WP-Safety

Easy Custom Forms Security & Risk Analysis

wordpress.org/plugins/easy-custom-forms

Create custom forms easily with a user-friendly interface and powerful features.

0 active installs v1.0.0 PHP 7.0+ WP 4.7+ Updated Jul 29, 2024
custom-formsdrag-and-dropform-builderformsmulti-step-forms
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Easy Custom Forms Safe to Use in 2026?

Generally Safe

Score 92/100

Easy Custom Forms has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The 'easy-custom-forms' v1.0.0 plugin exhibits a generally strong security posture based on the provided static analysis. The absence of known CVEs and the consistent use of prepared statements for SQL queries are positive indicators. Furthermore, the plugin demonstrates good practices with a high percentage of properly escaped output and the presence of nonce and capability checks.

Vulnerabilities
None known

Easy Custom Forms Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Easy Custom Forms Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
10 prepared
Unescaped Output
3
88 escaped
Nonce Checks
6
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared10 total queries

Output Escaping

97% escaped91 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
display_form (includes\admin\ecf-form-crud\ecf-add.php:26)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Easy Custom Forms Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[ecfp_shortcode] controller\ecf-controller.php:35
WordPress Hooks 14
actionadmin_menucontroller\ecf-controller.php:20
actionload-ecf_page_ecf_listcontroller\ecf-controller.php:21
actionadmin_enqueue_scriptscontroller\ecf-controller.php:22
actionadmin_post_handle_create_formcontroller\ecf-controller.php:25
actionadmin_post_nopriv_handle_create_formcontroller\ecf-controller.php:26
actionadmin_post_handle_update_formcontroller\ecf-controller.php:28
actionadmin_post_nopriv_handle_update_formcontroller\ecf-controller.php:29
actionadmin_post_handle_delete_formcontroller\ecf-controller.php:31
actionadmin_post_nopriv_handle_delete_formcontroller\ecf-controller.php:32
actionplugins_loadedcustom-form.php:30
actionplugins_loadedcustom-form.php:31
actionplugins_loadedcustom-form.php:40
filterset-screen-optionincludes\admin\ecf-form-crud\ecf-list.php:26
actionadmin_post_handle_create_formmodel\ecf-model.php:64
Maintenance & Trust

Easy Custom Forms Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedJul 29, 2024
PHP min version7.0
Downloads485

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

Easy Custom Forms Alternatives

SureForms – Contact Form, Payment Form & Other Custom Form Builder

SureForms – Contact Form, Payment Form & Other Custom Form Builder

sureforms

A
88

The most beginner-friendly, AI Form Builder for WordPress to create contact forms, payment forms & other custom forms with advanced features, with …

400K 15 CVEs
HT Contact Form – Drag & Drop Form Builder for WordPress

HT Contact Form – Drag & Drop Form Builder for WordPress

ht-contactform

A
88

The easiest drag & drop form builder for WordPress. Create contact forms, surveys, and lead capture forms in minutes with 38+ fields and 21+ integ …

9K 6 CVEs
NEX-Forms – Ultimate Forms Plugin for WordPress

NEX-Forms – Ultimate Forms Plugin for WordPress

nex-forms-express-wp-form-builder

B
76

Build beautiful responsive forms for WordPress. Contact forms, surveys, quizzes, booking forms, payments, popups & more with NEX-Forms...

7K 30 CVEs
NEX-Forms ADD ON – Form Themes

NEX-Forms ADD ON – Form Themes

nex-forms-form-themes-add-on

A
100

Build beautiful responsive forms for WordPress. Contact forms, surveys, quizzes, booking forms, payments, popups & more with NEX-Forms...

1K No CVEs
فرم ساز فرم افزار

فرم ساز فرم افزار

formafzar

A
91

ابزاری آسان برای ساخت فرم‌های آنلاین قدرتمند بصورت حرفه‌ای، به آسانی و کمتر از چند دقیقه فرم خودتون رو بسازید و به اشتراک بگذارید

600 1 CVE
Developer Profile

Easy Custom Forms Developer Profile

jntwebdev

1 plugin · 0 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Easy Custom Forms

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/easy-custom-forms/includes/admin/ecf-form-crud/ecf-view.php/wp-content/plugins/easy-custom-forms/includes/admin/ecf-form-crud/ecf-add.php/wp-content/plugins/easy-custom-forms/includes/admin/ecf-form-crud/ecf-list.php/wp-content/plugins/easy-custom-forms/includes/admin/ecf-settings/ecf-setting-function.php/wp-content/plugins/easy-custom-forms/includes/admin/ecf-settings/ecf-setting-view.php/wp-content/plugins/easy-custom-forms/includes/frontend/ecf-frontend.php/wp-content/plugins/easy-custom-forms/controller/ecf-controller.php/wp-content/plugins/easy-custom-forms/model/ecf-model.php
Script Paths
/wp-content/plugins/easy-custom-forms/assets/js/ecf-admin.js/wp-content/plugins/easy-custom-forms/assets/js/ecf-frontend.js/wp-content/plugins/easy-custom-forms/assets/js/jquery-ui.min.js
Version Parameters
easy-custom-forms/assets/js/ecf-admin.js?ver=easy-custom-forms/assets/js/ecf-frontend.js?ver=easy-custom-forms/assets/js/jquery-ui.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
ecf_form_containerecf_form_fieldecf_submit_buttonecf-settings-wrap
HTML Comments
<!-- Easy Custom Forms Settings --><!-- Easy Custom Forms Frontend Form -->
Data Attributes
data-ecf-form-iddata-ecf-field-id
JS Globals
window.ECFP_AJAX_URLwindow.ecfp_form_datavar ecfp_settings
REST Endpoints
/wp-json/ecfp/v1/forms
Shortcode Output
[ecfp_shortcode]
FAQ

Frequently Asked Questions about Easy Custom Forms