[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmN15oZJolCO-kDYOSdY9ecX2v6HbsmjBt4VKXiNIAec":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"vulnerabilities":31,"developer":32,"crawl_stats":29,"alternatives":40,"analysis":134,"fingerprints":217},"essential-form","Essential Form – The lightest plugin for contact forms, ultra lightweight and no spam","1.0.2","Jose Mortellaro","https:\u002F\u002Fprofiles.wordpress.org\u002Fgiuse\u002F","\u003Cp>Looking for a no-fuss, ultra-lightweight contact form that just works? \u003Cstrong>Essential Form\u003C\u002Fstrong> gives you exactly what you need — no more, no less.\u003C\u002Fp>\n\u003Cp>Use the shortcode \u003Ccode>[essential_form]\u003C\u002Fcode> wherever you want a simple contact form with the following fields:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Name\u003C\u002Fli>\n\u003Cli>Email\u003C\u002Fli>\n\u003Cli>Message\u003C\u002Fli>\n\u003Cli>Agreement checkbox\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>That’s it. No extra fluff, no performance hit.\u003C\u002Fp>\n\u003Ch4>⚡ Zero Bloat. Zero Requests. Zero Spam.\u003C\u002Fh4>\n\u003Cp>Essential Form adds \u003Cstrong>no HTTP requests\u003C\u002Fstrong>, loads \u003Cstrong>no external libraries\u003C\u002Fstrong>, and runs on \u003Cstrong>pure Vanilla JavaScript\u003C\u002Fstrong> — only \u003Cstrong>1 kB of inline script\u003C\u002Fstrong>, injected \u003Cstrong>only on pages with a form\u003C\u002Fstrong>. When we say it’s the lightest contact form ever made, we mean it. The entire plugin zip is just \u003Cstrong>14 kB\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Ch4>🛡️ Anti-Spam, Reinvented (No Captchas, Ever)\u003C\u002Fh4>\n\u003Cp>Our \u003Cstrong>invisible anti-spam system\u003C\u002Fstrong> blocks all automated bots — no annoying captchas, no puzzles, no headaches. Here’s how it works:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Each form submission uses a \u003Cstrong>unique, random token\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>20 random security keys\u003C\u002Fstrong> are generated per site\u003C\u002Fli>\n\u003Cli>AJAX actions have \u003Cstrong>unpredictable names\u003C\u002Fstrong> like \u003Ccode>essential_form_fbe52b696\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Robots can’t guess or simulate a valid submission\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The result? \u003Cstrong>Only real humans\u003C\u002Fstrong> get through. Bots don’t stand a chance.\u003C\u002Fp>\n\u003Ch4>🧘‍♀️ Keep It Simple\u003C\u002Fh4>\n\u003Cp>Most of the time, all you need is a name, email, message, and a simple checkbox. That’s exactly what Essential Form gives you. If you need complex forms with extra fields or logic, this plugin isn’t for you — try Contact Form 7 instead.\u003C\u002Fp>\n\u003Cp>But if you want something fast, clean, and incredibly secure, \u003Cstrong>Essential Form\u003C\u002Fstrong> is for you.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Try Essential Form today — and enjoy a faster, cleaner contact form experience.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch3>How to add a contact form on the page\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Add the shortcode [essential_form]\u003C\u002Fli>\n\u003Cli>Done!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Features of the Contact Form\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Extremely lightweight\u003C\u002Fstrong> – The plugin inlines about 1 kB of pure Vanilla JavaScript (even smaller when compressed) only on the page where you use the shortcode — and \u003Cstrong>never above the fold\u003C\u002Fstrong>. On all other pages, it doesn’t exist at all. You could say it only “exists” on a page because the form is visible — otherwise, you’d never know the plugin is there. No tool will be able to measure any meaningful resource usage caused by this plugin.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>The \u003Cstrong>contact form\u003C\u002Fstrong> includes only four fields: name, email, message, and an agreement checkbox. Nothing else. If you need more fields, this plugin isn’t for you. But if that’s all you need — you’ll love how simple and fast it is.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It \u003Cstrong>inherits your theme’s styles\u003C\u002Fstrong> automatically. If you want custom styling, you can add your own CSS — or use a different plugin if you need more built-in design options.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>It includes a \u003Cstrong>powerful, invisible anti-spam system\u003C\u002Fstrong>. Bots won’t be able to send messages through your form. Only real humans can submit it — and if you ever get spam, it will be from a human doing it manually.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>No captchas, no puzzles, no user frustration.\u003C\u002Fstrong> The anti-spam system works entirely behind the scenes — quietly and effectively.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Shortcode Parameters\u003C\u002Fh3>\n\u003Cp>You can customize the form labels and messages using these shortcode parameters:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>label_email\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>label_message\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>button_text\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>agreement_text\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>\u003Ccode>success_message\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Example usage:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[essential_form label_email=\"Your email\" label_message=\"Your message\" button_text=\"Send\" agreement_text=\"You agree with our privacy policy\" success_message=\"Thank you for your message!\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you don’t provide these parameters, the plugin will use the default values.\u003C\u002Fp>\n\u003Ch3>How to customize the contact forms\u003C\u002Fh3>\n\u003Cp>You can also customize the contact forms throught the filter hook ‘essential_form_settings’.\u003C\u002Fp>\n\u003Cp>Here an example.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'essential_form_settings',function( $options ){\n    return array(\n        'email_from' => 'youremail@mail.com',\n        'email_to' => 'youremail@mail.com',\n        'email_subject' => sprintf( esc_html__( 'Message from %s','your-domain' ),get_bloginfo( 'name' ) ),\n        'label_name' => __( 'Name','your-domain' ),\n        'label_email' => __( 'Email','your-domain' ),\n        'label_message' => __( 'Message','your-domain' ),\n        'button_text' => __( 'Send','your-domain' ),\n        'agreement_text' => __( 'By submitting this form I agree with the privacy policy','your-domain' ),\n        'success_message' => __( 'Form submitted successfully! Thank you for your message!','your-domain' ),\n        'name_missing_error' => __( 'Name is a required field!','your-domain' ),\n        'email_missing_error' => __( 'Email is a required field!','your-domain' ),\n        'email_not_valid_error' => __( 'Email not valid!','your-domain' ),\n        'message_missing_error' => __( 'Message is a required field!','your-domain' ),\n        'message_too_long_error' => __( 'This message is too long! Please, write not more than 50000 characters.','your-domain' ),\n        'missing_agreement_error' => __( 'You have to agree with our privacy policy to submit the form.','your-domain' )\n    );\n} );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you need to do a custom action after the sending of the email, you can use the action hook ‘essential_form_after_sending’.\u003C\u002Fp>\n\u003Cp>Here an example.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_action( 'essential_form_after_sending',function( $name,$email,$message,$post_id ){\n\n    \u002F\u002F$name is the name of the user who submitted the contant form\n    \u002F\u002F$message is the message which is sent through the contact form\n    \u002F\u002F$post_id is the ID of the page where is included the contact form\n\n    \u002F\u002FYour code here\n\n},10,4 );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you need to customize the message that is included in the email, use the filter hook ‘essential_form_message’.\u003C\u002Fp>\n\u003Cp>Here you have an example.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter('essential_form_message',function( $message,$name,$email,$post_id ){\n    if( isset( $_SERVER['REMOTE_ADDR'] ) ){\n        $message .= '\u003Cp>IP: '.sanitize_text_field( $_SERVER['REMOTE_ADDR'] ).'\u003C\u002Fp>';\n    }\n    return $message;\n},10,4 );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>If you need to customize the agreement text, use the filter hook ‘essential_form_agreement_text’.\u003C\u002Fp>\n\u003Cp>Here you have an example.\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'essential_form_agreement_text',function( $text ){\n    return 'By submitting this form I agree with the \u003Ca href=\"https:\u002F\u002Fyourdomain.com\u002Fprivacy-policy\u002F\">Privacy Policy\u003C\u002Fa>';\n} );\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch3>Limitations\u003C\u002Fh3>\n\u003Cp>The limits of \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fessential-form\u002F\" rel=\"ugc\">Essential Form\u003C\u002Fa> are many, but they are what make this plugin the best if you need a ultra-lightweight contact form with just name, email, comment, and privacy agreement.\u003Cbr \u002F>\nIf you need more, you can always install more complete but also heavier contact forms like:\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\" rel=\"ugc\">Contact Form 7\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwpforms-lite\u002F\" rel=\"ugc\">WPForms\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fforminator\u002F\" rel=\"ugc\">Forminator\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fformidable\u002F\" rel=\"ugc\">Formidable Forms\u003C\u002Fa>\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fninja-forms\u002F\" rel=\"ugc\">Ninja Forms\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>and many other amazing plugins for contact forms.\u003C\u002Fp>\n\u003Ch3>How to speed up the form submission and avoid conflicts with other plugins\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Install and activate \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffreesoul-deactivate-plugins\u002F\" rel=\"ugc\">Freesoul Deactivate Plugins\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Go to Freesoul Deactivate Plugins => Plugin Manger => Actions => Essential Form\u003C\u002Fli>\n\u003Cli>Deactivate all the plugins for the actions “Getting secret key during submission” and “Form submission”\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>By using \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffreesoul-deactivate-plugins\u002F\" rel=\"ugc\">Freesoul Deactivate Plugins\u003C\u002Fa> to clean up all the other plugins, the form submission will be faster and without any conflict with third plugins.\u003C\u002Fp>\n\u003Ch3>Demo\u003C\u002Fh3>\n\u003Cp>You can see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fessential-form\u002F\" rel=\"ugc\">Essential Form\u003C\u002Fa> in action on my blog post \u003Ca href=\"https:\u002F\u002Fjosemortellaro.com\u002Fthe-lightest-contact-form-plugin-ever\u002F\" rel=\"nofollow ugc\">The Lightest Contact Form Plugin Ever\u003C\u002Fa>\u003Cbr \u002F>\nYou don’t need any demo for the backend, because there are no settings for this plugin. Just use the shortcode [essential_form] where you want to add the form, and customized as mentioned in the description.\u003C\u002Fp>\n\u003Ch4>I need this plugin to do something custom\u003C\u002Fh4>\n\u003Cp>If you want to integrate this plugin with other tools or workflows, I offer a custom development service for WordPress plugin integrations and feature extensions.\u003Cbr \u002F>\nLearn more about \u003Ca href=\"https:\u002F\u002Fjosemortellaro.com\u002Fadvanced-functionality-for-wordpress\u002F\" rel=\"nofollow ugc\">advanced custom functionality for WordPress\u003C\u002Fa>.\u003C\u002Fp>\n","The lightest contact form for WordPress. It's so essential you'll either love it or hate it. Ultra lightweight and no spam.",500,5728,98,19,"2025-12-04T10:44:00.000Z","6.9.4","4.6","7.2",[20,21,22,23,24],"anti-spam","contact-form","email","leightweight","light","https:\u002F\u002Fjosemortellaro.com\u002Fessential-form\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fessential-form.1.0.2.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":33,"display_name":7,"profile_url":8,"plugin_count":34,"total_installs":35,"avg_security_score":36,"avg_patch_time_days":37,"trust_score":38,"computed_at":39},"giuse",56,26370,99,62,87,"2026-04-04T00:35:29.567Z",[41,60,75,93,112],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":49,"downloaded":50,"rating":27,"num_ratings":51,"last_updated":52,"tested_up_to":53,"requires_at_least":54,"requires_php":55,"tags":56,"homepage":55,"download_link":59,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"contact-form-zero","Contact Form Zero","1.5","Web Guy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebguyio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebguyio\u002Fsupport\" rel=\"nofollow ugc\">💬 Ask Question\u003C\u002Fa> | \u003Ca href=\"mailto:webguywork@gmail.com\" rel=\"nofollow ugc\">📧 Email Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Zero\u003C\u002Fstrong> Difficulty. \u003Cstrong>Zero\u003C\u002Fstrong> Spam.\u003C\u002Fp>\n\u003Cp>Add a stupidly simple and lightweight contact form to your website in any page, post, or text widget with this shortcode:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[contact-form-zero]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>The entire point of this plugin is to be completely hands-free, easy, and just work straight out-of-the-box. Simply plug and play without any required settings to adjust.\u003C\u002Fp>\n\u003Cp>If you’re looking for the exact opposite of that, that is, a form you can custom build with advanced options, I recommend \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcontact-form-7\u002F\" rel=\"ugc\">Contact Form 7\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>The most lightweight contact form plugin available for WordPress (no required settings to adjust or forms to create)\u003C\u002Fli>\n\u003Cli>Name, Email, Phone, and Message form fields (phone field is optional for your visitors)\u003C\u002Fli>\n\u003Cli>Automatically sends emails to the email address set under \u003Cem>Settings > General > Administration Email Address\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Highly effective and hidden anti-spam measures (no annoying CAPTCHAs required)\u003C\u002Fli>\n\u003Cli>Enable Google reCAPTCHA for additional protection if you like (usually no annoying CAPTCHAs required)\u003C\u002Fli>\n\u003Cli>Enable hCaptcha for additional protection if you like (CAPTCHAs required — only paid accounts for the hCaptcha service offer invisible options)\u003C\u002Fli>\n\u003Cli>Enable Cloudflare Turnstile for additional protection if you like (no annoying CAPTCHAs required)\u003C\u002Fli>\n\u003Cli>Enable Akismet for additional protection if you like (privacy implications)\u003C\u002Fli>\n\u003Cli>Fully compatible with all the protections of \u003Ca href=\"https:\u002F\u002Fdamspam.com\u002F\" rel=\"nofollow ugc\">Dam Spam\u003C\u002Fa> (fork of Stop Spammers)\u003C\u002Fli>\n\u003Cli>Easy to customize with CSS (please ask for help if you need it — I’m happy to write custom code for you to copy\u002Fpaste)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Optional Shortcode Attributes\u003C\u002Fh3>\n\u003Cpre>\u003Ccode>[contact-form-zero email=\"email@example.com\"] — Set a custom email address for form submissions to be sent to.\n\n[contact-form-zero accent=\"#000\"] — Change the accent color for the form.\n\n[contact-form-zero unstyled=\"yes\"] — Form is left naked for you or your theme to style.\n\n[contact-form-zero custom-1=\"FIELD NAME HERE\" custom-2=\"FIELD NAME HERE*\"] — Add as many custom text fields as you like and use * to make it required.\n\n[contact-form-zero g-key=\"SITE KEY HERE\" g-secret=\"SECRET KEY HERE\"] — Add your API keys (google.com\u002Frecaptcha\u002Fadmin\u002Fcreate) to enable Google reCAPTCHA.\n\n[contact-form-zero h-key=\"SITE KEY HERE\" h-secret=\"SECRET KEY HERE\"] — Add your API keys (dashboard.hcaptcha.com\u002Fsites\u002Fnew) to enable hCaptcha.\n\n[contact-form-zero c-key=\"SITE KEY HERE\" c-secret=\"SECRET KEY HERE\"] — Add your API keys (dash.cloudflare.com\u002F?to=\u002F:account\u002Fturnstile\u002Fadd) to enable Cloudflare Turnstile.\n\n[contact-form-zero akismet=\"yes\"] — Add your API key (akismet.com\u002Fsignup\u002F#personal) to the Akismet plugin settings to enable Akismet.\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Add a stupidly simple and lightweight contact form to your website with [contact-form-zero].",30,2063,1,"2026-01-21T13:39:00.000Z","6.8.5","5.0","",[20,21,22,57,58],"feedback","quote","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontact-form-zero.zip",{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":27,"num_ratings":51,"last_updated":70,"tested_up_to":53,"requires_at_least":54,"requires_php":55,"tags":71,"homepage":55,"download_link":74,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"never-loose-contact-form","Never Loose Contact Form","3.2.4","andy_moyle","https:\u002F\u002Fprofiles.wordpress.org\u002Fandy_moyle\u002F","\u003Cp>Never Loose Contact form provides a spam proof contact form for your WordPress site that emails you the message and saves it for viewing in the admin area.\u003Cbr \u002F>\nIf you wish you can enter your contact details in the public settings for display above the contact form\u003Cbr \u002F>\nEmails are sent to your installation admin email address.\u003C\u002Fp>\n","Spam proof contact form  that emails you the message and saves it in database.",20,3808,"2025-11-05T11:23:00.000Z",[20,21,72,22,73],"database","sms","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fnever-loose-contact-form.3.2.4.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":68,"downloaded":83,"rating":28,"num_ratings":28,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":55,"tags":87,"homepage":90,"download_link":91,"security_score":92,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"tectite-forms","Tectite Forms","1.3","russellr","https:\u002F\u002Fprofiles.wordpress.org\u002Frussellr\u002F","\u003Cp>Create a professional and secure web form quickly and easily without scripting, HTML or coding of any type, completely free.\u003C\u002Fp>\n\u003Cp>Our online form designer creates your form (or use a sample to get started) and you simply copy-and-paste\u003Cbr \u002F>\nyour unique form code to your WordPress blog or page.\u003C\u002Fp>\n\u003Cp>Simply install the Tectite Forms plugin into WordPress, create your account on our Hosted Forms service, and you’ll have\u003Cbr \u002F>\na working contact form (or other form) operating perfectly in minutes.\u003C\u002Fp>\n\u003Ch3>Learn More\u003C\u002Fh3>\n\u003Cp>Learn more at \u003Ca href=\"https:\u002F\u002Fwww.tectite.com\u002Fhostedforms.php\" rel=\"nofollow ugc\">Tectite Hosted Forms\u003C\u002Fa>.\u003C\u002Fp>\n","Install a secure anti-spam form.  Use our sample forms or easily design your own form.",5805,"2019-03-31T20:31:00.000Z","5.1.22","3.4",[88,21,22,57,89],"anti-spam-form","form","https:\u002F\u002Fwww.tectite.com\u002Fplugins","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ftectite-forms.zip",85,{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":27,"num_ratings":51,"last_updated":103,"tested_up_to":104,"requires_at_least":105,"requires_php":55,"tags":106,"homepage":110,"download_link":111,"security_score":92,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"freecontactformdotcom","FreeContactFormDotCom","1.2","freecontactform","https:\u002F\u002Fprofiles.wordpress.org\u002Ffreecontactform\u002F","\u003Cp>Simple free contact form with text-based spam prevention.\u003C\u002Fp>\n\u003Cp>Configuration Options:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Email the results (Email Address)\u003C\u002Fli>\n\u003Cli>Set the spam prevention (anti-spam) question (challenge)\u003C\u002Fli>\n\u003Cli>Set the expected spam prevention answer\u003C\u002Fli>\n\u003Cli>Set a custom thank you message to display after the form has been submitted \u003C\u002Fli>\n\u003Cli>Link to the Authors plugin page from the bottom of your form.\u003C\u002Fli>\n\u003C\u002Ful>\n","A simple free contact form with text-based spam prevention.",10,3967,"2020-05-22T12:08:00.000Z","5.4.19","2.0.2",[20,107,21,108,109],"captcha","email-form","free-contact-form","http:\u002F\u002Fwww.freecontactform.com\u002Fwordpress-form.php","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffreecontactformdotcom.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":120,"downloaded":121,"rating":122,"num_ratings":123,"last_updated":124,"tested_up_to":16,"requires_at_least":125,"requires_php":18,"tags":126,"homepage":130,"download_link":131,"security_score":36,"vuln_count":132,"unpatched_count":28,"last_vuln_date":133,"fetched_at":30},"akismet","Akismet Anti-spam: Spam Protection","5.6","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.\u003C\u002Fp>\n\u003Cp>Akismet checks your comments and contact form submissions against our global database of spam to prevent your site from publishing malicious content. You can review the comment spam it catches on your blog’s “Comments” admin screen.\u003C\u002Fp>\n\u003Cp>Major features in Akismet include:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatically checks all comments and filters out the ones that look like spam.\u003C\u002Fli>\n\u003Cli>Each comment has a status history, so you can easily see which comments were caught or cleared by Akismet and which were spammed or unspammed by a moderator.\u003C\u002Fli>\n\u003Cli>URLs are shown in the comment body to reveal hidden or misleading links.\u003C\u002Fli>\n\u003Cli>Moderators can see the number of approved comments for each user.\u003C\u002Fli>\n\u003Cli>A discard feature that outright blocks the worst spam, saving you disk space and speeding up your site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>PS: You’ll be prompted to get an Akismet.com API key to use it, once activated. Keys are free for personal blogs; paid subscriptions are available for businesses and commercial sites.\u003C\u002Fp>\n","The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.",6000000,386405930,94,1173,"2025-11-12T16:31:00.000Z","5.8",[20,127,128,21,129],"antispam","comments","spam","https:\u002F\u002Fakismet.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fakismet.5.6.zip",2,"2015-10-13 00:00:00",{"attackSurface":135,"codeSignals":179,"taintFlows":203,"riskAssessment":204,"analyzedAt":216},{"hooks":136,"ajaxHandlers":172,"restRoutes":173,"shortcodes":174,"cronEvents":178,"entryPointCount":51,"unprotectedCount":28},[137,143,147,152,156,160,164,169],{"type":138,"name":139,"callback":140,"file":141,"line":142},"filter","eos_dp_integration_action_plugins","closure","admin\\ef-admin.php",58,{"type":138,"name":144,"callback":145,"priority":68,"file":141,"line":146},"plugin_row_meta","essential_form_plugin_row_meta",69,{"type":138,"name":148,"callback":149,"priority":101,"file":150,"line":151},"essential_form_fields_array","fields_array","classes\\ef-class-add-fields-factory.php",116,{"type":138,"name":153,"callback":154,"priority":101,"file":150,"line":155},"essential_form_append_custom_field","custom_field_js",117,{"type":138,"name":157,"callback":158,"priority":101,"file":150,"line":159},"essential_form_before_message","add_to_message",118,{"type":138,"name":161,"callback":162,"priority":101,"file":150,"line":163},"essential_form_missing_custom_field_error","missing_field_erroor",119,{"type":165,"name":166,"callback":140,"file":167,"line":168},"action","init","essential-form.php",264,{"type":138,"name":170,"callback":140,"priority":101,"file":167,"line":171},"load_textdomain_mofile",269,[],[],[175],{"tag":176,"callback":140,"file":167,"line":177},"essential_form",107,[],{"dangerousFunctions":180,"sqlUsage":181,"outputEscaping":183,"fileOperations":51,"externalRequests":28,"nonceChecks":28,"capabilityChecks":28,"bundledLibraries":202},[],{"prepared":28,"raw":28,"locations":182},[],{"escaped":159,"rawEcho":184,"locations":185},7,[186,190,192,194,196,198,200],{"file":187,"line":188,"context":189},"inc\\ef-ajax.php",21,"raw output",{"file":187,"line":191,"context":189},60,{"file":187,"line":193,"context":189},65,{"file":187,"line":195,"context":189},70,{"file":187,"line":197,"context":189},75,{"file":187,"line":199,"context":189},80,{"file":187,"line":201,"context":189},86,[],[],{"summary":205,"deductions":206},"This plugin, essential-form v1.0.2, exhibits a generally good security posture based on the static analysis. The absence of critical or high-severity taint flows, coupled with 100% of SQL queries using prepared statements, is a strong indicator of secure coding practices in database interaction. The high percentage of properly escaped output (94%) further suggests an effort to mitigate cross-site scripting (XSS) vulnerabilities.\n\nHowever, there are areas that warrant attention. The complete lack of nonce checks and capability checks is a significant concern, especially given the presence of one shortcode which acts as an entry point into the plugin's logic. While no AJAX handlers or REST API routes were found without authentication, the lack of these fundamental security checks on other entry points leaves them potentially vulnerable to unauthorized access or manipulation. The single file operation also raises a minor flag, as such operations can sometimes be vectors for vulnerabilities if not handled with extreme care.\n\nThe vulnerability history is clean, with no recorded CVEs. This is a positive sign and suggests that the plugin has either been very well-audited or has not yet been a target for widespread exploitation. However, the absence of past vulnerabilities does not guarantee future security, especially when considering the identified weaknesses in the static analysis. The overall conclusion is that while the plugin has strengths in its database and output handling, the lack of critical security checks on its entry points presents a notable risk that should be addressed.",[207,209,211,214],{"reason":208,"points":101},"No nonce checks on entry points",{"reason":210,"points":101},"No capability checks on entry points",{"reason":212,"points":213},"One file operation detected",3,{"reason":215,"points":213},"6% of outputs not properly escaped","2026-03-16T19:37:56.622Z",{"wat":218,"direct":227},{"assetPaths":219,"generatorPatterns":222,"scriptPaths":223,"versionParams":224},[220,221],"\u002Fwp-content\u002Fplugins\u002Fessential-form\u002Fcss\u002Fessential-form.css","\u002Fwp-content\u002Fplugins\u002Fessential-form\u002Fjs\u002Fessential-form.js",[],[221],[225,226],"essential-form\u002Fcss\u002Fessential-form.css?ver=","essential-form\u002Fjs\u002Fessential-form.js?ver=",{"cssClasses":228,"htmlComments":236,"htmlAttributes":237,"restEndpoints":239,"jsGlobals":241,"shortcodeOutput":245},[229,230,231,232,233,234,235],"essential-form-container","essential-form-field","essential-form-label","essential-form-input","essential-form-textarea","essential-form-button","essential-form-agreement",[],[238],"data-essential-form-id",[240],"\u002Fwp-json\u002Fessential-form\u002Fv1\u002Fsubmit",[242,243,244],"essential_form_ajax_url","essential_form_params","essential_form_nonce",[246],"\u003Cdiv class=\"essential-form-container\">"]