WP Manifestindependent plugin directory
manifest / forms / disciple-tools-webform

Disciple.Tools - Webform WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA- #3 in Forms

Add a lead form to any website and integrate those leads into the Disciple.Tools system. Build custom lead forms through an admin interface, assign leads to dispatcher, and tag with sources. Special security design allows for forms to be served from one system and privately transferred to the Disciple.Tools system.

★ 2stars
4.6krelease downloads
≈150active sites
6.6.6latest · 14d ago

Install

Download disciple-tools-webform.zip From the 6.6.6 release on GitHub, Oct 8, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/discipletools/disciple-tools-webform/releases/download/6.6.6/disciple-tools-webform.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Plugin Banner

Disciple.Tools - Webform

Add a lead form to any website and integrate those leads into the Disciple.Tools system. Build custom lead forms through an admin interface, assign leads to dispatcher, and tag with sources. Special security design allows for forms to be served from one system and privately transferred to the Disciple.Tools system.

Purpose

Collecting contacts online is a core requirement for any media outreach ministry. This plugin makes getting those contacts and their collected responses easily into the Disciple.Tools contact record.

Additionally, for evangelism websites in secure locations, this unique webform facilitates hiding the Disciple.Tools system source by hosting the webform remotely from one Wordpress system and then connecting servers so that they pass the contact data from the evangelism website to the Disciple.Tools system in the background. This reduces the risk of a high target evangelism website being compromised and then having contacts stored in that system compromised.

Usage

Will Do

  • Build custom web forms using text fields, dropdowns, multiselect, radio buttons and checkboxes, and geolocated addresses.
  • Connect fields created in Disciple.Tools to be displayed on the lead form.
  • Run the webform system from a remote server for security.
  • Uses an admin interface to build custom forms.
  • Fully customize form using CSS.

Will Not Do

  • Work on sites that do not allow iframes.

Requirements

  • Disciple.Tools Theme installed on a self-hosted Wordpress Server
  • If installed on a remote server, must be a self-hosted Wordpress site.

Installing

  • Install as a standard Disciple.Tools/Wordpress plugin in the system Admin/Plugins area.
  • Requires the user role of Administrator.

Contribution

Contributions welcome. You can report issues and bugs in the Issues section of the repo. You can present ideas in the Discussions section of the repo. And code contributions are welcome using the Pull Request system for git. For a more details on contribution see the contribution guidelines.

Screenshots

Sample Edit Screen

screenshot form


Sample Form

screenshot form

Releases

Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
6.6.6 latest
Oct 8, 2026 14d ago
disciple-tools-webform.zip
72
Oct 8, 2026 14d ago
disciple-tools-webform.zip
0
Feb 11, 2026 8mo ago
disciple-tools-webform.zip
209
Jun 18, 2025 1 year ago
disciple-tools-webform.zip
1,137
Dec 17, 2024 1 year ago
disciple-tools-webform.zip
151
Dec 3, 2024 1 year ago
disciple-tools-webform.zip
76
Nov 7, 2024 1 year ago
disciple-tools-webform.zip
87
Jul 18, 2024 2 years ago
disciple-tools-webform.zip
108
May 7, 2024 2 years ago
disciple-tools-webform.zip
94
Apr 26, 2024 2 years ago
disciple-tools-webform.zip
70
Apr 23, 2024 2 years ago
disciple-tools-webform.zip
61
Apr 23, 2024 2 years ago
disciple-tools-webform.zip
4
Mar 28, 2024 2 years ago
disciple-tools-webform.zip
83
Sep 1, 2023 3 years ago
disciple-tools-webform.zip
126
Aug 17, 2023 3 years ago
disciple-tools-webform.zip
209
Jul 25, 2023 3 years ago
disciple-tools-webform.zip
70
May 10, 2023 3 years ago
disciple-tools-webform.zip
87
Apr 26, 2023 3 years ago
disciple-tools-webform.zip
61
Apr 26, 2023 3 years ago
disciple-tools-webform.zip
9
Apr 25, 2023 3 years ago
disciple-tools-webform.zip
32
Apr 25, 2023 3 years ago
disciple-tools-webform.zip
6
Apr 25, 2023 3 years ago
disciple-tools-webform.zip
5
Apr 14, 2023 3 years ago
disciple-tools-webform.zip
50
Mar 20, 2023 3 years ago
disciple-tools-webform.zip
72
5.8
Mar 10, 2023 3 years ago
disciple-tools-webform.zip
50
All releases on GitHub →

Active-site estimate ≈150 comes from the median of recent superseded releases. Method.

A- grade

Security

Disciple.Tools - Webform 6.6.6 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
6.6.6
Findings
1
Worst severity
low
Content hash
ab95e1970ae20ad81627c63b…

Findings

  • low Public form submit with incomplete server-side sanitization

    unsafe_input

    Unauthenticated POST dt-public/v1/webform/form_submit creates CRM contacts when a valid form token is presented. filter_params() only array_filters empties and comments 'todo sanitize responses'. Custom field_* values are mapped into DT contact fields/notes. Impact is CRM data pollution / stored unsafe input rather than site takeover; Turnstile is optional.

    includes/create-contact.php:56-145

    Recommendation

    Sanitize each field by type; require Turnstile on public forms; rate-limit by IP.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.