weForms – Easy Drag & Drop Contact Form Builder For WordPress

79 Quality Score

Active Installs

18/30

With 10,000 active installs, weForms is a minor player compared to alternatives like Contact Form 7 (10 million) and WPForms Lite (5 million).

Update Freshness

25/25

Last updated on 2026-05-19 and tested with WordPress 7.0, so the maintenance signal is strong.

User Rating

14/15

A 90/100 rating from 111 reviewers is solid, though the small sample size limits how confidently you can read it.

Support Health

8/15

1 support thread with 0 resolved (0.0%) is a clear weakness and raises concerns about responsiveness.

WP Compatibility

15/15

Requires WordPress 5.0 and PHP 7.2.5, and is tested up to WordPress 7.0, which is a current and reasonable baseline.

Scores higher than 71% of indexed plugins

About

The easiest & fastest Contact Form on WordPress. Multiple templates, drag-&-drop live builder, submission listing, reCaptcha & more!

Active Installs 10k+

Rating ★★★★½ 4.5/5

Last Updated 2026-08-18 6:58pm GMT

Requires WordPress 5.0+

Tested Up To 7.1

Requires PHP 7.2.5+

Security History

10 known vulnerabilities, all patched

3 High 7 Medium

Most recent: March 23, 2026

View details ▸

weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.26 - Unauthenticated PHP Object Injection High

March 23, 2026 Patched in ["1.6.27"] CVE-2026-32484

weForms <= 1.6.27 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Hidden Field Value via REST API Medium

March 10, 2026 Patched in ["1.6.28"] CVE-2026-2707

weForms <= 1.6.25 - Missing Authorization Medium

December 29, 2025 Patched in ["1.6.26"] CVE-2025-69028

Various Plugins <= Various Version - Use of Polyfill.io Medium

June 25, 2024 Patched in ["1.6.24"]

weForms <= 1.6.20 - Missing Authorization Medium

March 28, 2024 Patched in ["1.6.21"] CVE-2024-30512

weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer High

March 12, 2024 Patched in ["1.6.22"] CVE-2024-0386

weForms <= 1.6.18 - Missing Authorization via export_form_entries Medium

December 27, 2023 Patched in ["1.6.19"] CVE-2023-51524

weForms – Easy Drag & Drop Contact Form Builder For WordPress <= 1.6.17 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

December 26, 2023 Patched in ["1.6.18"] CVE-2023-50896

weForms <= 1.6.13 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

July 12, 2022 Patched in ["1.6.14"] CVE-2022-2395

WeForms <= 1.4.7 - CSV injection via form entry High

August 13, 2020 Patched in ["1.4.8"] CVE-2020-22276

What It Does

weForms is a drag-and-drop contact form builder for WordPress that lets you assemble forms from prebuilt templates without writing code. It includes submission listings inside the WordPress dashboard and supports reCAPTCHA for spam control. The plugin is positioned as a lightweight alternative to heavier form builders.

Who It's For

This plugin fits small businesses, freelancers, and local service providers who need a simple contact or inquiry form and value a short template-driven setup process. It also works for event organizers and nonprofit groups running basic signup or volunteer forms where advanced conditional logic is not required.

Who Should Skip It

If you run a high-traffic site, need advanced features like payment gateways, conditional logic, multi-step forms, or conversational layouts, you should skip weForms and pick a more mature alternative. Developers and agencies managing client sites will also find the low support resolution rate (0%) and tiny install base (10,000) risky.

The Bottom Line

weForms scores a middling 78.91/100, dragged down by weak popularity and a 0% support resolution rate, even though ratings and maintenance are strong. It can work for a small site that just needs a quick contact form, but most users will be better served by WPForms Lite, Forminator, or Fluent Forms, which offer larger communities and more proven support. Treat weForms as a reasonable but unproven option rather than a default choice.

Pick Akismet only if your priority is pure spam filtering and you already have a separate form plugin.

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 97/100

Pick WPForms Lite for a larger install base (5 million), stronger support, and a smoother beginner experience with payment and survey add-ons.

Forminator Forms – Contact Form, Payment Form & Custom Form Builder 94/100

Pick Forminator if you want built-in payment, quiz, and poll features from a single free plugin with 600,000 installs.

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 88/100

Pick Fluent Forms when you need conversational or quiz-style forms and a more active development community (700,000 installs).

Contact Form 7 88/100

Pick Contact Form 7 if you want the most established free option and are comfortable with a markup-based editor over a drag-and-drop UI.