Skip to content
PluginCanary

Happyforms

Happyforms - Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms
by Happyforms · 20,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 30 days ago, tested with WordPress 7.1, no open vulnerabilities.

88/ 100 Canary Score

Based on 3 of 5 areas

Sub-scores for Happyforms
Ownership100
Maintenance100
Security65
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Happyforms still maintained?
Yes. Last release 5 Oct 2026, 16 releases in the last 24 months. 5 Oct 2026 · wordpress.org
Who owns Happyforms, and has it changed hands?
No change recorded. Main committer happyforms since Jan 2021. 4 Nov 2026 · SVN log
Was Happyforms removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Happyforms safe?
9 known vulnerabilities, all fixed (latest in 1.26.15). Not on the exploited list. 19 Oct 2026 · Wordfence Intelligence
Is the latest Happyforms update safe to install?
No ownership change before 1.26.17. No one-star spike after it. 5 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 9 past vulnerabilities, all patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
thethemefoundry7 Feb 2018 to 29 Jan 2021, 247 commits
happyforms29 Jan 2021 to 5 Oct 2026, 139 commits
happyformsharries21 Feb 2024 to 7 Nov 2024, 5 commits

3 committers recorded. No ownership changes recorded since 2018.

Maintenance

Last release
30 days ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Happyforms
Q1 20241
Q2 20241
Q3 20242
Q4 20241
Q1 20255
Q2 20253
Q3 20250
Q4 20252
Q1 20261
Q2 20261
Q3 20262
Q4 20261

Last release 5 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Last 90 days vs lifetime average rating for Happyforms
Last 90 daysNo reviews
Lifetime4.4
Average rating per quarter
Average rating per quarter for Happyforms
Q1 20255.0
Q2 20254.0
Q1 20261.0

Average rating fell from 5.0 to 1.0 between Q1 2025 and Q1 2026.

Rating distribution
5 star350
4 star16
3 star9
2 star7
1 star51
Latest low reviews

Security record

5 vulnerabilities in 24 months (9 on record), all patched (latest fixed in 1.26.15).

Show 9 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026Happyforms - Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms < 1.26.15 - Unauthenticated HTML Injection5.8< 1.26.151.26.15Before disclosure
24 Sep 2026Happyforms - Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.15 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.26.151.26.16Same day
9 Jul 2026HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion6.6<= 1.26.121.26.13Before disclosure
4 Jun 2026Happyforms - Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms <= 1.26.13 - Unauthenticated PHP Object Injection8.1<= 1.26.131.26.14Before disclosure
20 Nov 2024Happyforms <= 1.26.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.26.21.26.3Before disclosure
29 Aug 2024Happyforms <= 1.26.0 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 1.26.01.26.1Before disclosure
31 Jan 2024Happyforms <= 1.25.10 - Missing Authorization5.3<= 1.25.101.25.1122
27 Nov 2023Happyforms <= 1.25.9 - Reflected Cross-Site Scripting6.1<= 1.25.91.25.1019
13 Jan 2023Happyforms <= 1.21.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks6.4<= 1.21.11.22.0Same day

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Happyforms
4 May 2026348
11 May 2026713
18 May 20261,621
25 May 202610,178
1 Jun 20262,010
8 Jun 20261,830
15 Jun 20261,057
22 Jun 2026783
29 Jun 2026709
6 Jul 20261,662
13 Jul 202610,745
20 Jul 20261,712
27 Jul 20261,163
3 Aug 20261,015
10 Aug 2026880
17 Aug 2026709
24 Aug 2026793
31 Aug 2026849
7 Sep 2026676
14 Sep 2026676
21 Sep 202610,132
28 Sep 20261,843
5 Oct 202611,453
12 Oct 20261,481
19 Oct 20261,761
26 Oct 20261,242
2 Nov 2026179

Weekly downloads over the last 4 weeks are 54% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Zoho FormsScore 100 · 10,000+RTMFormScore 98 · 30,000+WPZOOM FormsScore 98 · 10,000+

Facts

Version1.26.17
AuthorHappyforms
Added7 Feb 2018
Last updated5 Oct 2026
Active installs20,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, custom form, contact form, form builder, WordPress form plugin

Questions

Is Happyforms still maintained?

Yes. Last release 5 Oct 2026, 16 releases in the last 24 months.

Who owns Happyforms, and has it changed hands?

No change recorded. Main committer happyforms since Jan 2021.

Was Happyforms removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Happyforms safe?

9 known vulnerabilities, all fixed (latest in 1.26.15). Not on the exploited list.

Is the latest Happyforms update safe to install?

No ownership change before 1.26.17. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue