SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 25% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

At the current install trend, crossing 600K+ in roughly 207 days.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ nickodesh

   1mo ago

   Awesome plugin

   Read on wp.org ↗
2. ★★★★★ fabbiebeauty

   2mo ago

   I love it , it was easy to use

   Read on wp.org ↗
3. ★★★★★ Keldion

   2mo ago

   Very well done plugin.

   Read on wp.org ↗
4. ★★★★★ John Rogers

   3mo ago

   The integration framework made it easy to connect my own service, and the recent update with custom styling preset is a great time saver.

   Read on wp.org ↗
5. ★★★★★ ghazi369

   3mo ago

   Thanks for the plugin

   Read on wp.org ↗
6. ★★★★★ annschmech

   3mo ago

   This made creating a contact form very easy.

   Read on wp.org ↗
7. ★★★★★ Thomas Marx

   4mo ago

   Until then, I had been using SureForm on some websites and a different product on others. Then I decided to switch 100% to SureForms because I’m extremely satisfied with it. After installation, I was able to use the SureForms AI assistant to copy screenshots and data from my old forms and transfer them to the AI assistant. It read the information and created excellent forms that only required minor adjustments. This allowed me to essentially migrate my existing forms to SureForms. Wonderful—I was pleasantly surprised and highly satisfied.

   Read on wp.org ↗
8. ★★★★★ jakobsen

   4mo ago

   Na. een eerste ervaring deze nu ook op een andere site gezet. Simpel te bouwen zeker met ai.Zeker een aanrader

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.12.2 New: Added a Payment History widget for Elementor and Bricks. Fix: Custom CSS now applies correctly on the single form view. The full changelog is available here . 2.12.2
2. — Version 2.12.1 New: Added an AI-powered quick draft flow on the dashboard to generate forms faster, with built-in usage tracking. Improvement: Email fields now enforce standard RFC 5321 length limits (a 64-character local part and 255- 2.12.1
3. — Version 2.12.0 New: Added action hooks around payment success, cancellation, and refund events so plugins such as SureMembers, LMS, and CRMs can grant or revoke access for both Stripe and PayPal. Fix: Cancel Subscription now routes thr 2.12.0
4. — Version 2.12.3 New: Added an “Entries” shortcut in the Instant Form admin bar to open a form’s entries in one click. Improvement: Enhanced WPML compatibility. https://wpml.org/plugin/sureforms/ Fix: This update addressed a security bug 2.12.3
5. — Version 2.12.4 Improvement: Email notification images are now saved to the Media Library instead of being embedded as base64, improving email deliverability and reducing message size. Fix: Compatibility with WordPress 7.1. 2.12.4

18 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute ↗
   2026-07-31 CVE-2026-7623 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.1 Patched in 2.8.2
2. Medium · 5.3 SureForms <= 2.11.0 - Unauthenticated Payment Amount Bypass ↗
   2026-06-23 CVE-2026-11567 Improper Access Control Affects <= 2.11.0 Patched in 2.11.1
3. High · 7.5 SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id' ↗
   2026-03-27 CVE-2026-4987 Improper Input Validation Affects <= 2.5.2 Patched in 2.6.0
4. Medium · 5.3 SureForms <= 2.2.1 - Missing Authorization ↗
   2026-02-15 Missing Authorization Affects <= 2.2.1 Patched in 2.2.2
5. High · 7.5 SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation ↗
   2026-02-13 CVE-2026-15288 Improper Input Validation Affects <= 2.2.1 Patched in 2.2.2
6. High · 7.2 SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2025-12-20 CVE-2025-14855 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.0 Patched in 2.2.1
7. Medium · 5.3 SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution ↗
   2025-11-18 CVE-2025-12535 Cross-Site Request Forgery (CSRF) Affects <= 1.13.1 Patched in 1.13.2
8. Medium · 5.3 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure ↗
   2025-11-12 CVE-2025-12536 Exposure of Private Personal Information to an Unauthorized Actor Affects <= 1.13.1 Patched in 1.13.2
9. Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure ↗
   2025-10-13 CVE-2025-10732 Missing Authorization Affects <= 1.12.1 Patched in 1.12.2
10. Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation ↗
    2025-09-19 CVE-2025-10489 Missing Authorization Affects <= 1.12.0 Patched in 1.12.1
11. Medium · 4.4 SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-09-02 CVE-2025-8282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.0 Patched in 1.9.1
12. Medium · 6.1 SureForms <= 1.7.1 - Reflected Cross-Site Scripting ↗
    2025-07-11 CVE-2025-5921 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.1 Patched in 1.7.2
13. High · 8.1 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion ↗
    2025-07-08 CVE-2025-6691 External Control of File Name or Path Affects 0.0 - 0.0.13 Patched in 0.0.14
14. High · 7.5 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion ↗
    2025-07-08 CVE-2025-6742 Deserialization of Untrusted Data Affects 0.0 - 0.0.13 Patched in 0.0.14
15. Medium · 4.4 SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-3513 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.3 Patched in 1.4.4
16. Medium · 4.4 SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-3514 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.3 Patched in 1.4.4
17. Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Settings Update ↗
    2025-04-09 CVE-2025-3471 Incorrect Authorization Affects <= 1.4.3 Patched in 1.4.4
18. Medium · 5.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure ↗
    2025-01-07 CVE-2024-12713 Missing Authorization Affects <= 1.2.2 Patched in 1.2.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 14 languages, 6 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-30 400K+ → 500K+ up after 69 days in tier
2. 2026-01-20 300K+ → 400K+ up after 130 days in tier
3. 2025-09-12 200K+ → 300K+ up after 132 days in tier
4. 2025-05-03 100K+ → 200K+ up after 62 days in tier
5. 2025-03-02 90K+ → 100K+ up after 6 days in tier
6. 2025-02-24 80K+ → 90K+ up after 6 days in tier
7. 2025-02-18 70K+ → 80K+ up after 7 days in tier
8. 2025-02-11 60K+ → 70K+ up after 7 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 300K+ installs · 4.8★ · 4 shared tags A
• Kali Forms — Contact Form & Drag-and-Drop Builder 10K+ installs · 4.7★ · 4 shared tags A
• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 3 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 3 shared tags A
• Forminator Forms – Contact Form, Payment Form & Custom Form Builder 600K+ installs · 4.8★ · 3 shared tags A
• Ninja Forms – The Contact Form Builder That Grows With You 600K+ installs · 4.4★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz into a readme, a review or a deck. It updates itself.

SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz: 500K+ active installs, 4.9★ (87 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/sureforms