Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Security & Risk Analysis

wordpress.org/plugins/skyflow-forms

Lightweight drag-and-drop form builder for WordPress. Create contact forms, multi-column layouts, and manage submissions.

0 active installs v1.0.1 PHP 7.4+ WP 6.0+ Updated Feb 18, 2026
contact-formdrag-and-dropform-builderform-makerforms
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Safe to Use in 2026?

Generally Safe

Score 100/100

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The plugin 'skyflow-forms' v1.0.1 demonstrates several positive security practices, including the complete use of prepared statements for all SQL queries and a very high percentage of properly escaped output. The absence of known vulnerabilities in its history and a clean taint analysis are also strong indicators of a well-developed and secure codebase. However, the plugin presents a notable security concern due to its attack surface. Specifically, two AJAX handlers are exposed without authentication checks. This lack of authorization on entry points could allow unauthorized users to trigger potentially sensitive actions within the plugin, even if the underlying code is robust.

Key Concerns

  • AJAX handlers without authentication
Vulnerabilities
None known

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
55 prepared
Unescaped Output
3
433 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
2
Bundled Libraries
0

SQL Query Safety

100% prepared55 total queries

Output Escaping

99% escaped436 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<class-skyflow-forms-public> (public\class-skyflow-forms-public.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Attack Surface

Entry Points3
Unprotected2

AJAX Handlers 2

authwp_ajax_skyflow_forms_get_formpublic\class-skyflow-forms-public.php:143
noprivwp_ajax_skyflow_forms_get_formpublic\class-skyflow-forms-public.php:144

Shortcodes 1

[skyflow_unsubscribe] public\class-skyflow-forms-public.php:139
WordPress Hooks 9
actioninitpublic\class-skyflow-forms-public.php:140
actionwp_enqueue_scriptspublic\class-skyflow-forms-public.php:141
actionskyflow_forms_after_submissionskyflow-forms.php:393
actioninitskyflow-forms.php:438
actionplugins_loadedskyflow-forms.php:440
actioninitskyflow-forms.php:453
actionadmin_initskyflow-forms.php:461
actionadmin_menuskyflow-forms.php:470
actionadmin_enqueue_scriptsskyflow-forms.php:488
Maintenance & Trust

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 18, 2026
PHP min version7.4
Downloads225

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Developer Profile

Seventh Sky

5 plugins · 60 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/skyflow-forms/css/skyflow-forms.css/wp-content/plugins/skyflow-forms/js/skyflow-forms.js/wp-content/plugins/skyflow-forms/js/admin/skyflow-forms-admin.js
Script Paths
/wp-content/plugins/skyflow-forms/js/skyflow-forms.js/wp-content/plugins/skyflow-forms/js/admin/skyflow-forms-admin.js
Version Parameters
skyflow-forms/css/skyflow-forms.css?ver=skyflow-forms/js/skyflow-forms.js?ver=skyflow-forms/js/admin/skyflow-forms-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
skyflow-forms-wrapskyflow-fieldskyflow-validation-error
Data Attributes
data-skyflow-iddata-sf-field-id
JS Globals
skyflow_forms_params
Shortcode Output
[skyflow-form id=
FAQ

Frequently Asked Questions about Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder