WP Secure Contact Form
A modern, accessible, and secure WordPress contact form plugin with toast notifications, custom styling, and robust spam and security protection. Easy to use, fully customizable, and ideal for any WordPress site.
by Katharine Ford · github.com/katefordwebdeveloper/wp-secure-contact-form
Install
No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:
wp plugin install https://github.com/katefordwebdeveloper/wp-secure-contact-form/archive/refs/heads/main.zipA modern, accessible, and secure WordPress contact form plugin with toast notifications and custom styling.
Features
- Choose which fields to display: Name, Email, Subject, Message
- Admin settings page for easy configuration
- Toast notifications for success and error messages
- Accessible and keyboard-friendly
- Stylish, responsive, and customizable CSS
Security Highlights
- Nonce protection to prevent CSRF attacks
- Strict input sanitization and validation for all fields
- Admin-only access to plugin settings
- Secure email handling with safe headers
Installation
- Upload the
wp-secure-contact-formfolder to your WordPress/wp-content/plugins/directory. - Activate the plugin from the WordPress admin dashboard.
- Go to Settings > Secure Contact Form to configure fields and recipient email.
- Use the
[wp_secure_contact_form]shortcode to display the form on any page or post.
Usage
Add the following shortcode to any page or post:
[wp_secure_contact_form]
Screenshots
Contact Form (all fields enabled):

Settings Page:

Success Message:

Error Message – Invalid Email Format:

Error Message – Message Field Required:

Mailtrap Email Example:

Customization
- Edit
wp-secure-contact-form.cssto change the form and toast styles. - Edit
wp-secure-contact-form.phpfor advanced customization.
License
GPL2
View the full source code and more screenshots:
https://github.com/katefordwebdeveloper/wp-secure-contact-form