Skip to content
PluginCanary

Calculated Fields Form

Calculated Fields Form - AI Form Builder for WordPress - Contact, Payment, Quote, Quiz & More
by codepeople · 40,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 240 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Calculated Fields Form
Ownership100
Maintenance100
Security60
SupportNo data
Reputation85

How the score works

Quick answers

Is Calculated Fields Form still maintained?
Yes. Last release 4 Nov 2026, 240 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns Calculated Fields Form, and has it changed hands?
No change recorded. Main committer codepeople since Mar 2013. 5 Nov 2026 · SVN log
Was Calculated Fields Form removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is Calculated Fields Form safe?
22 known vulnerabilities, all fixed (latest in 5.5.1.6). Not on the exploited list. 2 Oct 2026 · Wordfence Intelligence
Is the latest Calculated Fields Form update safe to install?
No ownership change before 5.5.2.7. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
codepeople12 Mar 2013 to 4 Nov 2026, 1425 commits

1 committer recorded. No ownership change since 2013.

Maintenance

Last release
today
Releases, 24 months
240
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Calculated Fields Form
Q1 202416
Q2 202423
Q3 202424
Q4 202434
Q1 202526
Q2 202534
Q3 202528
Q4 202529
Q1 202632
Q2 202627
Q3 202629
Q4 202612

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (3 reviews). Lifetime: 4.9.

Average rating per quarter for Calculated Fields Form
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q3 2025 and Q4 2026.

Rating distribution
5 star911
4 star32
3 star5
2 star2
1 star23

Security record

11 vulnerabilities in 24 months (22 on record), all patched (latest fixed in 5.5.1.6).

Show 22 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
2 Oct 2026Calculated Fields Form <= 5.5.1.5 - Reflected DOM-Based Cross-Site Scripting via URL Parameter Substitution in Calculated Field Equation6.1<= 5.5.1.55.5.1.6Patched before disclosure
30 Sep 2026Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Query Parameter via Text Area Predefined Value4.7<= 5.5.1.35.5.1.4Patched before disclosure
30 Sep 2026Calculated Fields Form <= 5.5.1.3 - Reflected DOM-Based Cross-Site Scripting via 'x' URL Parameter via setChoices()6.1<= 5.5.1.35.5.1.4Patched before disclosure
23 Sep 2026Calculated Fields Form - AI Form Builder for WordPress - Contact, Payment, Quote, Quiz & More <= 5.5.1.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.5.1.15.5.1.2Patched before disclosure
12 Mar 2026Calculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form Settings6.4<= 5.4.5.05.4.5.1Patched before disclosure
16 Feb 2026Calculated Fields Form <= 5.4.4.1 - Missing Authorization4.3<= 5.4.4.15.4.4.21
5 Jun 2025Calculated Fields Form <= 5.3.58 - Cross-Site Request Forgery4.3<= 5.3.585.3.59Patched before disclosure
9 Apr 2025Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 5.2.615.2.62Patched before disclosure
8 Apr 2025Calculated Fields Form <= 5.2.61 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 5.2.615.2.62Patched before disclosure
2 Mar 2025Calculated Fields Form <= 5.2.63 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 5.2.635.2.64Patched before disclosure
16 Dec 2024Calculated Fields Form <= 5.2.63 - Denial of Service5.3<= 5.2.635.2.64Patched before disclosure
16 Oct 2024Calculated Fields Form <= 5.2.45 - HTML Injection5.3<= 5.2.455.2.46Patched before disclosure
25 Mar 2024Calculated Fields Form <= 1.2.54 - Reflected Cross-Site Scripting6.1<= 1.2.541.2.55Patched before disclosure
1 Mar 2024Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.1.565.1.57n/a
1 Feb 2024Calculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.2.521.2.53Patched before disclosure
27 Dec 2023Calculated Fields Form <= 1.2.28 - Authenticated (Contributor+) Open Redirect via Shortcode4.3<= 1.2.281.2.29Patched before disclosure
5 Dec 2023Calculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.2.401.2.41Patched before disclosure
2 Mar 2023Calculated Fields Form <= 1.1.120 - Cross-Site Request Forgery4.3<= 1.1.1201.1.121Patched before disclosure
28 Feb 2023Calculated Fields Form <= 1.1.120 - Missing Authorization to Feedback Submission4.3<= 1.1.1201.1.121Patched before disclosure
22 Feb 2023Calculated Fields Form <= 1.1.150 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.1.1501.1.151Patched before disclosure
22 Jan 2020Calculated Fields Form <= 1.0.353 - Authenticated Stored Cross-Site Scripting5.4<= 1.0.3531.0.3541
2 Mar 2015Calculated Fields Form <= 1.0.11 - Cross-Site Request Forgery to SQL Injection9.8<= 1.0.111.0.12Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 3 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Calculated Fields Form
4 May 202624,996
11 May 202630,781
18 May 202631,812
25 May 202638,656
1 Jun 202611,889
8 Jun 202622,406
15 Jun 202616,837
22 Jun 202628,863
29 Jun 202617,005
6 Jul 202630,960
13 Jul 202629,243
20 Jul 202637,954
27 Jul 202628,832
3 Aug 202631,189
10 Aug 202640,622
17 Aug 202631,173
24 Aug 202630,310
31 Aug 202629,474
7 Sep 202629,716
14 Sep 202630,919
21 Sep 202641,144
28 Sep 202641,904
5 Oct 202631,277
12 Oct 202628,975
19 Oct 202630,838
26 Oct 202641,122
2 Nov 2026896

Weekly downloads over the last 4 weeks are 13% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Zoho FormsScore 100 · 10,000+RTMFormScore 98 · 30,000+WPZOOM FormsScore 98 · 10,000+FormLayerScore 96 · 100,000+

Facts

Version5.5.2.7
Authorcodepeople
Added12 Mar 2013
Last updated4 Nov 2026
Active installs40,000+
Requires WordPress3.0.5
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagsform, quote form, contact form, AI form builder, Calculator form

Other plugins by this author: Appointment Hour Booking - Booking Calendar, Loading Page with Loading Screen, Contact Form Email, Search in Place, CodePeople Post Map for Google Maps, CP Media Player - Audio Player and Video Player, Appointment Booking Calendar, Music Player for WooCommerce, WP Time Slots Booking Form, CP Blocks, CP Multi View Events Calendar, CP Contact Form with PayPal

Questions

Is Calculated Fields Form still maintained?

Yes. Last release 4 Nov 2026, 240 releases in the last 24 months.

Who owns Calculated Fields Form, and has it changed hands?

No change recorded. Main committer codepeople since Mar 2013.

Was Calculated Fields Form removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is Calculated Fields Form safe?

22 known vulnerabilities, all fixed (latest in 5.5.1.6). Not on the exploited list.

Is the latest Calculated Fields Form update safe to install?

No ownership change before 5.5.2.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue