Skip to content
PluginCanary

SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz

by Brainstorm Force · 500,000+ active installs · Checked 3 Nov 2026
Healthy4 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 2.13.0.

83/ 100 Canary Score
Sub-scores for SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 2.13.0. Update to version 2.13.0 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.12.8. Update to version 2.12.8 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 2.12.3. Update to version 2.12.3 or later.4 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 2.12.6. Update to version 2.12.6 or later.3 Sep 2026Evidence
  • InfoSEC-322 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master17 Mar 2024 to 17 Mar 2024, 1 commits
brainstormworg1 Apr 2024 to 4 Nov 2026, 128 commits
adi389028 Jun 2025 to 7 Jul 2025, 19 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
86
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
Q1 20240
Q2 20244
Q3 20245
Q4 202416
Q1 20258
Q2 202519
Q3 202510
Q4 202511
Q1 20267
Q2 202611
Q3 20268
Q4 20262

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.9 - Missing Authorization5.3<= 2.12.92.13.00
13 Oct 2026SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.12.72.12.80
4 Sep 2026SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload7.2<= 2.12.22.12.30
3 Sep 2026SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz <= 2.12.5 - Unauthenticated Insecure Direct Object Reference5.3<= 2.12.52.12.60
31 Jul 2026SureForms <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingWrapper' Block Attribute6.4<= 2.8.12.8.20
23 Jun 2026SureForms <= 2.11.0 - Unauthenticated Payment Amount Bypass5.3<= 2.11.02.11.10
27 Mar 2026SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via 'form_id'7.5<= 2.5.22.6.00
15 Feb 2026SureForms <= 2.2.1 - Missing Authorization5.3<= 2.2.12.2.20
13 Feb 2026SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticated Stripe Payment Amount Manipulation7.5<= 2.2.12.2.20
20 Dec 2025SureForms <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 2.2.02.2.10
18 Nov 2025SureForms <= 1.13.1 - Cross-Site Request Forgery Protection Bypass via Improper Nonce Distribution5.3<= 1.13.11.13.20
12 Nov 2025SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure5.3<= 1.13.11.13.20
13 Oct 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure4.3<= 1.12.11.12.20
19 Sep 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.12.0 - Missing Authorization to Authenticated (Contributor+) Form Creation4.3<= 1.12.01.12.10
2 Sep 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.9.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.9.01.9.10
11 Jul 2025SureForms <= 1.7.1 - Reflected Cross-Site Scripting6.1<= 1.7.11.7.20
8 Jul 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Submission Deletion8.10.0 to 0.0.13, 1.0 to 1.0.6, 1.1 to 1.1.1, 1.2 to 1.2.4, 1.3 to 1.3.1, 1.4 to 1.4.4, 1.5, 1.6 to 1.6.4, 1.7 to 1.7.30.0.140
8 Jul 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion7.50.0 to 0.0.13, 1.0 to 1.0.6, 1.1 to 1.1.1, 1.2 to 1.2.4, 1.3 to 1.3.1, 1.4 to 1.4.4, 1.5, 1.6 to 1.6.4, 1.7 to 1.7.30.0.140
11 Apr 2025SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.4.31.4.40
11 Apr 2025SureForms <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.4.31.4.40
9 Apr 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Settings Update4.3<= 1.4.31.4.40
7 Jan 2025SureForms – Drag and Drop Form Builder for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Protected Post Disclosure5.3<= 1.2.21.2.30

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
Q2 20265.0
Q3 20264.8
Q4 20264.5

Average rating fell from 5.0 to 4.5 between Q2 2026 and Q4 2026.

Rating distribution
5 star94
4 star3
3 star2
2 star1
1 star2
Latest low reviews

Momentum

500,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz
4 May 202626,569
11 May 2026104,243
18 May 2026119,621
25 May 2026102,472
1 Jun 2026105,236
8 Jun 2026104,495
15 Jun 2026105,963
22 Jun 2026107,402
29 Jun 202639,126
6 Jul 2026117,359
13 Jul 202638,195
20 Jul 2026110,019
27 Jul 202638,643
3 Aug 2026123,835
10 Aug 202637,424
17 Aug 2026121,578
24 Aug 2026111,738
31 Aug 2026126,571
7 Sep 2026114,982
14 Sep 202654,688
21 Sep 2026116,857
28 Sep 202641,451
5 Oct 202647,651
12 Oct 2026122,463
19 Oct 202643,162
26 Oct 2026137,091
2 Nov 20266,441

Weekly downloads over the last 4 weeks are 10% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version2.13.0
AuthorBrainstorm Force
Added1 Apr 2024
Last updated27 Oct 2026
Active installs500,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, ai forms, contact form, form builder, payment form

Other plugins by this author: Ultimate Addons for Elementor - Widgets, Templates, WooCommerce & Header Footer Builder, Starter Templates: AI-Powered Website Templates for Elementor & Gutenberg, Spectra Legacy - Gutenberg Blocks, Custom Fonts - Host Your Fonts Locally, Cart Abandonment Recovery for WooCommerce - Recover Lost Sales with Automated Emails, SureRank SEO - Meta Tags, Social Preview, XML Sitemap, Schema & Open Graph, SureMail - SMTP and Email Logs Plugin with Amazon SES, Postmark, and Other Providers, CartFlows - Funnel Builder & Checkout Plugin for WooCommerce, Astra Widgets, Variation Swatches for WooCommerce - Color, Image & Size Swatches, OttoKit: All-in-One Automation Platform, Lightweight Sidebar Manager

Questions

Is SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz still maintained?

SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz was last updated on 27 Oct 2026. Its Canary status is Healthy.

Is SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz safe?

SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz has no open unpatched vulnerabilities on record. 22 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz?

The wordpress.org author is Brainstorm Force. Recent committers: brainstormworg, adi3890, plugin-master. We have recorded no ownership change.

What can I use instead of SureForms - Contact Form Builder, AI Forms, Payment Form, Survey & Quiz?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue