Skip to content
PluginCanary

Lead Form Builder & Contact Form

by ThemeHunk · 8,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 19 Sep 2026, 16 releases in 24 months, no unpatched vulnerabilities.

84/ 100 Canary Score
Sub-scores for Lead Form Builder & Contact Form
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Quick answers

Is Lead Form Builder & Contact Form still maintained?
Yes. Last release 19 Sep 2026, 16 releases in the last 24 months. 19 Sep 2026 · wordpress.org
Who owns Lead Form Builder & Contact Form, and has it changed hands?
No change recorded. Main committer themehunk since Jun 2016. 3 Nov 2026 · SVN log
Was Lead Form Builder & Contact Form removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Lead Form Builder & Contact Form safe?
12 known vulnerabilities, all fixed (latest in 2.0.2). Not on the exploited list. 23 Mar 2026 · Wordfence Intelligence
Is the latest Lead Form Builder & Contact Form update safe to install?
No ownership change before 2.2.6. No one-star spike after it. 19 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
themehunk7 Jun 2016 to 19 Sep 2026, 144 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
46 days ago
Releases, 24 months
16
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Lead Form Builder & Contact Form
Q1 20243
Q2 20241
Q3 20245
Q4 20241
Q1 20250
Q2 20252
Q3 20252
Q4 20250
Q1 20264
Q2 20265
Q3 20262
Q4 20260

Last release 19 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star4
4 star1
3 star0
2 star1
1 star0

Security record

4 vulnerabilities in 24 months (12 on record), all patched (latest fixed in 2.0.2).

Show 12 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
23 Mar 2026Lead Form Builder & Contact Form <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.0.12.0.2n/a
10 Mar 2026Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.0.12.0.2n/a
20 Jan 2026Contact Form & Lead Form Elementor Builder <= 2.0.1 - Authenticated (Subscriber+) Information Exposure4.3<= 2.0.12.0.2n/a
3 Mar 2025Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.9.71.9.8n/a
21 May 2024Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution5.4<= 1.9.11.9.2n/a
12 Apr 2024Responsive Contact Form Builder & Lead Generation Plugin <= 1.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting6.6<= 1.9.71.9.8n/a
11 Apr 2024Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Missing Authorization4.3<= 1.8.91.9.0n/a
11 Apr 2024Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery4.3<= 1.8.91.9.0n/a
22 Mar 2023Multiple Plugins By ThemeHunk (Various Versions) - Missing Authorization via settings_init6.5<= 1.8.41.8.5230
1 Feb 2022Contact Form & Lead Form Elementor Builder < 1.7.4 - Arbitrary Settings Change6.3< 1.7.41.7.434
5 Jan 2022Responsive Contact Form Builder & Lead Generation Plugin < 1.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4< 1.7.01.7.06
29 Nov 2021Contact Form & Lead Form Elementor Builder <= 1.6.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.31.6.41

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Lead Form Builder & Contact Form
4 May 2026294
11 May 2026562
18 May 2026655
25 May 20262,273
1 Jun 2026626
8 Jun 20264,241
15 Jun 2026561
22 Jun 2026406
29 Jun 2026390
6 Jul 2026596
13 Jul 2026428
20 Jul 2026463
27 Jul 2026442
3 Aug 20262,575
10 Aug 2026855
17 Aug 2026583
24 Aug 2026550
31 Aug 2026601
7 Sep 2026538
14 Sep 20262,924
21 Sep 20261,116
28 Sep 2026759
5 Oct 2026689
12 Oct 2026605
19 Oct 2026784
26 Oct 2026682
2 Nov 202676

Weekly downloads over the last 4 weeks are 43% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 91 · 20,000+Zoho FormsScore 91 · 10,000+RTMFormScore 90 · 30,000+Contact Form by BestWebSoftScore 90 · 30,000+WPZOOM FormsScore 90 · 10,000+

Facts

Version2.2.6
AuthorThemeHunk
Added7 Jun 2016
Last updated19 Sep 2026
Active installs8,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, contact form, form builder, lead generation, WordPress form plugin

Other plugins by this author: Advance Product Search- Voice & Ajax Search for WooCommerce, ThemeHunk Customizer, Hunk Companion, ThemeHunk - Side Cart, Ajax Cart & Menu Cart for WooCommerce, ThemeHunk Product Compare for WooCommerce, Variation Swatches for WooCommerce, WP Popup Builder - Popup Forms and Marketing Lead Generation, Easy Mega Menu for WordPress - ThemeHunk, Wishlist for WooCommerce, Vayu Blocks - Website Builder for the Gutenberg Block Editor, Unlimited Addons For Gutenberg Blocks, Store One - BOGO, Sales Notification, Sticky Add to Cart & Buy Now for WooCommerce

Questions

Is Lead Form Builder & Contact Form still maintained?

Yes. Last release 19 Sep 2026, 16 releases in the last 24 months.

Who owns Lead Form Builder & Contact Form, and has it changed hands?

No change recorded. Main committer themehunk since Jun 2016.

Was Lead Form Builder & Contact Form removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Lead Form Builder & Contact Form safe?

12 known vulnerabilities, all fixed (latest in 2.0.2). Not on the exploited list.

Is the latest Lead Form Builder & Contact Form update safe to install?

No ownership change before 2.2.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue