HTML Forms - Simple WordPress Forms Plugin
Healthy: 5 vulnerabilities published in the last 24 months.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 70 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| DvanKooten | 25 Oct 2017 to 10 May 2024, 119 commits |
|---|---|
| linksoftware | 12 May 2024 to 22 Sep 2026, 57 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 43 days ago
- Releases, 24 months
- 16
- Tested up to
- 7.1 current
- Requires PHP
- 5.3 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 2 |
| Q4 2024 | 2 |
| Q1 2025 | 3 |
| Q2 2025 | 1 |
| Q3 2025 | 2 |
| Q4 2025 | 3 |
| Q1 2026 | 3 |
| Q2 2026 | 0 |
| Q3 2026 | 3 |
| Q4 2026 | 0 |
Last release 22 Sep 2026. Tested with WordPress 7.1 (current).
Support
100% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Dec 2025 | HTML Forms – Simple WordPress Forms Plugin <= 1.6.0 - Unauthenticated Stored Cross-Site Scripting | 6.1 | <= 1.6.0 | 1.6.1 | 0 |
| 7 Nov 2025 | HTML Forms <= 1.5.5 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | <= 1.5.5 | 1.5.6 | 0 |
| 22 Apr 2025 | HTML Forms <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.5.2 | 1.5.3 | 0 |
| 1 Apr 2025 | HTML Forms <= 1.5.1 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.5.1 | 1.5.2 | 0 |
| 18 Dec 2024 | HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting | 6.1 | <= 1.4.1 | 1.4.2 | 0 |
| 10 Jul 2024 | HTML Forms – Simple WordPress Forms Plugin <= 1.3.33 - Cross-Site Request Forgery | 4.3 | <= 1.3.33 | 1.3.34 | 0 |
| 1 Jul 2024 | HTML Forms – Simple WordPress Forms <= 1.3.32 - Authenticated (Admin+) Stored Cross-Site Scripting | 4.4 | <= 1.3.32 | 1.3.33 | 0 |
| 21 Dec 2023 | HTML Forms <= 1.3.28 - Authenticated (Administrator+) Cross-Site Scripting | 5.5 | <= 1.3.28 | 1.3.30 | 78 |
| 7 Nov 2022 | HTML Forms <= 1.3.24 - Authenticated (Administrator+) SQL Injection | 7.2 | <= 1.3.24 | 1.3.25 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 5.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q3 2024 | 5.0 |
| Q4 2024 | 5.0 |
| Q2 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
Average rating stayed at 5.0 between Q4 2023 and Q2 2026.
| 5 star | 56 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 1 |
Momentum
10,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 254 |
|---|---|
| 11 May 2026 | 731 |
| 18 May 2026 | 677 |
| 25 May 2026 | 656 |
| 1 Jun 2026 | 617 |
| 8 Jun 2026 | 582 |
| 15 Jun 2026 | 677 |
| 22 Jun 2026 | 610 |
| 29 Jun 2026 | 515 |
| 6 Jul 2026 | 685 |
| 13 Jul 2026 | 611 |
| 20 Jul 2026 | 676 |
| 27 Jul 2026 | 631 |
| 3 Aug 2026 | 3,675 |
| 10 Aug 2026 | 1,507 |
| 17 Aug 2026 | 1,150 |
| 24 Aug 2026 | 1,002 |
| 31 Aug 2026 | 1,282 |
| 7 Sep 2026 | 965 |
| 14 Sep 2026 | 4,069 |
| 21 Sep 2026 | 4,461 |
| 28 Sep 2026 | 1,331 |
| 5 Oct 2026 | 1,346 |
| 12 Oct 2026 | 1,161 |
| 19 Oct 2026 | 1,412 |
| 26 Oct 2026 | 1,312 |
| 2 Nov 2026 | 196 |
Weekly downloads over the last 4 weeks are 16% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.7.1 |
|---|---|
| Author | Link Software LLC |
| Added | 25 Oct 2017 |
| Last updated | 22 Sep 2026 |
| Active installs | 10,000+ |
| Requires WordPress | 4.6 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.3 |
| Category | Forms & Data Collection > Form Builders & Creators |
| Tags | form, html form, email form, upload form, contact form |
Other plugins by this author: White Label - WordPress Custom Admin, Custom Login Page, and Custom Dashboard, WP Terms Popup - Terms and Conditions and Privacy Policy WordPress Popups, ChimpBridge - Create and Send Mailchimp Campaigns
Questions
Is HTML Forms - Simple WordPress Forms Plugin still maintained?
HTML Forms - Simple WordPress Forms Plugin was last updated on 22 Sep 2026. Its Canary status is Healthy.
Is HTML Forms - Simple WordPress Forms Plugin safe?
HTML Forms - Simple WordPress Forms Plugin has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns HTML Forms - Simple WordPress Forms Plugin?
The wordpress.org author is Link Software LLC. Recent committers: linksoftware, DvanKooten, plugin-master. We have recorded no ownership change.
What can I use instead of HTML Forms - Simple WordPress Forms Plugin?
Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.