value spacing preserved. Upd 2.2.3
3. — Version 2.2.2 Fix: New form duplication issue fixed after save. Fix: Edit form refresh re-submission issue fixed. Fix: Added proper redirect after save/update to prevent duplicate submissions. 2.2.2
4. — Version 2.2.1 Fix: Default form styles (f-style.css) and scripts now load correctly on Elementor. Fix: Resolved double-slash in Elementor CSS URL (lfb-styler.css) that could cause a 404 on strict servers. Compatibility: Improved multi 2.2.1
5. — Version 2.2.0 New: Added form design customization with custom styling options. New: Added duplicate form creation feature. New: Added email notifications, spam protection (CAPTCHA), and redesigned form settings page for a better user 2.2.0
6. — Version 2.1.4 Performance: Frontend CSS and JS assets now load only on pages containing the lead form shortcode, improving page speed site-wide. 2.1.4

12 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Lead Form Builder & Contact Form <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-03-23 CVE-2026-32532 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.1 Patched in 2.0.2
2. High · 7.2 Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-03-10 CVE-2026-1454 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.1 Patched in 2.0.2
3. Medium · 4.3 Contact Form & Lead Form Elementor Builder <= 2.0.1 - Authenticated (Subscriber+) Information Exposure ↗
   2026-01-20 CVE-2025-68046 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.0.1 Patched in 2.0.2
4. Medium · 4.4 Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-03-03 CVE-2024-10475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.7 Patched in 1.9.8
5. Medium · 5.4 Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution ↗
   2024-05-21 CVE-2024-4261 Improper Control of Generation of Code ('Code Injection') Affects <= 1.9.1 Patched in 1.9.2
6. Medium · 6.6 Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-04-12 CVE-2024-3637 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.7 Patched in 1.9.8
7. Medium · 4.3 Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization ↗
   2024-04-11 CVE-2024-1416 Cross-Site Request Forgery (CSRF) Affects <= 1.8.9 Patched in 1.9.0
8. Medium · 4.3 Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery ↗
   2024-04-11 CVE-2024-1415 Cross-Site Request Forgery (CSRF) Affects <= 1.8.9 Patched in 1.9.0
9. Medium · 6.5 Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init ↗
   2023-03-22 CVE-2023-25969 Missing Authorization Affects <= 1.8.4 Patched in 1.8.5
10. Medium · 6.3 Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change ↗
    2022-02-01 CVE-2022-23180 Missing Authorization Affects < 1.7.4 Patched in 1.7.4
11. Medium · 4.4 Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-01-05 CVE-2022-23179 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.0 Patched in 1.7.0
12. High · 7.2 Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting ↗
    2021-11-29 CVE-2021-24967 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.3 Patched in 1.6.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-22 9K+ → 8K+ down after 107 days in tier
2. 2026-05-07 10K+ → 9K+ down after 942 days in tier
3. 2023-10-08 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 20K+ installs · 4.2★ · 4 shared tags A
• Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms 20K+ installs · 4.4★ · 4 shared tags A
• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 3 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 3 shared tags A
• Forminator Forms – Contact Form, Payment Form & Custom Form Builder 600K+ installs · 4.8★ · 3 shared tags A
• Ninja Forms – The Contact Form Builder That Grows With You 600K+ installs · 4.4★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Lead Form Builder & Contact Form into a readme, a review or a deck. It updates itself.

Lead Form Builder & Contact Form: 8K+ active installs, 4.3★ (6 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/lead-form-builder