PLUGIN SECURITY
Is Extensions For Elementor Form safe?
Contact form addon for Elementor. Create forms in Elementor Free or extend Elementor Pro forms with conditional logic, country code and extra fields.
What this plugin does
- Slug:
extensions-for-elementor-form - Author: Cool Plugins
- 20000+ active installs
- 92/100 rating (25 reviews on wordpress.org)
- 314312 all-time downloads
- On WordPress.org since 2020-04-02
contact formelementorelementor formelementor form builderform builder
Maintenance status
- Latest known version: 2.7.6
- Last updated: 2026-09-28 8:58am GMT
- Tested up to WordPress: 7.1.3
- Requires PHP: 7.4+
Known vulnerabilities
1 known CVE on file for Extensions For Elementor Form. Reported between 2026 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-97301 | Cool FormKit Lite – Advanced Form Builder for Elementor [extensions-for-elementor-form] < 2.7.9 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.7.9 | 2.7.9 | 2026-09-30 | ⚠ update needed |
How to fix it
Keep Extensions For Elementor Form updated — 2.7.6 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Contact Form 7 — 10000000+ active installs — 80/100 (2184) — max PHP 8.4
- Akismet Anti-spam: Spam Protection — 5000000+ active installs — 94/100 (1187) — max PHP 8.4
- WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More — 5000000+ active installs — 96/100 (14385)
- Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder — 2000000+ active installs — 98/100 (2528) — max PHP 8.4
- Essential Addons for Elementor – Popular Elementor Templates & Widgets — 1000000+ active installs — 98/100 (4130) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.