EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Security & Risk Analysis
wordpress.org/plugins/engagebay-formsThe simple, powerful and the ultimate FREE form builder software for WordPress. Create responsive and beautiful forms in minutes to capture leads, gro …
Is EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Safe to Use in 2026?
Generally Safe
Score 100/100EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The engagebay-forms plugin, version 3.2, exhibits a generally good security posture based on the provided static analysis and vulnerability history. The absence of known CVEs, critical taint flows, dangerous functions, and direct SQL queries is a significant strength. Furthermore, the plugin utilizes prepared statements for all its SQL queries, which is a best practice. It also includes capability checks and nonces, indicating an awareness of WordPress security mechanisms. However, there are areas for improvement. A notable concern is the low percentage of properly escaped output (29%). This could potentially lead to Cross-Site Scripting (XSS) vulnerabilities if user-supplied data is not adequately sanitized before being displayed. The presence of external HTTP requests also warrants attention, as these can be points of exploitation if not handled securely. The plugin's vulnerability history is clean, with no recorded CVEs. This suggests a well-maintained and secure development process thus far. In conclusion, while the plugin has a strong foundation in terms of preventing common and severe vulnerabilities like SQL injection and RCE, the insufficient output escaping represents a tangible risk that needs to be addressed to achieve a robust security profile.
Key Concerns
- Low percentage of properly escaped output
- External HTTP requests present
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Security Vulnerabilities
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Code Analysis
Bundled Libraries
Output Escaping
Data Flow Analysis
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Attack Surface
Shortcodes 1
WordPress Hooks 13
Maintenance & Trust
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Maintenance & Trust
Maintenance Signals
Community Trust
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Alternatives
WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More
wpforms-lite
The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.
Contact Form by Supsystic
contact-form-by-supsystic
Contact Form Builder with drag-and-drop editor to create responsive, mobile ready contact forms in a second. Custom fields and contact form templates
Contact Form Generator : Creative form builder for WordPress
contact-form-generator
Contact Form Generator is a creative and powerful contact form builder! You will get ready-to-use forms in 5 minutes!
NM Contact Forms
nm-contact-forms
Contact form plugin. NM contact forms allow you simple contact form integration with two built-in anti-spam solutions. Supports get variable.
DigitSix Simple Contact Form
digitsix-simple-contact-form
DigitSix Simple Contact Form is a simple solution for those who need simple contact forms for their website.
EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads Developer Profile
6 plugins · 400 total installs
How We Detect EngageBay Forms – Simple and Powerful Forms to Capture and Nurture Leads
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/engagebay-forms/assets/css/engagebay_forms.css/wp-content/plugins/engagebay-forms/assets/js/engagebay.jsHTML / DOM Fingerprints
engagebay-forms-wrapnav-tab-activeengagebay-forms-logoid="engagebaywrapper"id="engagebay-forms-logo"EhAPI/wp-json/engagebay/v1/forms<script>
var EhAPI = EhAPI || {};
EhAPI.after_load = function() {
EhAPI.set_account('');
EhAPI.execute('rules');
};
(function(d, s, f) {
var sc = document.createElement(s);
sc.type = 'text/javascript';
sc.async = true;
sc.src = f;
var m = document.getElementsByTagName(s)[0];
m.parentNode.insertBefore(sc, m);
})(document, 'script', '//d2p078bqz5urf7.cloudfront.net/jsapi/ehform.js');
</script>
<script>
function waitForEhForms() {
const interval = 100; // Check every 100ms
const checkAndLoad = () => {
const params = new URLSearchParams(window.location.search);