Skip to content
PluginCanary

CubeWP Forms

by Imran Tauqeer · 3,000+ active installs · Checked 3 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

77/ 100 Canary Score
Sub-scores for CubeWP Forms
Ownership100
Maintenance55
Security90
Support70
Reputation70

How the score works

Quick answers

Is CubeWP Forms still maintained?
Yes. Last release 6 May 2026, 7 releases in the last 24 months. 6 May 2026 · wordpress.org
Who owns CubeWP Forms, and has it changed hands?
No change recorded. Main committer cubewp1211 since Dec 2022. 3 Nov 2026 · SVN log
Was CubeWP Forms removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is CubeWP Forms safe?
3 known vulnerabilities, all fixed (latest in 1.1.6). Not on the exploited list. 12 Jun 2025 · Wordfence Intelligence
Is the latest CubeWP Forms update safe to install?
No ownership change before 1.1.11. No one-star spike after it. 6 May 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master16 Dec 2022 to 16 Dec 2022, 1 commits
cubewp121116 Dec 2022 to 6 May 2026, 57 commits
teamcubewp7 Sep 2023 to 7 May 2024, 6 commits

3 committers recorded. No ownership change since 2022.

Maintenance

Last release
6 months ago
Releases, 24 months
7
Tested up to
6.9 vs 7.1
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for CubeWP Forms
Q1 20241
Q2 20240
Q3 20243
Q4 20242
Q1 20250
Q2 20251
Q3 20252
Q4 20251
Q1 20261
Q2 20261
Q3 20260
Q4 20260

Last release 6 May 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews.

Rating distribution
5 star0
4 star0
3 star0
2 star0
1 star0

Security record

2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 1.1.6).

Show 3 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
12 Jun 2025CubeWP Forms <= 1.1.5 - Missing Authorization4.3<= 1.1.51.1.6Patched before disclosure
6 Jan 2025CubeWP Forms – All-in-One Form Builder <= 1.1.5 - Missing Authorization5.3<= 1.1.5Not affectedn/a
24 Sep 2024CubeWP Forms – All-in-One Form Builder <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.1.11.1.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

3,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CubeWP Forms
4 May 2026813
11 May 2026361
18 May 2026505
25 May 2026241
1 Jun 2026208
8 Jun 2026195
15 Jun 2026183
22 Jun 2026171
29 Jun 2026156
6 Jul 2026175
13 Jul 2026164
20 Jul 2026156
27 Jul 2026153
3 Aug 2026146
10 Aug 2026154
17 Aug 2026162
24 Aug 2026166
31 Aug 2026143
7 Sep 2026138
14 Sep 2026147
21 Sep 2026166
28 Sep 2026206
5 Oct 2026193
12 Oct 2026206
19 Oct 2026221
26 Oct 2026189
2 Nov 202649

Weekly downloads over the last 4 weeks are 22% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 91 · 20,000+Zoho FormsScore 91 · 10,000+RTMFormScore 90 · 30,000+Contact Form by BestWebSoftScore 90 · 30,000+WPZOOM FormsScore 90 · 10,000+

Facts

Version1.1.11
AuthorImran Tauqeer
Added16 Dec 2022
Last updated6 May 2026
Active installs3,000+
Requires WordPress5.0
Tested up to6.9.11
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagslead form, contact form, custom fields, leads management, conditional fields

Other plugins by this author: CubeWP Framework, CubeWP Wallet

Questions

Is CubeWP Forms still maintained?

Yes. Last release 6 May 2026, 7 releases in the last 24 months.

Who owns CubeWP Forms, and has it changed hands?

No change recorded. Main committer cubewp1211 since Dec 2022.

Was CubeWP Forms removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is CubeWP Forms safe?

3 known vulnerabilities, all fixed (latest in 1.1.6). Not on the exploited list.

Is the latest CubeWP Forms update safe to install?

No ownership change before 1.1.11. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue