WP Manifestindependent plugin directory
manifest / forms / zigaform-wp-cost-estimator-lite

ZigaForm - Wordpress Calculator & Cost Estimation Form Builder Lite WP Registry grade D+. High-severity findings · 2 findingsWP RegistryHigh-severity findings · 2 findingsOpen the reportD+

The ZigaForm Cost Estimation makes you build estimation forms in few steps.

★ 3stars
v7.6.9latest · 9mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/softdiscover/zigaform-wp-cost-estimator-lite/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Zigaform - WordPress Calculator & Cost Estimation Form Builder is a powerful, real-time drag-and-drop form builder. It allows you to create detailed estimation forms in just a few easy steps. Estimate any service for your clients, and enable checkout through integrated payment gateways. With an advanced grid system, skin customizer, and a robust admin section, Zigaform offers extensive customization options without requiring any programming skills.

Watch Zigaform in action

Learn more at Zigaform WP Cost Estimator Lite.

Support Development

You can support the continued development of Zigaform by donating via PayPal:

Donate

Installation

Download the latest version of the Zigaform plugin ZIP file from this link.

Installation via FTP

  1. Unzip the Zigaform - Calculator & Cost Estimation Form Builder ZIP file.
  2. Open your FTP client.
  3. Upload the Zigaform Estimator Lite folder to the /wp-content/plugins/ directory on your server.
  4. Activate the plugin through the 'Plugins' menu in WordPress.
  5. Configure the plugin via the Zigaform - Calculator & Cost Estimation Form Builder Lite menu in your admin panel.

Installation via WordPress Backend

  1. Log in to your WordPress backend.
  2. Go to Plugins > Add New.
  3. Click the Upload Plugin button.
  4. Browse for the downloaded ZIP file and click Install Now.
  5. Once installed, click Activate Plugin.
  6. The Zigaform menu item will appear on the left-hand navigation.

For installation assistance, refer to the documentation.

Features

  • Real-time Drag & Drop Builder: Create estimation forms with ease.
  • Cost Estimation & Calculation: Supports complex math formulas.
  • Offline Payment Gateway: Integrated for seamless transactions.
  • 42+ Form Elements: Ready to use, fully customizable.
  • Advanced Grid System: Build professional, responsive forms.
  • Dynamic Validation: Ensures data integrity (e.g., email, letters, numbers).
  • Advanced Summary Estimate Box: Includes sticky feature.
  • Skin Customizer: Customize forms with a live preview.
  • Multiple Form Templates: Choose from a variety of templates.
  • 650+ Custom Fonts & 769+ Icons: For rich form customization.
  • Detailed Entries Report: Track and analyze form submissions.
  • AJAX-powered Forms: No page reloads on form submission.
  • Responsive Design: Fully optimized for all devices.
  • Multi-Language Support: Includes Spanish, Italian, French, Russian, German, Portuguese, and Chinese.
  • No Programming Skills Required: Simple setup and management.
  • Translation Ready: Easy to translate into any language.

Field Types

Zigaform offers a wide range of field types:

  • Text input (single line)
  • Textarea (multiple lines)
  • Checkbox
  • Radio (multiple choice)
  • Select dropdown
  • HTML
  • File Upload
  • Image Upload
  • Password
  • Slider
  • Range
  • Spinner
  • CAPTCHA
  • reCAPTCHA
  • Hidden field
  • Star rating
  • Color picker
  • Date picker
  • Time picker
  • Date and Time picker
  • Prepended/Appended textbox
  • Panel
  • Divider
  • Heading
  • Wizard buttons
  • Switch
  • Dynamic Checkboxes
  • Dynamic Radiobuttons

All these field types are included in the free version!

Entries Management

  • Dashboard Integration: Manage submitted entries from the WordPress dashboard.
  • Export/Import: Bulk export to CSV, bulk delete, advanced filtering, and search across entries.
  • Custom Confirmation Messages: Customize what users see after form submission, or redirect them to a custom URL.
  • Notification Emails: Send customized email notifications after form submission, including user entries and additional information.

Additional Premium Features

Upgrade to Zigaform - Cost Estimation & Payment Form Builder Premium for advanced functionalities:

  1. PayPal Integration
  2. Advanced Conditional Logic
  3. Wizard Forms with Live Preview
  4. Invoicing Features
  5. CSV Export for Submissions
  6. Extended Documentation and Priority Support

Try Zigaform Premium for more details.

Support

For support, visit our contact page.

Frequently Asked Questions

How do I create an estimation form?

  1. Go to Zigaform Estimator Lite in the menu.
  2. Click on the Add New Form button.
  3. Enter the form title in the pop-up window.
  4. Drag and drop or click to add form elements.
  5. Configure your options and click Save.
  6. A shortcode will be generated. Copy and paste it into your post/page.

Watch the tutorial

What Makes Zigaform Great?

  • Unlimited Forms & Fields: No restrictions on the number of forms, fields, or submissions.
  • Highly Customizable: Easily fine-tune every aspect of your forms, including CSS and HTML.
  • Developer-Friendly: Extensive options for developers to customize forms.
  • Responsive & Optimized: All forms are mobile-friendly and optimized for speed.
  • Easy Integration: Add forms to your site via shortcode, widget, or template function.
  • Comprehensive Documentation: Extensive guides and support available.

For more information, visit Zigaform's official site.

License

WordPress is free software, and is released under the terms of the GNU General Public License version 3 or (at your option) any later version. See LICENSE.md for complete license details.



Code is Poetry.

Releases

20 releases.

Tag
Published
v7.6.9 latest
Jan 19, 2026 9mo ago
Dec 1, 2025 10mo ago
May 17, 2025 1 year ago
May 4, 2025 1 year ago
Apr 30, 2025 1 year ago
Feb 18, 2025 1 year ago
Jan 22, 2025 1 year ago
Nov 20, 2024 1 year ago
Nov 15, 2024 1 year ago
Nov 7, 2024 1 year ago
Oct 29, 2024 1 year ago
Oct 10, 2024 2 years ago
Oct 9, 2024 2 years ago
Sep 27, 2024 2 years ago
Sep 23, 2024 2 years ago
Sep 19, 2024 2 years ago
Sep 17, 2024 2 years ago
Sep 11, 2024 2 years ago
Aug 23, 2024 2 years ago
Aug 22, 2024 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

ZigaForm - Wordpress Calculator & Cost Estimation Form Builder Lite 7.6.9 · audited by WP Registry

High-severity findings.

2 high
Audited release
7.6.9
Findings
2
Worst severity
high
Content hash
0d2fa51a319ed069e11d440b…

Findings

  • high Admin AJAX handlers authenticate with nonce only — no capability check

    missing_capability

    Many backend wp_ajax_* handlers (e.g. ajax_delete_form_byid, ajax_delete_record, ajax_backup_restorefile, ajax_backup_create, ajax_backup_deletefile, ajax_save_options, ajax_listform_duplicate, gateway/invoice delete) call check_ajax_referer('zgfm_ajax_nonce') but never Uiform_Form_Helper::check_User_Access() / current_user_can('manage_options'). Any logged-in user can mint a valid zgfm_ajax_nonce (same action string) and soft-delete forms, delete submission records, create/restore/delete DB backups under uploads/softdiscover/, and change plugin options. Frontend nopriv submit handlers are intentional; invoice view adds a record-specific nonce gate.

    modules/formbuilder/controllers/uiform-fb-controller-forms.php:1271-1284

    Recommendation

    Call Uiform_Form_Helper::check_User_Access() (or current_user_can('manage_options')) at the start of every backend AJAX handler after the nonce check; reject with wp_send_json_error on failure.

  • high Backup restore/create/delete AJAX missing capability check

    missing_capability

    ajax_backup_restorefile, ajax_backup_create, and ajax_backup_deletefile only verify zgfm_ajax_nonce. A Subscriber can restore arbitrary backup SQL into the site DB or delete backup files under uploads/softdiscover/.../backups/, enabling destructive data overwrite.

    modules/formbuilder/controllers/uiform-fb-controller-settings.php:148-195

    Recommendation

    Require manage_options before any backup create/restore/delete; validate filenames against a basename whitelist under the backups directory.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.