{"id":11303,"date":"2026-05-29T10:31:37","date_gmt":"2026-05-29T02:31:37","guid":{"rendered":"https:\/\/aeosub.com\/xtreme-forms\/"},"modified":"2026-05-29T10:31:37","modified_gmt":"2026-05-29T02:31:37","slug":"xtreme-forms","status":"publish","type":"post","link":"https:\/\/aeosub.com\/zh\/xtreme-forms\/","title":{"rendered":"Xtreme Forms"},"content":{"rendered":"
\n\n\n\n\n\n\n\n
Developer<\/th>\nJessie Stewart<\/a><\/td>\n<\/tr>\n
Version<\/th>\nv2.5.10<\/td>\n<\/tr>\n
Active Installs<\/th>\n0 +<\/td>\n<\/tr>\n
Requires \/ Tested<\/th>\n6.0 \/ 7.0<\/td>\n<\/tr>\n
Last Updated<\/th>\n2026-05-29 2:09am GMT<\/td>\n<\/tr>\n
Official Link<\/th>\nView Details \u2192<\/a><\/td>\n<\/tr>\n<\/table><\/div>\n
Drag-and-drop contact form & lead capture plugin. Email routing, webhooks, analytics, spam protection, GDPR. Fast, free, no upsells.<\/div>\n

Xtreme Forms<\/strong> is a modern, drag-and-drop contact form and lead capture plugin<\/strong> for WordPress. Build any form you need \u2014 contact forms, quote requests, event registrations, newsletter signups, multi-step lead qualification \u2014 then capture every submission into a built-in lead inbox, route email notifications to the right person, fire webhooks to your CRM, and track conversions on a clean analytics dashboard.<\/p>\n

No upsells. No “Pro-only” features hidden inside the free download.<\/strong> Every feature listed below ships in the free plugin and is fully functional out of the box. The optional Pro add-on (sold separately at xtremeplugins.com) only adds advanced routing rules, retry queues, and extended analytics \u2014 it never gates or limits any feature you see on this page.<\/p>\n

Why Xtreme Forms?<\/h4>\n

If you’ve used the other popular form plugins (WPForms, Contact Form 7, Gravity Forms, Ninja Forms, Formidable Forms) you already know the trade-offs: free versions lock the features you actually need behind a Pro upgrade, the lighter ones don’t manage your leads after the email is sent, and the heavier ones drag down page speed with bloated assets. Xtreme Forms is built differently:<\/p>\n

    \n
  • Real lead management, not just form-to-email.<\/strong> Every submission lands in a searchable, filterable inbox with a full status workflow (new \u2192<\/span> read \u2192<\/span> contacted \u2192<\/span> converted), per-lead notes, tags, assignment to team members, and an append-only audit log. Treat your leads like a pipeline, not like inbox clutter.<\/li>\n
  • Everything in the free download is actually free.<\/strong> Drag-and-drop builder, conditional logic, webhooks, analytics, GDPR tools, multisite, audit log, JSON import\/export \u2014 no popup nag screens, no “upgrade to Pro” overlay on settings pages.<\/li>\n
  • Lightweight on the page.<\/strong> No jQuery dependency on the frontend, no third-party font request, no external service call unless you explicitly enable and configure one.<\/li>\n
  • Modern WordPress stack.<\/strong> Tested up to WordPress 7.0, requires PHP 8.1+, ships a native Gutenberg block alongside the classic shortcode, and works inside any block-theme template \/ Elementor \/ Bricks \/ Beaver Builder widget that accepts shortcodes.<\/li>\n
  • WordPress.org-compliant.<\/strong> Fully GPL, no obfuscated code, no telemetry, no auto-update side-channels, and every external-service touchpoint is disclosed below.<\/li>\n<\/ul>\n

    A solid free alternative to WPForms<\/strong> for site owners who want lead management built in, not an afterthought.<\/p>\n

    Built-in Form Templates<\/h4>\n

    Skip the blank canvas. Xtreme Forms ships ready-to-go templates for the forms you actually need:<\/p>\n

      \n
    • Simple Contact Form<\/strong> \u2014 name, email, message<\/li>\n
    • Quote Request<\/strong> \u2014 name, email, phone, project description, budget range<\/li>\n
    • Event Registration<\/strong> \u2014 full name, email, phone, company, attendee count, date picker<\/li>\n
    • Newsletter Signup<\/strong> \u2014 name, email, GDPR consent<\/li>\n
    • Multi-step lead qualification<\/strong> \u2014 built using the conditional-logic engine<\/li>\n<\/ul>\n

      Core Features (Free)<\/h4>\n
        \n
      • Drag-and-drop Form Builder<\/strong> \u2014 text, email, phone, select, checkbox, radio, textarea, date, file, hidden fields with per-field conditional logic<\/li>\n
      • Lead Inbox<\/strong> \u2014 searchable, filterable lead list with status management (new, read, contacted, converted, archived, spam)<\/li>\n
      • Email Notifications<\/strong> \u2014 route notifications to different recipients based on form field values<\/li>\n
      • Auto-Responder<\/strong> \u2014 send a branded confirmation email to the lead on submission<\/li>\n
      • Email Templates<\/strong> \u2014 reusable templates with merge tags ({{first_name}}, {{form_name}}, etc.)<\/li>\n
      • Webhooks<\/strong> \u2014 fire HTTP POST payloads to external URLs on lead capture with delivery logging<\/li>\n
      • Analytics Dashboard<\/strong> \u2014 submission trends, conversion rates, top forms, lead source breakdown<\/li>\n
      • UTM Tracking<\/strong> \u2014 automatically capture and store UTM parameters with each lead<\/li>\n
      • Duplicate Detection<\/strong> \u2014 configurable duplicate suppression by email\/phone within a time window<\/li>\n
      • Spam Protection<\/strong> \u2014 honeypot, time-gate, reCAPTCHA v3, and keyword blocklist<\/li>\n
      • GDPR Tools<\/strong> \u2014 consent checkbox, right-to-erasure helper, configurable data retention (tools to support your own GDPR workflow; the plugin does not guarantee legal compliance)<\/li>\n
      • Activity Timeline<\/strong> \u2014 per-lead event history (submitted, emailed, status changes, notes)<\/li>\n
      • Notes<\/strong> \u2014 add internal notes to any lead<\/li>\n
      • Tags<\/strong> \u2014 tag and filter leads with custom labels<\/li>\n
      • Audit Log<\/strong> \u2014 append-only log of all admin actions<\/li>\n
      • Import \/ Export<\/strong> \u2014 full JSON round-trip export and import<\/li>\n
      • Multisite Support<\/strong> \u2014 per-site tables, network-aware activation<\/li>\n
      • Gutenberg Block<\/strong> \u2014 embed any form with the Xtreme Forms block (live editor preview)<\/li>\n
      • Shortcode<\/strong> \u2014 [xtreme_forms id=\"X\"]<\/code> works everywhere<\/li>\n<\/ul>\n

        Optional Pro Add-On<\/h4>\n

        An optional paid add-on from the author is available at https:\/\/xtremeplugins.com\/plugins\/xtreme-forms. It is not required for any feature listed above and is not bundled with this plugin.<\/p>\n

          \n
        • Priority routing rules with complex AND\/OR conditions<\/li>\n
        • Webhook retry queue with exponential backoff<\/li>\n
        • Advanced analytics: cohort analysis, lead value tracking<\/li>\n
        • Priority email support<\/li>\n<\/ul>\n

          External services<\/h3>\n

          Xtreme Forms is fully self-hosted by default. It only contacts third-party services when a site administrator explicitly enables and configures the corresponding feature. Each service below is opt-in: nothing is sent until you turn it on and provide credentials.<\/p>\n

          Google reCAPTCHA v3 (optional spam protection)<\/h4>\n

          If you enable reCAPTCHA v3 in Xtreme Forms \u2192<\/span> Settings \u2192<\/span> Spam Protection<\/strong> and enter your site\/secret keys, the public-facing form page loads the reCAPTCHA JavaScript from https:\/\/www.google.com\/recaptcha\/api.js<\/code>, which executes in the visitor’s browser to generate a token. On submit, the plugin then sends a server-to-server request from your site to https:\/\/www.google.com\/recaptcha\/api\/siteverify<\/code> containing the token, your secret key, and the visitor’s IP address so Google can return a spam score.<\/p>\n

          Service provider: Google LLC.
          \nTerms of service: https:\/\/policies.google.com\/terms
          \nPrivacy policy: https:\/\/policies.google.com\/privacy
          \nreCAPTCHA-specific terms: https:\/\/www.google.com\/recaptcha\/about\/<\/p>\n

          Cloudflare Turnstile (optional spam protection)<\/h4>\n

          If you enable Cloudflare Turnstile in Xtreme Forms \u2192<\/span> Settings \u2192<\/span> Spam Protection<\/strong> and enter your site\/secret keys, the public-facing form page loads the Turnstile widget from https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js<\/code>. On submit, the plugin sends a server-to-server request from your site to https:\/\/challenges.cloudflare.com\/turnstile\/v0\/siteverify<\/code> containing the widget token, your secret key, and the visitor’s IP address so Cloudflare can validate the challenge.<\/p>\n

          Service provider: Cloudflare, Inc.
          \nTerms of service: https:\/\/www.cloudflare.com\/website-terms\/
          \nPrivacy policy: https:\/\/www.cloudflare.com\/privacypolicy\/<\/p>\n

          Zoho CRM (optional integration)<\/h4>\n

          If you enable the Zoho integration in Xtreme Forms \u2192<\/span> Automations \u2192<\/span> Integrations<\/strong> and enter your OAuth client ID, client secret, refresh token, and data-center region, then for every new lead capture the plugin makes two server-to-server requests from your site to Zoho:<\/p>\n

            \n
          1. A token exchange request to https:\/\/accounts.zoho.<tld>\/oauth\/v2\/token<\/code> (where <tld><\/code> is com<\/code>, eu<\/code>, in<\/code>, au<\/code>, or jp<\/code> based on the region you select) containing your refresh token, client ID, and client secret.<\/li>\n
          2. A lead-create request to https:\/\/www.zohoapis.<tld>\/crm\/v2\/Leads<\/code> containing the lead’s name, email address, phone number, and company name (only the fields that were submitted in the form).<\/li>\n<\/ol>\n

            Service provider: Zoho Corporation Pvt. Ltd.
            \nTerms of service: https:\/\/www.zoho.com\/terms.html
            \nPrivacy policy: https:\/\/www.zoho.com\/privacy.html<\/p>\n

            HubSpot CRM (optional integration)<\/h4>\n

            If you enable the HubSpot integration in Xtreme Forms \u2192<\/span> Automations \u2192<\/span> Integrations<\/strong> and enter a Private App access token, then for every new lead capture the plugin makes a server-to-server request from your site to https:\/\/api.hubapi.com\/crm\/v3\/objects\/contacts<\/code> containing the lead’s email, first\/last name, phone number, and company name (only the fields that were submitted in the form). When you click the Test<\/strong> button on the integrations page, the plugin also sends a single GET<\/code> request to the same host to verify the token.<\/p>\n

            Service provider: HubSpot, Inc.
            \nTerms of service: https:\/\/legal.hubspot.com\/terms-of-service
            \nPrivacy policy: https:\/\/legal.hubspot.com\/privacy-policy<\/p>\n

            Salesforce (optional integration)<\/h4>\n

            If you enable the Salesforce integration in Xtreme Forms \u2192<\/span> Automations \u2192<\/span> Integrations<\/strong> and enter your consumer key, consumer secret, instance URL, and access token, then for every new lead capture the plugin makes a server-to-server request from your site to <your_instance_url>\/services\/data\/v57.0\/sobjects\/Lead\/<\/code> containing the lead’s last name, email, phone number, and company name (only the fields that were submitted in the form).<\/p>\n

            Service provider: Salesforce, Inc.
            \nTerms of service: https:\/\/www.salesforce.com\/company\/legal\/agreements\/
            \nPrivacy policy: https:\/\/www.salesforce.com\/company\/privacy\/<\/p>\n

            Pipedrive (optional integration)<\/h4>\n

            If you enable the Pipedrive integration in Xtreme Forms \u2192<\/span> Automations \u2192<\/span> Integrations<\/strong> and enter an API token, then for every new lead capture the plugin makes two server-to-server requests from your site to https:\/\/api.pipedrive.com\/v1\/persons<\/code> and https:\/\/api.pipedrive.com\/v1\/leads<\/code> containing the lead’s name, email, and phone number (only the fields that were submitted in the form). The Test<\/strong> button sends one GET<\/code> request to https:\/\/api.pipedrive.com\/v1\/users\/me<\/code> to verify the token.<\/p>\n

            Service provider: Pipedrive O\u00dc.
            \nTerms of service: https:\/\/www.pipedrive.com\/en\/terms-of-service
            \nPrivacy policy: https:\/\/www.pipedrive.com\/en\/privacy<\/p>\n

            Webhooks (optional, user-defined destination)<\/h4>\n

            If you create one or more webhooks in Xtreme Forms \u2192<\/span> Automations \u2192<\/span> Webhooks<\/strong>, the plugin will send the captured lead’s data as a JSON POST<\/code> request to the URL(s) you configure for every new lead. These URLs are arbitrary endpoints that you (the site administrator) choose; the plugin itself is not affiliated with any particular webhook destination. Review the terms\/privacy policy of whichever service you point your webhooks to.<\/p>\n

            Xtreme Plugins licensing API (optional, only for the paid Pro add-on)<\/h4>\n

            The free Xtreme Forms plugin on WordPress.org is fully functional with no license required. A separately-sold Pro add-on is available from xtremeplugins.com; if (and only if) a site administrator chooses to buy it, the free plugin includes a “License” tab under Xtreme Forms \u2192<\/span> Settings \u2192<\/span> License<\/strong> that activates the Pro key.<\/p>\n

            The licensing API is only contacted when the administrator actively clicks a button on that tab<\/strong>:<\/p>\n

              \n
            1. Clicking Activate<\/strong> sends a server-to-server POST<\/code> from your site to https:\/\/xtremeplugins.com\/api\/v1\/license\/activate<\/code> containing the license key the admin entered and your site URL (home_url()<\/code>), so the licensing server can validate the key and bind a seat to this site.<\/li>\n
            2. Clicking Deactivate<\/strong> sends a server-to-server POST<\/code> from your site to https:\/\/xtremeplugins.com\/api\/v1\/license\/deactivate<\/code> containing the same two values, so the licensing server can release the seat.<\/li>\n<\/ol>\n

              No request is ever made on form submissions, page loads, or in the background \u2014 the endpoints are only hit on the two explicit button clicks above, and only after an administrator has typed in a license key. If you never use the License tab, the plugin never contacts xtremeplugins.com. The endpoint URLs can be overridden (for example to point at a self-hosted licensing server or a staging environment) via the xtremeforms_license_activate_url<\/code> and xtremeforms_license_deactivate_url<\/code> filters.<\/p>\n

              Service provider: XtremePlugins (xtremeplugins.com).
              \nTerms of service: https:\/\/xtremeplugins.com\/terms
              \nPrivacy policy: https:\/\/xtremeplugins.com\/privacy<\/p>\n","protected":false},"excerpt":{"rendered":"

              Drag-and-drop contact form & lead capture plugin. Email routing, webhooks, analytics, spam protection, GDPR. Fast, free, no upsells.<\/p>","protected":false},"author":1,"featured_media":9317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[252],"tags":[1156,1159,710,917,1382,555],"class_list":["post-11303","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trends","tag-contact-form","tag-form-builder","tag-forms","tag-lead-generation","tag-webhooks","tag-wordpress-plugin"],"_links":{"self":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/comments?post=11303"}],"version-history":[{"count":0,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11303\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media\/9317"}],"wp:attachment":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media?parent=11303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/categories?post=11303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/tags?post=11303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}