Skip to content
PluginCanary

Easy Form Builder by WhiteStudio - Drag & Drop Form Builder

by hassantafreshi · 1,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 16 Sep 2026, fixed in 4.2.0.

81/ 100 Canary Score
Sub-scores for Easy Form Builder by WhiteStudio - Drag & Drop Form Builder
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 4.2.0. Update to version 4.2.0 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 4.2.0. Update to version 4.2.0 or later.16 Sep 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master11 Feb 2021 to 11 Feb 2021, 1 commits
mrlast21 Feb 2021 to 23 Jul 2021, 45 commits
hassantafreshi6 Oct 2021 to 1 Oct 2026, 384 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
34 days ago
Releases, 24 months
47
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Easy Form Builder by WhiteStudio - Drag & Drop Form Builder
Q1 202416
Q2 202417
Q3 20246
Q4 20244
Q1 20252
Q2 20255
Q3 20255
Q4 20257
Q1 20266
Q2 20269
Q3 20268
Q4 20261

Last release 1 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
16 Sep 2026Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored Cross-Site Scripting7.24.0.0 to 4.1.34.2.00
16 Sep 2026Easy Form Builder 4.0.0 - 4.1.3 - Missing Authorization5.34.0.0 to 4.1.34.2.00
21 Jul 2026Easy Form Builder by WhiteStudio – Drag & Drop Form Builder <= 4.0.12 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.0.124.0.130
20 Jul 2026Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint9.8<= 4.0.114.0.120
28 May 2026Easy Form Builder by WhiteStudio — Drag & Drop Form Builder <= 4.0.6 - Unauthenticated SQL Injection7.5<= 4.0.64.0.70
13 Feb 2026Easy Form Builder <= 3.9.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Form Response Data Exposure5.3<= 3.9.33.9.40
6 Jan 2026Easy Form Builder <= 3.9.6 - Missing Authorization4.3<= 3.9.64.0.069
15 Dec 2025Easy Form Builder <= 3.8.20 - Missing Authorization5.3<= 3.8.203.8.210
7 Aug 2025Easy Form Builder <= 3.8.15 - Unauthenticated SQL Injection7.5<= 3.8.153.8.160
7 Jan 2025Easy Form Builder <= 3.8.8 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 3.8.83.8.90
29 Mar 2024Easy Form Builder <= 3.7.4 - Authenticated (Contributor+) SQL Injection9.9<= 3.7.43.7.50
16 Nov 2022Easy Form Builder <= 3.3.8 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5<= 3.3.83.4.00

Source: Wordfence Intelligence.

Reputation

Lifetime rating 5.0 from 70 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star70
4 star0
3 star0
2 star0
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Easy Form Builder by WhiteStudio - Drag & Drop Form Builder
4 May 2026209
11 May 2026261
18 May 2026274
25 May 2026295
1 Jun 20261,402
8 Jun 2026342
15 Jun 2026219
22 Jun 20261,400
29 Jun 20261,499
6 Jul 2026378
13 Jul 20261,354
20 Jul 20261,088
27 Jul 2026601
3 Aug 2026392
10 Aug 2026323
17 Aug 20261,113
24 Aug 2026412
31 Aug 2026375
7 Sep 2026397
14 Sep 20261,404
21 Sep 2026538
28 Sep 20261,203
5 Oct 2026560
12 Oct 2026503
19 Oct 2026769
26 Oct 2026487
2 Nov 2026197

Weekly downloads over the last 4 weeks are 27% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version4.3.0
Authorhassantafreshi
Added21 Feb 2021
Last updated1 Oct 2026
Active installs1,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagsform plugin, form builder, payment form, email templates, Multi-Step Form

Other plugins by this author: Social Chat Buttons, Easy Form Builder Data Tools, WS Scale Ring Size

Questions

Is Easy Form Builder by WhiteStudio - Drag & Drop Form Builder still maintained?

Easy Form Builder by WhiteStudio - Drag & Drop Form Builder was last updated on 1 Oct 2026. Its Canary status is Healthy.

Is Easy Form Builder by WhiteStudio - Drag & Drop Form Builder safe?

Easy Form Builder by WhiteStudio - Drag & Drop Form Builder has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Easy Form Builder by WhiteStudio - Drag & Drop Form Builder?

The wordpress.org author is hassantafreshi. Recent committers: hassantafreshi, mrlast, plugin-master. We have recorded no ownership change.

What can I use instead of Easy Form Builder by WhiteStudio - Drag & Drop Form Builder?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue