Plugin Pulse Beta
← Pulse

SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

by Brainstorm Force · Forms

Also makes 33 other plugins · 7M+ installs across the portfolio →

Try it live ↗ wp.org ↗

AI form generator and WordPress form builder for contact and Stripe payment forms, with surveys and quizzes in SureForms Business.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 88/100

no flags

Active installs

500K+

≈560K estimated

Momentum

-28%

downloads vs prior 30d

Biggest opportunity: Swap “contact form” for “contact form builder”. “contact form” isn't earning its slot: it only gets you to #13. “contact form builder” sits at #5 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

See the detail → Get the free audit
How scoring works →
88 Health · A
Maintenance 100/100
Rating quality 94/100
Support 70/100
Security 75/100

88 health vs 65 average across 2,511 Forms plugins

500K+

Active installs

≈560K estimated

5.9M

Total downloads

since 2024 · 8.5% still active

4.7/5

Rating

4.8 on wp.org · 102 reviews · +1.3/wk

-28%

357K

Downloads · 30d

category median +12%

Install conversion

How it's measured →

8.5%

of downloads still active

At least 500K of 5.9M lifetime downloads are still running, above its category: the median Forms plugin keeps 1.2%, across 1,668 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Forms plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 37 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 102 reviews

Read on wp.org ↗
5★
94 4★
3 3★
2 2★
1 1★
2

Details

Version
2.13.0
Last updated
5d ago
Added
2024-04-01 · 2 yrs old
Requires WP
6.4
Tested up to
7.1.4
Requires PHP
7.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

98 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 5 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 91/100

4.8★ over 102 reviews, smoothed to 4.57★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 100/100

1 of 1 support threads resolved in the last 2 months

Daily downloads

Since 2 Apr 2024 · 944 days · wp.org + Plugin Pulse archive

-28% vs prior 30d
5.6K1 Nov 2026

30-day downloads

Rolling 30-day volume · peak 511.8K · peaks are release surges

358.2K1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

SureForms · #119youFormidable Forms · #177Kali Forms · #1591WPForms · #9

Rating trend

Star average over time · dips mark rough releases

4.81 Nov 2026

Health trend

Composite health score, snapshotted daily

881 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

7161 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

37

releases in the last 12 months

5d ago

latest release · v2.13.0 · 27 Oct 2026

100

tagged releases on record

Recent releases

2.13.0 · 27 Oct 20262.12.9 · 14 Oct 20262.12.8 · 25 Sep 20262.12.7 · 12 Sep 20262.12.6 · 2 Sep 20262.12.5 · 25 Aug 20262.12.4 · 19 Aug 20262.12.3 · 6 Aug 20262.12.2 · 22 Jul 20262.12.1 · 8 Jul 20262.12.0 · 24 Jun 20262.11.1 · 18 Jun 20262.11.0 · 10 Jun 20262.10.1 · 4 Jun 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v2.8 40%
v2.12 25%
v2.11 5%
Older / other versions 29%

Estimated active installs

The public count shows “500K+”. Our estimate pins where the real number sits.

tracked estimate
500K–600K ≈560K

Crossed into this band 7 months ago; a band this size takes about a year or more to cross, which places it about 59% of the way through.

Install history since 1 Apr 2024

500K1 Nov 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ nickodesh
    4mo ago

    Awesome plugin

    Read on wp.org ↗
  2. ★★★★★ fabbiebeauty
    4mo ago

    I love it , it was easy to use

    Read on wp.org ↗
  3. ★★★★★ Keldion
    4mo ago

    Very well done plugin.

    Read on wp.org ↗
  4. ★★★★★ John Rogers
    5mo ago

    The integration framework made it easy to connect my own service, and the recent update with custom styling preset is a great time saver.

    Read on wp.org ↗
  5. ★★★★★ ghazi369
    5mo ago

    Thanks for the plugin

    Read on wp.org ↗
  6. ★★★★★ annschmech
    5mo ago

    This made creating a contact form very easy.

    Read on wp.org ↗
  7. ★★★★★ Thomas Marx
    6mo ago

    Until then, I had been using SureForm on some websites and a different product on others. Then I decided to switch 100% to SureForms because I’m extremely satisfied with it. After installation, I was able to use the SureForms AI assistant to copy screenshots and data from my old forms and transfer them to the AI assistant. It read the information and created excellent forms that only required minor adjustments. This allowed me to essentially migrate my existing forms to SureForms. Wonderful—I was pleasantly surprised and highly satisfied.

    Read on wp.org ↗
  8. ★★★★★ jakobsen
    7mo ago

    Na. een eerste ervaring deze nu ook op een andere site gezet. Simpel te bouwen zeker met ai.Zeker een aanrader

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 2.12.2 New: Added a Payment History widget for Elementor and Bricks. Fix: Custom CSS now applies correctly on the single form view. The full changelog is available here . 2.12.2
  2. — Version 2.12.1 New: Added an AI-powered quick draft flow on the dashboard to generate forms faster, with built-in usage tracking. Improvement: Email fields now enforce standard RFC 5321 length limits (a 64-character local part and 255- 2.12.1
  3. — Version 2.12.0 New: Added action hooks around payment success, cancellation, and refund events so plugins such as SureMembers, LMS, and CRMs can grant or revoke access for both Stripe and PayPal. Fix: Cancel Subscription now routes thr 2.12.0
  4. — Version 2.12.3 New: Added an “Entries” shortcut in the Instant Form admin bar to open a form’s entries in one click. Improvement: Enhanced WPML compatibility. https://wpml.org/plugin/sureforms/ Fix: This update addressed a security bug 2.12.3
  5. — Version 2.12.4 Improvement: Email notification images are now saved to the Media Library instead of being embedded as base64, improving email deliverability and reducing message size. Fix: Compatibility with WordPress 7.1. The full cha 2.12.4
  6. — Version 2.12.5 Fix: Form submissions now go through reliably, even on sites where a performance plugin combines or defers JavaScript. The full changelog is available here . 2.12.5

Security history

via Wordfence Intelligence

All 21 disclosed vulnerabilities are patched in the current version (2.13.0). Sites still on an older version should update.

  1. Patched Medium · 6.4 SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-13 CVE-2026-108495 Improper Neutralization of Input During Web Page Generation Affects <= 2.12.7 Patched in 2.12.8
  2. Patched High · 7.2 SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload ↗
    2026-09-04 CVE-2026-18406 Improper Neutralization of Input During Web Page Generation Affects <= 2.12.2 Patched in 2.12.3
  3. Patched Medium · 5.3 SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.5 - Unauthenticated Insecure Direct Object Reference ↗
    2026-09-03 CVE-2026-85308 Authorization Bypass Through User-Controlled Key Affects <= 2.12.5 Patched in 2.12.6
  4. Patched Medium · 6.4 SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute ↗
    2026-07-31 CVE-2026-7623 Improper Neutralization of Input During Web Page Generation Affects <= 2.8.1 Patched in 2.8.2
  5. Patched Medium · 5.3 SureForms <= 2.11.0 - Unauthenticated Payment Amount Bypass ↗
    2026-06-23 CVE-2026-11567 Improper Access Control Affects <= 2.11.0 Patched in 2.11.1
  6. Patched High · 7.5 SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id' ↗
    2026-03-27 CVE-2026-4987 Improper Input Validation Affects <= 2.5.2 Patched in 2.6.0
  7. Patched Medium · 5.3 SureForms <= 2.2.1 - Missing Authorization ↗
    2026-02-15 Missing Authorization Affects <= 2.2.1 Patched in 2.2.2
  8. Patched High · 7.5 SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation ↗
    2026-02-13 CVE-2026-15288 Improper Input Validation Affects <= 2.2.1 Patched in 2.2.2
  9. Patched High · 7.2 SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting ↗
    2025-12-20 CVE-2025-14855 Improper Neutralization of Input During Web Page Generation Affects <= 2.2.0 Patched in 2.2.1
  10. Patched Medium · 5.3 SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution ↗
    2025-11-18 CVE-2025-12535 Cross-Site Request Forgery Affects <= 1.13.1 Patched in 1.13.2
  11. Patched Medium · 5.3 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure ↗
    2025-11-12 CVE-2025-12536 Exposure of Private Personal Information to an Unauthorized Actor Affects <= 1.13.1 Patched in 1.13.2
  12. Patched Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure ↗
    2025-10-13 CVE-2025-10732 Missing Authorization Affects <= 1.12.1 Patched in 1.12.2
  13. Patched Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation ↗
    2025-09-19 CVE-2025-10489 Missing Authorization Affects <= 1.12.0 Patched in 1.12.1
  14. Patched Medium · 4.4 SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-09-02 CVE-2025-8282 Improper Neutralization of Input During Web Page Generation Affects <= 1.9.0 Patched in 1.9.1
  15. Patched Medium · 6.1 SureForms <= 1.7.1 - Reflected Cross-Site Scripting ↗
    2025-07-11 CVE-2025-5921 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.1 Patched in 1.7.2
  16. Patched High · 8.1 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion ↗
    2025-07-08 CVE-2025-6691 External Control of File Name or Path Affects 0.0 - 0.0.13 Patched in 0.0.14
  17. Patched High · 7.5 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion ↗
    2025-07-08 CVE-2025-6742 Deserialization of Untrusted Data Affects 0.0 - 0.0.13 Patched in 0.0.14
  18. Patched Medium · 4.4 SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-3513 Improper Neutralization of Input During Web Page Generation Affects <= 1.4.3 Patched in 1.4.4
  19. Patched Medium · 4.4 SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-04-11 CVE-2025-3514 Improper Neutralization of Input During Web Page Generation Affects <= 1.4.3 Patched in 1.4.4
  20. Patched Medium · 4.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Settings Update ↗
    2025-04-09 CVE-2025-3471 Incorrect Authorization Affects <= 1.4.3 Patched in 1.4.4
  21. Patched Medium · 5.3 SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure ↗
    2025-01-07 CVE-2024-12713 Missing Authorization Affects <= 1.2.2 Patched in 1.2.3

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

✓ Low memory footprint
✓ Low page-speed impact
✓ Runs on latest PHP + WP
✓ No PHP errors
✓ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✕ Frequently updated

Languages

via translate.wordpress.org

Translated into 18 languages, 8 at 90% or more

Galician 100%
Serbian 100%
Dutch 95%
Spanish (Spain) 95%
Arabic 94%
Dutch (Formal) 94%
Spanish (Chile) 94%
Czech 92%
French (France) 85%
Turkish 83%
Lao 76%
Vietnamese 56%
Russian 53%
Swedish 42%
Ukrainian 16%
English (UK) 14%
Dutch (Belgium) 8%
Greek 4%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names SureForms when asked about these topics, where it comes in the answer, and how that compares with its wp.org search position. Latest run 1 Nov 2026.

Assistants
ChatGPT, Claude
Topics tracked
Forms, Contact form, AI
Get early access to Premium →

Readme readiness

6 of 8 pass · checked 31 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ! Says what it does Short description names no action; say what the plugin does for the site.
  • ✓ Has a FAQ 20 questions in the FAQ.
  • ✓ FAQ asks real questions 20 of 20 read like questions a user would type.
  • ! Names who it is for Never says who the plugin is for or what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, Elementor, Gutenberg, Block editor and 25 more.
  • ✓ Headings and lists 39 headings and 10 lists.
  • ✓ Enough to quote 13,627 characters of description.
  • ✓ Tags match the text 4 of 5 tags appear in the text; "ai forms" does not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-03-30 400K+ → 500K+ up after 69 days in tier
  2. 2026-01-20 300K+ → 400K+ up after 130 days in tier
  3. 2025-09-12 200K+ → 300K+ up after 132 days in tier
  4. 2025-05-03 100K+ → 200K+ up after 62 days in tier
  5. 2025-03-02 90K+ → 100K+ up after 6 days in tier
  6. 2025-02-24 80K+ → 90K+ up after 6 days in tier
  7. 2025-02-18 70K+ → 80K+ up after 7 days in tier
  8. 2025-02-11 60K+ → 70K+ up after 7 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/sureforms" width="480" height="300" style="border:0" loading="lazy" title="SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz — Plugin Pulse"></iframe>
Preview card ↗

SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz: 500K+ active installs, 4.8★ (102 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/sureforms

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.