weForms – Easy Drag & Drop Contact Form Builder For WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 94% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ johnnywoodward

   1.9y ago

   The plugin seems legit but having trouble getting the form to submit on mobile reliably. Paid the $50 just to get customer service which has not replied to my last 3 emails. Unfortunately will have to take this charge up with my bank and claim fraud. Very frustrating.

   Read on wp.org ↗
2. ★★★★★ girlinterrupting

   2.1y ago

   I am not satisfied or happy with this plug-in. On Friday July 26 I purchased the premium plug-in to get the additional features. The plug-in is not what I thought it was going to be and it does not meet my needs. On the website the company states that they will refund your money within 14 days if you are not happy with the plug-in. On Saturday July 27, I contacted the company requesting a refund. I deactivated the plug-in license and deleted it from my site. I have reached out to the company FIVE times to get this resolved to no avail – I keep getting auto responses that they are busy and will get back to me soon. Don’t purchase the premium plug-in!

   Read on wp.org ↗
3. ★★★★★ wavedoc1956

   2.2y ago

   very versatile tool for creating forms

   Read on wp.org ↗
4. ★★★★★ ashleygrey

   2.7y ago

   I am enjoying using weForms. I’ve also read great reviews about this plugin. Looking forward to the experience.

   Read on wp.org ↗
5. ★★★★★ clockz71

   2.9y ago

   Doesn’t send to my email. Pointless.

   Read on wp.org ↗
6. ★★★★★ softweave

   3.0y ago

   This form plugin came with my BoldGrid template. It worked fine under development, but stopped working once the site went public. It failed to submit due to a 403 error from https://softweave.com/wp-admin/admin-ajax.php. My hosting service tech support told me I needed to upgrade to the paid version to fix the problem. Once I installed the paid version, my form started working again. UPDATE:Based on a response to this review, I configured WordPress to send mail via SMTP. This eliminated the need to have weForms PRO activated for form submissions to succeed. I deleted the weForms PRO plugin and the contact form worked fine the rest of the day. The next day however, my contact form was again failing to submit due to a 403 error. A wsform troubleshooting article on error 403 suggested this could be caused by page caching. After deleting the cache for my contact form page, the form works again. I’ve excluded the form page from caching, which will hopefully solve this problem permanently. This topic was modified 2 years, 10 months ago by softweave. Reason: update This topic was modified 2 years, 10 months ago by softweave. Reason: update This topic was modified 2 years, 10 months ago by softweave.

   Read on wp.org ↗
7. ★★★★★ detechguy

   3.1y ago

   Sadly I have tried multiple times over the past 2 weeks to get support. I have ticket numbers from their automated system, but there has been no response from support at all.

   Read on wp.org ↗
8. ★★★★★ rdo992

   3.4y ago

   It works for me. I was able to get the results I wanted and tested the plugin. I love the entries category where I don’t have to go to my email to see the responses.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.6.28 Security: Patched stored XSS vulnerability in form entry fields. 1.6.28
2. — Version 1.6.27 Security: Patched object injection vulnerability. 1.6.27
3. — Version 1.6.26 Fix: Added extra validation for form uploads. 1.6.26
4. — Version 1.6.25 Update: Removed Polyfill.io from the plugin. 1.6.25
5. — Version 1.6.24 Fix: Updates remote url for pollyfill.io to secured CloudFlare URL. 1.6.24
6. — Version 1.6.23 Fix: Adds wpdb->prepare to fix SQL injection vulnerabilities. 1.6.23

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.1 weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.26 - Unauthenticated PHP Object Injection ↗
   2026-03-23 CVE-2026-32484 Deserialization of Untrusted Data Affects <= 1.6.26 Patched in 1.6.27
2. Medium · 6.4 weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API ↗
   2026-03-10 CVE-2026-2707 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.27 Patched in 1.6.28
3. Medium · 5.3 weForms <= 1.6.25 - Missing Authorization ↗
   2025-12-29 CVE-2025-69028 Missing Authorization Affects <= 1.6.25 Patched in 1.6.26
4. Medium · 5.3 Various Plugins <= Various Version - Use of Polyfill.io ↗
   2024-06-25 Use of Less Trusted Source Affects <= 1.6.23 Patched in 1.6.24
5. Medium · 5.3 weForms <= 1.6.20 - Missing Authorization ↗
   2024-03-28 CVE-2024-30512 Missing Authorization Affects <= 1.6.20 Patched in 1.6.21
6. High · 7.2 weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer ↗
   2024-03-12 CVE-2024-0386 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.21 Patched in 1.6.22
7. Medium · 6.5 weForms <= 1.6.18 - Missing Authorization via export_form_entries ↗
   2023-12-27 CVE-2023-51524 Missing Authorization Affects <= 1.6.18 Patched in 1.6.19
8. Medium · 4.4 weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2023-12-26 CVE-2023-50896 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.17 Patched in 1.6.18
9. Medium · 5.5 weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2022-07-12 CVE-2022-2395 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.6.13 Patched in 1.6.14
10. High · 8.6 WeForms <= 1.4.7 - CSV injection via form entry ↗
    2020-08-13 CVE-2020-22276 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Affects <= 1.4.7 Patched in 1.4.8

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 10 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-11 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 4 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 4 shared tags A
• Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 300K+ installs · 4.8★ · 4 shared tags A
• Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI 90K+ installs · 4.8★ · 4 shared tags A
• Ultra Addons for Contact Form 7 60K+ installs · 4.7★ · 4 shared tags A
• Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 20K+ installs · 4.2★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for weForms – Easy Drag & Drop Contact Form Builder For WordPress into a readme, a review or a deck. It updates itself.

weForms – Easy Drag & Drop Contact Form Builder For WordPress: 10K+ active installs, 4.5★ (111 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/weforms