Skip to content
PluginCanary

MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor

by Roxnor · 500,000+ active installs · Checked 3 Nov 2026
Healthy7 Warnings

Healthy: vulnerability published 22 Oct 2026, fixed in 4.3.3.

81/ 100 Canary Score
Sub-scores for MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 4.3.3. Update to version 4.3.3 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 4.3.1. Update to version 4.3.1 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 4.3.1. Update to version 4.3.1 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 4.3.1. Update to version 4.3.1 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 4.3.1. Update to version 4.3.1 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Sep 2026, fixed in 4.1.9. Update to version 4.1.9 or later.9 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 24 Aug 2026, fixed in 4.1.9. Update to version 4.1.9 or later.24 Aug 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master27 Aug 2019 to 27 Aug 2019, 1 commits
ataurr29 Aug 2019 to 9 Jun 2026, 150 commits
wpmet20 Apr 2022 to 15 Jan 2024, 8 commits
xpeedstudio11 Apr 2023 to 27 Nov 2025, 38 commits
roxnor5 Jul 2026 to 2 Nov 2026, 12 commits

New committer roxnor made a first commit on 5 Jul 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
33
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
Q1 20244
Q2 20243
Q3 20241
Q4 20242
Q1 20255
Q2 20253
Q3 20256
Q4 20253
Q1 20262
Q2 20262
Q3 20267
Q4 20263

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

75% of 4 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.2 - Missing Authorization5.3<= 4.3.24.3.30
1 Oct 2026MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.3.04.3.10
1 Oct 2026MetForm <= 4.3.0 - Unauthenticated Arbitrary HTML Injection in Notification Emails4.7<= 4.3.04.3.10
1 Oct 2026MetForm 2.2.1 - 4.3.0 - Unauthenticated Information Exposure5.32.2.1 to 4.3.04.3.10
1 Oct 2026MetForm <= 4.3.0 - Unauthenticated Information Exposure5.3<= 4.3.04.3.10
9 Sep 2026MetForm – Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor < 4.1.9 - Unauthenticated Email Header Injection5.3< 4.1.94.1.90
24 Aug 2026MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting6.4<= 4.1.84.1.90
23 Jan 2026MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 4.1.0 - Unauthenticated Form Submission Exposure via Forgeable Cookie Value3.7<= 4.1.04.1.10
29 Jul 2025MetForm <= 4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via `mf-template` DOM Element6.4<= 4.0.14.0.20
27 Mar 2025Metform <= 3.9.2 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 3.9.23.9.30
16 Aug 2024Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload8.1<= 3.2.43.3.00
10 Jun 2024MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor <= 3.8.8 - Unauthenticated Sensitive Information Exposure5.3<= 3.8.83.8.90
25 Apr 2024Metform Elementor Contact Form Builder <= 3.8.3 - Missing Authorization to Notice Dismissal4.3<= 3.8.33.8.40
1 Apr 2024Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets6.4<= 3.8.53.8.60
7 Mar 2024Metform Elementor Contact Form Builder <= 3.8.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.8.33.8.40
8 Jan 2024Metform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery5.4<= 3.8.13.8.20
26 Dec 2023Metform Elementor Contact Form Builder <= 3.4.0 - Missing Authorization via submit5.3<= 3.4.03.4.10
30 Aug 2023Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode4.3<= 3.3.13.3.20
22 Jun 2023Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup5.4<= 3.3.23.3.30
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_payment_status' shortcode4.3<= 3.3.13.3.20
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode6.5<= 3.3.13.3.20
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_last_name shortcode5.4<= 3.3.03.3.10
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_thankyou shortcode6.5<= 3.3.13.3.20
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via mf_thankyou shortcode4.9<= 3.3.03.3.10
8 Jun 2023Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf_last_name shortcode4.3<= 3.3.13.3.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
Q1 20265.0
Q2 20264.6
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star445
4 star23
3 star9
2 star5
1 star27
Latest low reviews

Momentum

500,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor
4 May 202618,031
11 May 202628,790
18 May 202645,207
25 May 202620,499
1 Jun 202619,270
8 Jun 2026129,561
15 Jun 202630,241
22 Jun 202623,442
29 Jun 202621,583
6 Jul 2026154,588
13 Jul 2026155,601
20 Jul 2026132,230
27 Jul 202631,043
3 Aug 202689,177
10 Aug 2026211,320
17 Aug 202635,219
24 Aug 202676,973
31 Aug 202689,936
7 Sep 202625,677
14 Sep 202637,574
21 Sep 202627,159
28 Sep 2026209,060
5 Oct 202656,954
12 Oct 202623,135
19 Oct 2026127,824
26 Oct 202652,961
2 Nov 202666,216

Weekly downloads over the last 4 weeks are 6% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version4.3.4
AuthorRoxnor
Added29 Aug 2019
Last updated2 Nov 2026
Active installs500,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryForms & Data Collection > Form Builders & Creators
Tagscustom form, form builder, elementor form, Multi-Step Form, contact form builder

Other plugins by this author: ElementsKit Elementor Addons - Advanced Widgets & Templates Addons for Elementor, ShopEngine - All-in-One Elementor WooCommerce Builder with eCommerce Templates & Woo Widgets, Wp Social Login and Register Social Counter, Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers, EmailKit - Email Customizer for WooCommerce & WP, GetGenie - AI SEO Assistant & Content Writer with Keyword Research, AEO & GEO, WP Ultimate Review, ShopEngine Gutenberg WooCommerce Builder Blocks Addon - All in One WooCommerce Solution, Dynamic Fields Engine - Custom post types, Custom fields, Meta fields, Taxonomies, Listing builder, Query builder and Relations, TableKit - WordPress Table Builder for Data Tables, WooCommerce Product Tables & Post Tables, Rox Appointment Booking - Event, Calendar & Appointment Scheduling, FundEngine - Donation and Crowdfunding Platform

Questions

Is MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor still maintained?

MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor safe?

MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor?

The wordpress.org author is Roxnor. Recent committers: roxnor, ataurr, xpeedstudio, wpmet, plugin-master. New committer roxnor made a first commit on 5 Jul 2026.

What can I use instead of MetForm - Contact Form, Survey, Quiz, Conditional Forms, Form Templates & Custom Form Builder for Elementor?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue