Easy Form Builder by WhiteStudio – Drag & Drop Form Builder
Explore Easy Form Builder by WhiteStudio – Drag & Drop Form Builder vulnerabilities across all versions. Currently tracking 10 known vulnerabilities, including severity, impact, and patch status.
Vulnerability Records

Easy Form Builder by WhiteStudio – Drag & Drop Form Builder
Author
hassantafreshi
Easy Form Builder is a comprehensive WordPress form plugin designed to help website owners create, manage, and maintain a wide variety of forms using a visual drag-and-drop form builder interface. The plugin is suitable for users who want to build professional forms without writing code, while still keeping full control over form data, submissions, and communication workflows, including free custom email notification templates with a built-in visual editor. This form builder plugin can be used to create contact forms, support request forms, survey and feedback forms, payment forms using Stripe, subscription forms and custom login or registration forms for WordPress users. All form data is stored directly on your WordPress website, ensuring transparency, data ownership, and predictable behavior. Easy Form Builder focuses on clarity, extensibility, and usability. The plugin does not rely on external form services by default and does not send form submissions to third-party servers. This makes it suitable for websites that require clear data handling policies and on-site form management. What Can This Form Plugin Do? With Easy Form Builder, you can use a single form plugin to build and manage multiple types of forms and form-based workflows: Contact forms for general inquiries Support and feedback forms with message tracking Survey and poll forms with structured results Stripe payment forms for online payments PayPal payment forms for collecting online payments Login (sign-in) forms for WordPress users Registration (sign-up) forms for new users File upload forms Audio recording forms for collecting voice messages and voice feedback Video recording forms for video testimonials and webcam responses Screen recording forms for bug reports and support requests Private or restricted-access forms Multi-step forms for improved usability Smart forms with conditional logic that show or hide fields based on user answers Electronic signature forms for contracts and agreements Location picker forms for address and map selection Custom email notification templates with a built-in visual editor Job application forms for hiring and recruitment Event registration forms for conferences and workshops Order forms with recurring and subscription billing options The form builder provides a consistent interface for form creation, submission handling, and response management inside WordPress. Core Features Drag & Drop Form Builder The plugin includes a visual drag-and-drop form builder. Fields can be added, removed, and reordered without writing code. Each field provides configuration options such as labels, placeholders, validation rules, and display settings. Email Notification Easy Form Builder supports automatic email notifications after a form is submitted. Notifications can be sent to administrators, form managers, or users. Email templates can be customized to control the message content and layout. Custom email notification templates are included for free. The built-in visual editor lets you design clear, branded WordPress form notification emails without writing HTML code. You can customize the email subject, message body, layout, and submission details so each contact form, survey form, payment form, registration form, or support form can send a professional email notification that matches your website and workflow. To help you keep WordPress form notifications reliable, Easy Form Builder includes an email delivery status check that confirms your WordPress site and the form builder can send notification emails successfully. The Easy Form Builder dashboard widget also shows useful form activity insights, including page views for pages containing forms, completed form submissions, sent email counts, failed email counts, and an Email Error Log button where you can review any email sending errors when needed. For detailed setup instructions, see: How to set up form notification emails in Easy Form Builder Confirmation Code (Tracking ID) Each form submission generates a unique confirmation code. This tracking ID allows administrators and users to reference, search, and manage individual submissions efficiently. Learn more about this feature: How to activate a Confirmation Code in Easy Form Builder Form Validation and Spam Protection The form plugin includes client-side and server-side validation. Google reCAPTCHA v2 can be enabled to reduce spam and automated submissions. Multi-Step Forms Multi-step forms allow long forms to be divided into multiple sections. This improves user experience and helps reduce form abandonment. Ready-Made Form Templates The plugin includes pre-built form templates to help you get started quickly. Available templates include contact forms, reservation forms, job application forms, event registration forms, quote request forms, booking forms, order forms, survey forms, and more. Form Entry & Message Management Dashboard Easy Form Builder includes a dedicated Form Entry & Message Management Dashboard that allows administrators to manage all form submissions directly from the WordPress admin area. This dashboard acts as a centralized system for reviewing messages, tracking requests, and communicating with users without relying solely on email. Through this dashboard, administrators can read submitted messages, respond directly from the WordPress backend, and attach files to replies when needed. This approach helps keep communication organized and ensures that conversations related to form submissions remain accessible in one place. The Form Entry & Message Management Dashboard also provides practical tools for organizing and reviewing submissions. Administrators can change the status of messages (Open or Closed), edit or delete entries, search submissions by form or confirmation code, and receive notifications when new messages arrive. Form responses and message data can be downloaded in PDF format or exported to CSV files for reporting, archiving, or further analysis. Survey and Poll Forms Easy Form Builder includes dedicated fields for creating survey and poll forms. These fields allow website owners to collect structured feedback and analyze results directly inside WordPress. Survey-related features include: Rating star fields 5-point scale fields Net Promoter Score (NPS) fields Yes / No question fields Visual charts for survey results Exporting survey responses to CSV format Survey forms can be used for customer feedback, research, evaluations, and internal assessments. Conditional Logic – Show or Hide Fields Based on User Answers Easy Form Builder includes a visual conditional logic builder that turns static forms into smart forms. Conditional logic (also known as conditional fields) lets a form react to what a visitor enters, so each user only sees the fields that are relevant to them. Shorter, more personal forms reduce form abandonment and improve completion rates. With conditional logic you can: Show or hide fields based on a user’s answer Show or hide entire steps in multi-step forms Make fields required or optional dynamically Set, copy, or clear field values automatically Jump to a specific step (skip logic and conditional branching) Send conditional email notifications to different recipients based on the submitted answers Conditions support text, choice, numeric, and date comparisons (is, is not, contains, greater than, less than, between, before, after) and can be combined with AND/OR groups. Rules are enforced on the server as well as in the browser, so hidden or disabled fields are validated and sanitized correctly – conditional logic is not just a front-end effect. Conditional logic is available at no cost in the Free Plus version: up to 3 logic rules per form, up to 2 conditions per rule, and up to 2 conditional email notification rules, with an in-builder Test mode. The Pro version removes these limits and adds nested AND/OR groups, calculations, rule priority, conditional thank-you messages and redirects, conditional webhooks, rule export/import, and the logic Inspector (debugger). Payment Forms with Stripe Easy Form Builder supports Stripe payment fields, allowing you to collect online payments securely through your WordPress forms. You can use Stripe payment fields to create: Donation forms Order forms Booking and service payment forms Payment entries are handled alongside other form submissions and can be reviewed through the form management dashboard. For a step-by-step guide, see: How to Create a payment form to collect online payments in Easy Form Builder Login and Registration Forms The form builder allows you to create custom login and registration forms for WordPress users. These forms can replace the default WordPress login page and provide a customized user onboarding experience. Login and registration forms integrate with WordPress user management and allow you to control form layout, validation, and additional user fields. Advanced Form Fields Easy Form Builder provides a wide collection of advanced form fields, including: Drag-and-drop file upload fields Audio recorder field for recording voice messages from the microphone Video recorder field for recording video from the webcam Screen recorder field for capturing on-screen recordings Signature (e-signature) fields Location picker fields (OpenStreetMap and LeafletJS) Country, state/province, and city dropdown fields Multiple select dropdown fields Range slider fields Rating and star fields Switch and toggle fields Date pickers (Gregorian, Hijri, and Jalali) Telephone and mobile input fields Color picker fields Matrix and table fields for structured data collection These fields allow you to build complex, region-aware, and structured forms without custom development. Audio, Video, and Screen Recording Form Fields Easy Form Builder lets you add audio recording, video recording, and screen recording fields to any WordPress form, so visitors can record and submit media right from the browser – no extra apps, plugins, or third-party recording services. Every recording is uploaded to your own WordPress site, so your form data stays under your control. These recording form fields turn a standard WordPress form into an interactive media collection tool: Audio recorder field – let visitors record a voice message from their microphone. Great for voice feedback forms, audio testimonial forms, voice message and voicemail forms, language and pronunciation practice, and podcast or audio submission forms. Video recorder field – let visitors record video from their webcam. Perfect for video testimonial forms, job application video introductions, customer video feedback, and video question-and-answer forms. Screen recorder field – let visitors record their screen (with optional microphone audio). Ideal for bug report forms, technical support request forms, product feedback, and tutorial or demo submission forms. Each recorder field works in modern desktop and mobile browsers, shows live recording status and upload progress, and produces standard WebM or MP4 files that work across Chrome, Firefox, Edge, and Safari. You can set a maximum recording length, and every recording is validated on the server before it is stored. Recorded audio, video, and screen files appear alongside your other submissions in the Form Entry & Message Management Dashboard, where they can be played back, downloaded, or exported like any other WordPress form response. The audio recorder, video recorder, and screen recorder form fields are available in both the Free Plus and Pro versions of Easy Form Builder. Integrations and Add-ons Easy Form Builder supports optional integrations and add-ons that extend the functionality of the form plugin: Conditional Logic add-on for building smart forms – show or hide fields and steps, send conditional email notifications, and (in Pro) trigger conditional redirects and webhooks based on user answers. Included at no cost with the Free Plus version SMS notification add-on for sending text messages on form submission Stripe add-on for extended payment workflows PayPal add-on for creating payment forms and managing transactions through PayPal Offline forms add-on for collecting data without an active internet connection Hijri (Qamari) date picker add-on Jalali (Shamsi) date picker add-on Auto-Populate Integrations add-on (Autofill) for auto-filling form fields with real-time data from an external API – with API Key, Bearer Token, or Basic Auth authentication, response-to-field mapping, a built-in connection test, and smart caching Telegram notification add-on for sending instant form submission alerts and admin response notifications to Telegram using a bot Google Sheets integration for sending WordPress form submissions to Google Sheets automatically – no Zapier or third-party connector required. Connect your site with a Google service account (one-time setup, no OAuth login and no expiring tokens), let the plugin create a new spreadsheet or use one you already own, and bind each form to a sheet tab with a simple wizard. You can map form fields to spreadsheet columns with custom headers and ordering, apply ready-made sheet styles, and review every sync attempt in a built-in Google Sheet log. The header row and worksheet tab are created automatically on the first submission Security & Spam Protection add-on for blocking WordPress form spam without CAPTCHA – invisible, behavior-based bot detection with a hidden honeypot field, signed single-use security tokens, and per-IP rate limiting for form submissions, file uploads, confirmation-code lookups, public replies, and payment requests. It also protects your notification budget by stopping suspicious entries from consuming email, SMS, Telegram, webhook, or Google Sheets quota, supports an IP allowlist and blocklist, and keeps privacy-aware security logs that store hashed identifiers instead of raw IP addresses. It starts in Monitor-only mode, so you can review real traffic before turning on blocking Shield Security plugin silentCAPTCHA integration for invisible bot and spam protection without user interaction Premium Features Included Free Many WordPress form plugins only offer these features in a paid plan. In Easy Form Builder, they are included at no cost: Form entries stored in your own WordPress database, with a full entry management dashboard (Free) Email notifications after each form submission (Free) Custom email notification templates with a built-in visual editor for branded WordPress form emails (Free) File upload forms (Free) Confirmation code (tracking ID) for every submission (Free) Multi-step forms (Free) Basic survey and poll fields (Free) Conditional logic to show or hide fields based on answers (Free Plus) Advanced fields such as signature, location picker, matrix and table, range slider, and more (Free Plus) Exporting form entries to CSV and downloading responses as PDF (Free Plus) Automated weekly email deliverability test with spam score and SPF/DKIM/DMARC checks (Free Plus) The Free Plus version is completely free of charge – the only difference is a small “Powered by Easy Form Builder” link and credit, included only in the content of the page where the form is published. Available Versions Easy Form Builder is available in multiple versions to support different usage needs. Each version is designed to provide a clear and predictable set of features. Free Version The Free version provides essential form-building tools. It is suitable for users who need reliable form creation with email notifications, confirmation codes, entry management, file uploads, and basic survey fields. This version is suitable for personal websites, blogs, and small business sites. Free Plus Version The Free Plus version extends the Free version by enabling advanced form fields and features available in the form builder, while excluding external add-ons. It also unlocks conditional logic at no cost – up to 3 logic rules per form, up to 2 conditions per rule, and up to 2 conditional email notification rules – plus CSV export and the weekly email deliverability report. This version is suitable for users who need advanced form layouts, smart conditional forms, and surveys without add-on-based extensions. A small “Powered by Easy Form …
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C