Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Security & Risk Analysis

Lightweight drag-and-drop form builder for WordPress. Create contact forms, multi-column layouts, and manage submissions.

0 active installs v1.0.1 PHP 7.4+ WP 6.0+ Updated Feb 18, 2026

contact-formdrag-and-dropform-builderform-makerforms

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Safe to Use in 2026?

Generally Safe

Score 100/100

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The plugin 'skyflow-forms' v1.0.1 demonstrates several positive security practices, including the complete use of prepared statements for all SQL queries and a very high percentage of properly escaped output. The absence of known vulnerabilities in its history and a clean taint analysis are also strong indicators of a well-developed and secure codebase. However, the plugin presents a notable security concern due to its attack surface. Specifically, two AJAX handlers are exposed without authentication checks. This lack of authorization on entry points could allow unauthorized users to trigger potentially sensitive actions within the plugin, even if the underlying code is robust.

Key Concerns

AJAX handlers without authentication

Vulnerabilities

None known

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Code Analysis

Dangerous Functions

Raw SQL Queries

55 prepared

Unescaped Output

433 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared55 total queries

Output Escaping

99% escaped436 total outputs

Data Flows

All sanitized

Data Flow Analysis

1 flows

<class-skyflow-forms-public> (public\class-skyflow-forms-public.php:0)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

2 unprotected

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Attack Surface

Entry Points3

Unprotected2

AJAX Handlers 2

authwp_ajax_skyflow_forms_get_formpublic\class-skyflow-forms-public.php:143

noprivwp_ajax_skyflow_forms_get_formpublic\class-skyflow-forms-public.php:144

Shortcodes 1

[skyflow_unsubscribe] public\class-skyflow-forms-public.php:139

WordPress Hooks 9

actioninitpublic\class-skyflow-forms-public.php:140

actionwp_enqueue_scriptspublic\class-skyflow-forms-public.php:141

actionskyflow_forms_after_submissionskyflow-forms.php:393

actioninitskyflow-forms.php:438

actionplugins_loadedskyflow-forms.php:440

actioninitskyflow-forms.php:453

actionadmin_initskyflow-forms.php:461

actionadmin_menuskyflow-forms.php:470

actionadmin_enqueue_scriptsskyflow-forms.php:488

Maintenance & Trust

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedFeb 18, 2026

PHP min version7.4

Downloads225

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Alternatives

HT Contact Form – Drag & Drop Form Builder for WordPress

ht-contactform

The easiest drag & drop form builder for WordPress. Create contact forms, surveys, and lead capture forms in minutes with 38+ fields and 21+ integ …

9K 6 CVEs

Contact Form Monster

contact-form-monster

Contact form plugin is a simple contact form builder tool, which allows the user to create and edit different contact forms.

200 No CVEs

VPSUForm – Drag & Drop Contact Form Builder with Email Automation

v-form

A lightweight drag-and-drop WordPress form builder with email automation, conditional logic, spam protection, and full lead management.

200 7 CVEs

AFB – Auto Form Builder – Drag & Drop Form Creator

auto-form-builder

100

Auto Form Builder is the easiest drag-and-drop form builder for WordPress. Create contact forms, surveys, and multi-step forms in minutes.

100 No CVEs

GenForm – Drag & Drop Form Builder

genform

100

The lightweight drag-and-drop form builder for WordPress. Create contact forms, feedback forms, bookings, and more — no coding required.

20 No CVEs

Developer Profile

Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder Developer Profile

Seventh Sky

5 plugins · 60 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Skyflow Forms – Contact Form Builder, Easy, Modern, and Responsive Form Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/skyflow-forms/css/skyflow-forms.css/wp-content/plugins/skyflow-forms/js/skyflow-forms.js/wp-content/plugins/skyflow-forms/js/admin/skyflow-forms-admin.js

Script Paths

/wp-content/plugins/skyflow-forms/js/skyflow-forms.js/wp-content/plugins/skyflow-forms/js/admin/skyflow-forms-admin.js

Version Parameters

skyflow-forms/css/skyflow-forms.css?ver=skyflow-forms/js/skyflow-forms.js?ver=skyflow-forms/js/admin/skyflow-forms-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes

skyflow-forms-wrapskyflow-fieldskyflow-validation-error

Data Attributes

data-skyflow-iddata-sf-field-id

JS Globals

skyflow_forms_params

Shortcode Output

[skyflow-form id=

FAQ