Skip to content
PluginCanary

HT Contact Form

HT Contact Form - Drag & Drop Form Builder for WordPress
by HT Plugins · 10,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 28 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for HT Contact Form
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is HT Contact Form still maintained?
Yes. Last release 29 Oct 2026, 28 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns HT Contact Form, and has it changed hands?
No change recorded. Main committer htplugins since Mar 2019. 3 Nov 2026 · SVN log
Was HT Contact Form removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is HT Contact Form safe?
11 known vulnerabilities, all fixed (latest in 2.10.3). Not on the exploited list. 28 Sep 2026 · Wordfence Intelligence
Is the latest HT Contact Form update safe to install?
No ownership change before 2.10.4. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master3 Mar 2019 to 3 Mar 2019, 1 commits
htplugins3 Mar 2019 to 29 Oct 2026, 107 commits

2 committers recorded. No ownership change since 2019.

Maintenance

Last release
6 days ago
Releases, 24 months
28
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for HT Contact Form
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20251
Q2 20253
Q3 20255
Q4 20252
Q1 20265
Q2 20264
Q3 20267
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Average rating per quarter for HT Contact Form
Q4 20231.0
Q1 20245.0
Q3 20265.0

Average rating rose from 1.0 to 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star4
4 star0
3 star0
2 star0
1 star1
Latest low reviews

Security record

10 vulnerabilities in 24 months (11 on record), all patched (latest fixed in 2.10.3).

Show 11 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Sep 2026HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.10.2 Unauthenticated Stored Cross-Site Scripting via Rich Text Editor Field7.2<= 2.10.22.10.3Patched before disclosure
24 Sep 2026HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume7.2<= 2.10.12.10.2Patched before disclosure
6 Aug 2026HT Contact Form <= 2.9.2 - Unauthenticated Information Exposure5.3<= 2.9.22.9.3Patched before disclosure
27 May 2026HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field7.2<= 2.8.22.8.3Patched before disclosure
20 May 2026HT Contact Form – Drag & Drop Form Builder for WordPress <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.8.22.8.3Patched before disclosure
16 Jul 2025HT Contact Form 7 <= 2.0.0 - Authenticated (Administrator+) Local File Inclusion6.6<= 2.0.02.1.0Patched before disclosure
14 Jul 2025HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload9.8<= 2.2.12.2.2Patched before disclosure
14 Jul 2025HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move9.1<= 2.2.12.2.2Patched before disclosure
14 Jul 2025HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion9.1<= 2.2.12.2.2Patched before disclosure
24 Jan 2025HT Conctact Form 7 <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.2.11.2.2Patched before disclosure
28 Feb 2023Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks <= 1.1.5 - Cross-Site Request Forgery to Arbitrary Plugin Activation4.3<= 1.1.51.1.66

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for HT Contact Form
4 May 2026562
11 May 2026960
18 May 20263,710
25 May 20262,387
1 Jun 20261,099
8 Jun 2026923
15 Jun 2026715
22 Jun 20263,707
29 Jun 20264,018
6 Jul 20261,385
13 Jul 20264,191
20 Jul 20261,168
27 Jul 20262,927
3 Aug 20262,650
10 Aug 2026979
17 Aug 20261,347
24 Aug 20265,217
31 Aug 20262,963
7 Sep 20264,131
14 Sep 20261,476
21 Sep 20267,513
28 Sep 20263,001
5 Oct 20261,422
12 Oct 2026832
19 Oct 2026969
26 Oct 20263,853
2 Nov 2026291

Weekly downloads over the last 4 weeks are 38% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 91 · 20,000+Zoho FormsScore 91 · 10,000+RTMFormScore 90 · 30,000+Contact Form by BestWebSoftScore 90 · 30,000+WPZOOM FormsScore 90 · 10,000+

Facts

Version2.10.4
AuthorHT Plugins
Added3 Mar 2019
Last updated29 Oct 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, custom form, contact form, form builder, drag-and-drop

Other plugins by this author: HT Slider For Elementor, Insert Headers and Footers Code - HT Script, HT Easy GA4 - Google Analytics WordPress Plugin, Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection), Really Simple Google Tag Manager (GTM), Whols - Wholesale Prices and B2B Store Solution for WooCommerce, HT Form Widget for Elementor and WPForms, WishSuite - Wishlist for WooCommerce, HT Mega - Absolute Addons for WPBakery Page Builder, HT Newsletter for Elementor, HT Feed, Ever Compare - Products Compare Plugin for WooCommerce

Questions

Is HT Contact Form still maintained?

Yes. Last release 29 Oct 2026, 28 releases in the last 24 months.

Who owns HT Contact Form, and has it changed hands?

No change recorded. Main committer htplugins since Mar 2019.

Was HT Contact Form removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is HT Contact Form safe?

11 known vulnerabilities, all fixed (latest in 2.10.3). Not on the exploited list.

Is the latest HT Contact Form update safe to install?

No ownership change before 2.10.4. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue