Skip to content
PluginCanary

MW WP Form

by Webの相談所 · 200,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 27 Sep 2026, 8 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.4.14, 7 major versions behind 7.1.4.

82/ 100 Canary Score
Sub-scores for MW WP Form
Ownership100
Maintenance90
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is MW WP Form still maintained?
Yes. Last release 27 Sep 2026, 8 releases in the last 24 months. 27 Sep 2026 · wordpress.org
Who owns MW WP Form, and has it changed hands?
No change recorded. Main committer websoudan since Nov 2023. 4 Nov 2026 · SVN log
Was MW WP Form removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is MW WP Form safe?
14 known vulnerabilities, all fixed (latest in 5.1.8). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest MW WP Form update safe to install?
No ownership change before 5.1.8. No one-star spike after it. 27 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.4.14, 7 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
inc273417 Dec 2012 to 20 Sep 2023, 330 commits
websoudan29 Nov 2023 to 27 Sep 2026, 13 commits
mt8.biz26 Mar 2026 to 8 Apr 2026, 2 commits

3 committers recorded. No ownership change since 2012.

Maintenance

Last release
38 days ago
Releases, 24 months
8
Tested up to
6.4 vs 7.1
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for MW WP Form
Q1 20242
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20263
Q3 20264
Q4 20260

Last release 27 Sep 2026. Tested up to 6.4, 7 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Rating distribution
5 star16
4 star2
3 star2
2 star0
1 star3
Latest low reviews

Security record

9 vulnerabilities in 24 months (14 on record), all patched (latest fixed in 5.1.8).

Show 14 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026MW WP Form <= 5.1.7 - Unauthenticated Sensitive Information Exposure in 'post_id' Parameter5.3<= 5.1.75.1.8Patched before disclosure
1 Oct 2026MW WP Form <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'post_id' Parameter (via stored form-submitted post meta)7.2<= 5.1.75.1.8Patched before disclosure
28 Aug 2026MW WP Form < 5.1.6 - Authenticated (Editor+) Stored Cross-Site Scripting4.4< 5.1.65.1.6Patched before disclosure
27 Aug 2026MW WP Form < 5.1.5 - Unauthenticated Arbitrary Shortcode Execution6.5< 5.1.55.1.5Patched before disclosure
9 Jun 2026MW WP Form <= 5.1.3 - Authenticated (Editor+) Stored Cross-Site Scripting via 'memo' Parameter4.4<= 5.1.35.1.4Patched before disclosure
1 Jun 2026MW WP Form <= 5.1.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 5.1.35.1.4Patched before disclosure
13 May 2026MW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter5.3<= 5.1.25.1.3Patched before disclosure
8 Apr 2026MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys8.1<= 5.1.15.1.2Patched before disclosure
1 Apr 2026MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir8.1<= 5.1.05.1.1Patched before disclosure
31 Jan 2024MW WP Form <= 5.0.6 - Authenticated (Editor+) Stored Cross-Site Scripting5.5<= 5.0.65.1.042
15 Dec 2023MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion7.5<= 5.0.35.0.4Patched before disclosure
4 Dec 2023MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload9.8<= 5.0.15.0.2Patched before disclosure
19 Oct 2023MW WP Form <= 4.4.5 - Missing Authorization5.3<= 4.4.55.0.0Patched before disclosure
8 May 2023MW WP Form <= 4.4.2 - Directory Traversal via _file_upload5.3< 4.4.34.4.3Patched before disclosure

Changelog mentions of security fixes: 5.1.4 (security, escaping); 5.1.5 (security, escaping); 5.1.6 (security, escaping); 5.1.7 (security); 5.1.8 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for MW WP Form
4 May 20261,288
11 May 20263,591
18 May 20263,345
25 May 202624,350
1 Jun 20264,617
8 Jun 20263,146
15 Jun 20262,772
22 Jun 20262,511
29 Jun 20262,255
6 Jul 20262,052
13 Jul 20262,174
20 Jul 20264,142
27 Jul 20262,941
3 Aug 20262,457
10 Aug 20261,514
17 Aug 20261,982
24 Aug 202639,229
31 Aug 20266,757
7 Sep 20263,958
14 Sep 20263,507
21 Sep 202611,436
28 Sep 202621,342
5 Oct 20266,282
12 Oct 20264,229
19 Oct 202619,833
26 Oct 202612,121
2 Nov 20261,323

Weekly downloads over the last 4 weeks are 30% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Zoho FormsScore 100 · 10,000+RTMFormScore 98 · 30,000+WPZOOM FormsScore 98 · 10,000+FormLayerScore 96 · 100,000+

Facts

Version5.1.8
AuthorWebの相談所
Added17 Dec 2012
Last updated27 Sep 2026
Active installs200,000+
Requires WordPress6.0
Tested up to6.4.14
Requires PHP8.0
CategoryForms & Data Collection > Form Builders & Creators
Tagsform, mail, confirm, preview, shortcode

Other plugins by this author: Really Simple CSV Importer

Questions

Is MW WP Form still maintained?

Yes. Last release 27 Sep 2026, 8 releases in the last 24 months.

Who owns MW WP Form, and has it changed hands?

No change recorded. Main committer websoudan since Nov 2023.

Was MW WP Form removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is MW WP Form safe?

14 known vulnerabilities, all fixed (latest in 5.1.8). Not on the exploited list.

Is the latest MW WP Form update safe to install?

No ownership change before 5.1.8. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue