Skip to content
PluginCanary

weForms - Easy Drag & Drop Contact Form Builder For WordPress

by BoldGrid · 10,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 19 Oct 2026, fixed in 1.6.29.

82/ 100 Canary Score
Sub-scores for weForms - Easy Drag & Drop Contact Form Builder For WordPress
Ownership100
Maintenance100
Security65
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 1.6.29. Update to version 1.6.29 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 1.6.29. Update to version 1.6.29 or later.16 Oct 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
tareq19881 Aug 2017 to 20 Feb 2020, 29 commits
rabbii18 Aug 2018 to 24 Sep 2019, 15 commits
joemoto12 Feb 2020 to 16 Oct 2026, 14 commits
bwmarkle10 Mar 2020 to 8 Aug 2023, 4 commits
wvcody11 Aug 2020 to 11 Aug 2020, 1 commits
webacetechs1 Sep 2020 to 11 Nov 2020, 32 commits
jamesros16123 Dec 2020 to 9 Feb 2026, 4 commits
boldgrid8 Mar 2021 to 24 Jan 2022, 4 commits
avonville19 Jun 2021 to 16 Jul 2024, 28 commits
jacobd915 Mar 2026 to 5 Mar 2026, 1 commits

10 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
18 days ago
Releases, 24 months
4
Tested up to
7.1 current
Requires PHP
7.2.5 supported 8.2+
Releases per quarter for weForms - Easy Drag & Drop Contact Form Builder For WordPress
Q1 20243
Q2 20240
Q3 20242
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20262
Q2 20260
Q3 20260
Q4 20261

Last release 16 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.28 - Unauthenticated Arbitrary File Deletion9.1<= 1.6.281.6.290
16 Oct 2026weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter5.4<= 1.6.281.6.290
23 Mar 2026weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.26 - Unauthenticated PHP Object Injection8.1<= 1.6.261.6.270
10 Mar 2026weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API6.4<= 1.6.271.6.280
29 Dec 2025weForms <= 1.6.25 - Missing Authorization5.3<= 1.6.251.6.260
25 Jun 2024Various Plugins <= Various Version - Use of Polyfill.io5.3<= 1.6.231.6.2411
28 Mar 2024weForms <= 1.6.20 - Missing Authorization5.3<= 1.6.201.6.210
12 Mar 2024weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer7.2<= 1.6.211.6.220
27 Dec 2023weForms <= 1.6.18 - Missing Authorization via export_form_entries6.5<= 1.6.181.6.190
26 Dec 2023weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.6.171.6.180
12 Jul 2022weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 1.6.131.6.141
13 Aug 2020WeForms <= 1.4.7 - CSV injection via form entry8.6<= 1.4.71.4.80

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for weForms - Easy Drag & Drop Contact Form Builder For WordPress
Q4 20235.0
Q3 20243.0
Q4 20242.0

Average rating fell from 5.0 to 2.0 between Q4 2023 and Q4 2024.

Rating distribution
5 star91
4 star5
3 star3
2 star4
1 star8
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for weForms - Easy Drag & Drop Contact Form Builder For WordPress
4 May 2026259
11 May 2026515
18 May 2026531
25 May 2026444
1 Jun 2026420
8 Jun 2026420
15 Jun 2026382
22 Jun 2026343
29 Jun 2026343
6 Jul 2026358
13 Jul 2026351
20 Jul 2026364
27 Jul 2026360
3 Aug 2026362
10 Aug 2026325
17 Aug 2026412
24 Aug 2026317
31 Aug 2026341
7 Sep 2026329
14 Sep 2026395
21 Sep 2026447
28 Sep 2026445
5 Oct 2026444
12 Oct 20266,179
19 Oct 20261,987
26 Oct 20261,891
2 Nov 2026173

Weekly downloads over the last 4 weeks are 261% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version1.6.29
AuthorBoldGrid
Added1 Aug 2017
Last updated16 Oct 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.2.5
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, custom form, contact form, form builder, form creator

Other plugins by this author: W3 Total Cache, Post and Page Builder by BoldGrid - Visual Drag and Drop Editor, BoldGrid Easy SEO - Simple and Effective SEO, Total Upkeep - WordPress Backup Plugin plus Restore & Migrate by BoldGrid, Map Block, Sprout Invoices - Client Invoicing & Estimates, Help Scout, WP Forms + Sprout Invoices - Easy Invoice & Quote Submissions, Formidable Forms + Sprout Invoices - Easy Invoice & Estimate Submissions, Gravity Forms + Sprout Invoices - Easy Invoice & Estimate Submissions, Ninja Forms + Sprout Invoices - Easy Invoice & Estimate Submissions, Sprout Clients - CRM and Lead Management

Questions

Is weForms - Easy Drag & Drop Contact Form Builder For WordPress still maintained?

weForms - Easy Drag & Drop Contact Form Builder For WordPress was last updated on 16 Oct 2026. Its Canary status is Healthy.

Is weForms - Easy Drag & Drop Contact Form Builder For WordPress safe?

weForms - Easy Drag & Drop Contact Form Builder For WordPress has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns weForms - Easy Drag & Drop Contact Form Builder For WordPress?

The wordpress.org author is BoldGrid. Recent committers: joemoto, jacobd91, jamesros161, avonville1, bwmarkle. We have recorded no ownership change.

What can I use instead of weForms - Easy Drag & Drop Contact Form Builder For WordPress?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue