HDForms | Contact Form Builder Security & Risk Analysis

wordpress.org/plugins/hdforms

HDForms. The easiest way to create contact forms.

50 active installs v1.6.1 PHP 7.0+ WP 5.2.0+ Updated Oct 10, 2025
contactcontact-formformform-builderhdforms
70
B · Generally Safe
CVEs total1
Unpatched1
Last CVEJan 13, 2026
Safety Verdict

Is HDForms | Contact Form Builder Safe to Use in 2026?

Mostly Safe

Score 70/100

HDForms | Contact Form Builder is generally safe to use. 1 past CVE were resolved. Keep it updated.

1 known CVE 1 unpatched Last CVE: Jan 13, 2026Updated 5mo ago
Risk Assessment
Assessment pending
Vulnerabilities
1

HDForms | Contact Form Builder Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Critical
1

1 total CVE

CVE-2025-68912critical · 9.1Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

HDForms <= 1.6.1 - Unauthenticated Arbitrary File Deletion

Jan 13, 2026Unpatched
Version History

HDForms | Contact Form Builder Release Timeline

v1.6.1Current1 CVE
v1.61 CVE
v0.51 CVE
Maintenance & Trust

HDForms | Contact Form Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedOct 10, 2025
PHP min version7.0
Downloads3K

Community Trust

Rating100/100
Number of ratings1
Active installs50
Developer Profile

HDForms | Contact Form Builder Developer Profile

Harmonic Design

6 plugins · 8K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
205 days
View full developer profile
FAQ

Frequently Asked Questions about HDForms | Contact Form Builder