Skip to content
PluginCanary

WS Form LITE

WS Form LITE - Drag & Drop Contact Form Builder
by Mark Westguard · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 4 Nov 2026, 61 releases in 24 months, no unpatched vulnerabilities.

85/ 100 Canary Score
Sub-scores for WS Form LITE
Ownership100
Maintenance100
Security65
Support70
Reputation85

How the score works

Quick answers

Is WS Form LITE still maintained?
Yes. Last release 4 Nov 2026, 61 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns WS Form LITE, and has it changed hands?
No change recorded. Main committer westguard since Sep 2018. 4 Nov 2026 · SVN log
Was WS Form LITE removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is WS Form LITE safe?
11 known vulnerabilities, all fixed (latest in 1.10.82). Not on the exploited list. 21 Aug 2026 · Wordfence Intelligence
Is the latest WS Form LITE update safe to install?
No ownership change before 1.12.18. No one-star spike after it. 4 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
westguard21 Sep 2018 to 4 Nov 2026, 510 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
today
Releases, 24 months
61
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for WS Form LITE
Q1 20243
Q2 20244
Q3 20243
Q4 20245
Q1 202514
Q2 20257
Q3 20252
Q4 202511
Q1 20261
Q2 202610
Q3 20269
Q4 20263

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (4 reviews). Lifetime: 5.0.

Average rating per quarter for WS Form LITE
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q2 2025 and Q3 2026.

Rating distribution
5 star320
4 star1
3 star1
2 star0
1 star0

Security record

5 vulnerabilities in 24 months (11 on record), all patched (latest fixed in 1.10.82).

Show 11 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
21 Aug 2026WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission9.8<= 1.10.801.10.82Patched before disclosure
10 Jul 2026WS Form LITE <= 1.11.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Settings Update4.3<= 1.11.71.11.8Patched before disclosure
24 Apr 2025WS Form LITE - Drag & Drop Contact Form Builder for WordPress <= 1.10.35 - Missing Authorization to Unauthenticated Sensitive Information Exposure5.3<= 1.10.351.10.361
27 Jan 2025WS Form LITE and PRO <= 1.10.13 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.10.131.10.14Patched before disclosure
5 Nov 2024WS Form LITE - Drag & Drop Contact Form Builder for WordPress <= 1.9.244 - Reflected Cross-Site Scripting via URL6.1<= 1.9.2441.9.245Patched before disclosure
25 Sep 2024WS Form LITE <= 1.9.238 - Unauthenticated Stored Cross-Site Scripting6.1<= 1.9.2381.9.244Patched before disclosure
6 Jun 2024WS Form LITE <= 1.9.217 - Unauthenticated CSV Injection4.7<= 1.9.2171.9.218Patched before disclosure
28 Dec 2023WS Form LITE <= 1.9.170 - Authenticated(Administrator+) SQL Injection6.6< 1.9.1711.9.171Patched before disclosure
23 May 2023WS Form LITE <= 1.9.117 - CAPTCHA Bypass5.3<= 1.9.1171.9.118Patched before disclosure
31 Jan 2022WS Form LITE and Pro < 1.8.176 - Stored Cross-Site Scripting4.8< 1.8.1761.8.176Patched before disclosure
31 Jan 2022WS Form LITE and WS Form Pro < 1.8.176 - Stored Cross-Site Scripting7.2< 1.8.1761.8.176Patched before disclosure

Changelog mentions of security fixes: 1.12.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for WS Form LITE
4 May 20264,177
11 May 20261,805
18 May 20268,801
25 May 20261,621
1 Jun 2026951
8 Jun 20265,351
15 Jun 20264,968
22 Jun 20261,677
29 Jun 20265,283
6 Jul 20265,545
13 Jul 20269,937
20 Jul 20261,617
27 Jul 20265,309
3 Aug 20265,872
10 Aug 20269,875
17 Aug 20262,336
24 Aug 20265,621
31 Aug 20262,062
7 Sep 20265,990
14 Sep 20262,113
21 Sep 20261,525
28 Sep 20261,067
5 Oct 20261,170
12 Oct 20266,113
19 Oct 20261,774
26 Oct 20261,660
2 Nov 2026231

Weekly downloads over the last 4 weeks are 37% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Contact Form by BestWebSoftScore 93 · 30,000+Zoho FormsScore 91 · 10,000+RTMFormScore 90 · 30,000+WPZOOM FormsScore 90 · 10,000+

Facts

Version1.12.18
AuthorMark Westguard
Added21 Sep 2018
Last updated4 Nov 2026
Active installs10,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.2
CategoryForms & Data Collection > Form Builders & Creators
TagsGDPR, forms, custom form, contact form, form builder

Other plugins by this author: Image Roulette - Random Image Block

Questions

Is WS Form LITE still maintained?

Yes. Last release 4 Nov 2026, 61 releases in the last 24 months.

Who owns WS Form LITE, and has it changed hands?

No change recorded. Main committer westguard since Sep 2018.

Was WS Form LITE removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is WS Form LITE safe?

11 known vulnerabilities, all fixed (latest in 1.10.82). Not on the exploited list.

Is the latest WS Form LITE update safe to install?

No ownership change before 1.12.18. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue