FlowForms – Conversational Form Builder
Explore FlowForms – Conversational Form Builder vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.
Vulnerability Records

FlowForms – Conversational Form Builder
Author
Priyanshu Chaudhary
FlowForms is a self-hosted conversational form builder for WordPress. Most contact form plugins give you a wall of fields. FlowForms gives your visitors a conversation. One question at a time, guided and focused — the result is higher completion rates, better responses, and a user experience that feels modern and intentional. Whether you’re collecting leads, running surveys, gathering testimonials, or building customer feedback forms, FlowForms delivers an interactive form experience that lives on your server, under your control, with no monthly subscription. View Demo | Templates Conversational, Step-by-Step Forms Our conversational form plugin enables you to create engaging, Typeform-style interactive forms that guide users through a seamless question-by-question experience. This reduces overwhelm, keeps respondents focused, and improves form completion rates compared to traditional multi-field forms. Every form flows through three stages: Welcome Screen — customisable title, description, start button, and background image Questions — any combination of 8 field types, drag-to-reorder Thank You Screen — closing message with optional redirect URL, delay, and social share buttons Drag & Drop Form Builder Build any form in minutes without touching a line of code. The intuitive React-powered drag-and-drop builder lets you add, reorder, and configure questions visually. What you build is exactly what your visitors see. 8 Ready-to-Use Field Types FlowForms ships with all the essentials: Short Text — single-line text input Long Text — multi-line paragraph / textarea Multiple Choice — single-select with optional “Other” answer Checkboxes — multi-select with min/max limits and optional “Other” answer Rating — star rating with configurable max stars and shape Yes / No — two-button question with customisable labels Email — with format validation and optional confirm-email mode Number — numeric input with optional min/max validation Beautiful Design Customisation Every form is independently styled with a live design panel. Customise: Background colour Title, description, answer, hint, field, and button colours Button hover colour and text Star rating colour Layout alignment: left or centered Border radius: angular, rounded, or full Google Fonts Font size: small, regular, or large Forms look great on every device — FlowForms is fully responsive and mobile-ready. Flexible Embed Options Embed your forms anywhere in WordPress using your preferred method: Shortcode: [flowform id="123"] Gutenberg Block: native FlowForm block — drag it straight into the editor Full-Page URL: /flowform/{id} — share a direct link to a distraction-free form page Pre-Built Form Templates Get started in seconds with 4 ready-to-use templates: Contact Form Lead Generation Survey Customer Feedback Testimonial Form Submission Management Every submission is stored securely in your WordPress database. The built-in entries dashboard gives you full control: Paginated list with search and sorting Individual entry detail view Bulk actions: mark read/unread, star, trash, delete permanently Status filters: All, Starred, Spam, Trash Unread count badge in the admin menu Email Notifications Get notified the moment someone submits your form. Configure the recipient, subject, sender name, reply-to address, and message body — all with smart tag support. Available smart tags: {admin_email}, {site_name}, {form_name}, {all_fields} Built-In Spam Protection Three layers of anti-spam run automatically on every submission — no CAPTCHA plugins required: Honeypot field — invisible to humans, catches bots Rotating server-side token — tied to each form, refreshed daily Akismet integration — if Akismet is active, submissions are checked automatically; spam entries are flagged and saved for review Multilingual Ready Every user-facing string — button labels, validation messages, placeholders, error messages — is customisable from the Global Settings panel. No translation plugin needed to adapt FlowForms for any language. FlowForms Pro (Coming Soon) We are actively researching the features users most want. The Pro version will be a self-hosted annual licence that extends the free plugin without replacing it. Candidate Pro features under research: Conditional logic (show/hide questions based on answers) Multiple email notifications and respondent confirmation emails Email marketing integrations (Mailchimp, ConvertKit, ActiveCampaign, and more) File upload field Stripe payment field CSV / Excel entry export Opinion scale / NPS field Date & time picker field Phone number field with country code GDPR consent checkbox field Form scheduling (open/close at a specific date) Submission limits (cap responses at a set number) Zapier / webhook integrations Calculator & quiz scoring Extended pro template library Want to influence what we build first? Request a feature and tell us which feature matters most to you. Self-Hosted and Private Your own server: All data stays in your database Your own data: No third-party servers, no vendor lock-in Native integration: Gutenberg block, shortcode, full-page URL Conversational UX: One question at a time Full Feature List Drag-and-drop conversational form builder 8 field types: short text, long text, multiple choice, checkboxes, rating, yes/no, email, number Welcome screen and thank you screen for every form Redirect on completion with configurable delay Social share buttons on thank you screen Live design customisation — colours, fonts, layout, border radius Google Font supported Layout alignments: left and center Progress bar (show/hide) Navigation arrows (show/hide) Gutenberg block embed Shortcode embed Full-page form URL 4 free starter templates Submission entries database with full admin management Read/unread, star, trash, spam entry statuses Unread count badge in WordPress admin menu Email notifications with smart tags Honeypot, token, and Akismet spam protection Customisable user-facing strings GDPR-friendly — all data stored on your own server 100% mobile responsive Developer hooks for extensibility Source Code The full source code, including all JavaScript source files and build configuration, is publicly available on GitHub
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C