WP Manifestindependent plugin directory
manifest / forms / acf-widget

Alpha Contact Form Widget WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Advanced Contact Form Widget for WordPress. Simple and clean, easily customizable contact form widget for WordPress with AJAX support.

★ 0stars
v1.8.6latest · 9 years ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ginsterbusch/acf-widget/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

NOTE: As of 2017-04-27, development of this plugin is officially halted. I suggest using CF7 instead ;)

Advanced Contact Form Widget for WordPress (unrelated with Advanced Custom Fields!). Simple and clean, easily customizable contact form widget for WordPress with both support for AJAX and complete server-side form processsing (eg. for clients which got JS disabled or got no JS at all). Additionally offering simple translation options w/o gettext based on JSON (to speed up the processsing), including custom drop-in replacements for both the translation as well as the contact form itself, which have to be placed inside the currently active theme directory. Aside of this, the plugin is completely implemented in OOP.

Basically a plugin for both developers and advanced users, while still being fairly simple and easy to use, also for normal users.

Feature list (TL;DR):

  • Contact form widget for WordPress
  • Unobtrusive Javascript-based mail sending and form validation (both dynamic using AJAX and static server-side)
  • custom additional fields and styling per widget
  • simple, global translation options either using JSON file inside the plugin directory, override via the theme directory plus customization in the admin area

Work-in-progress:

  • Filter and Action hooks for adding CAPTCHA, Math Question and similar anti-spam solutions

Future plans:

  • Improve form validation (possibly using the WordPress'ish in-house jQuery Form plugins)

Releases

2 releases.

Tag
Published
v1.8.6 latest
Apr 18, 2017 9 years ago
Apr 18, 2017 9 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

Alpha Contact Form Widget 1.8.5 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.8.5
Findings
1
Worst severity
low
Content hash
91047530333eca5d56f4fb08…

Findings

  • low Contact form AJAX missing nonce

    missing_nonce

    wp_ajax_nopriv_acf_process_form sends email based on widget settings with no nonce verification, enabling cross-site request forgery mail spam via the site mailer.

    acf-widget.php:37-40

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.