Contact Forms by Cimatti

Build, publish, and manage contact forms on your WordPress site. Drag-and-drop editor with live preview, built-in submission storage, and configurable email notifications.

Why Contact Forms by Cimatti

• 22 field types. Text, email, phone, select, checkboxes, file upload, date, color, and more.
• Drag-and-drop editor with live preview. See how the form looks while building it.
• Built-in submissions. Stored in your database, searchable, exportable to Excel.
• Custom CSS class and ID on every field, per-option on radios and checkboxes.
• Accessible by default. WCAG 2.2 AA and European Accessibility Act.
• Privacy ready. GDPR data retention with automatic anonymization.
• All included. No subscription, no ads, no hidden fees.

Build Forms Quickly

Create forms with drag-and-drop. Create custom fields from Contact Forms > Fields and reuse them across forms.

Field types: Text Field, Text Area, Email, Autoreply Email, Telephone, Checkbox, Select, Radio Buttons, Multiple Select, Multiple Checkboxes, Post Select, Multiple Post Checkboxes, Date, Color Picker, Hidden Value, File Upload, Password, Password and Confirmation, Custom HTML, Fieldset, Captcha, Turnstile, and Submit Button.

Default fields on activation: First Name, Last Name, Email (autoreply), Address, City, State/Province, Country, Message, Telephone, Captcha, and Turnstile.

Accessibility Built In

Contact Forms 2.0 was built with accessibility at its core:
* ARIA attributes (aria-required, aria-invalid, aria-describedby, aria-live)
* Validation summary with links that scroll to and focus each field
* Inline validation messages on blur and change events
* Keyboard-accessible file upload with screen reader support
* Respects prefers-reduced-motion

Three Layout Options

Standard (labels above fields), Side-by-Side (labels left), and Inline Labels (floating labels that move above the field on focus). All responsive and accessible.

Customize Your Forms

• Custom validation messages per field and per form
• Colors, margins, button styles in the Appearance tab
• Custom success and error messages per form

Email Notifications

Admin and visitor emails with tokens ({first_name}, {email}, {__submitted_html}, etc.), conditional tags, and custom From address.

GDPR and Data Retention

• Configurable data retention per form (days, months, or years)
• Anonymization or deletion for expired data, via WP-Cron
• WordPress Privacy API integration
• Deactivation cleanup options

Submissions Management

Sortable list with submitted fields as columns. Lead statuses, notes, search, filter, Excel export.

Dashboard and Analytics

Submission charts filtered by form, period, or page.

Spam Protection

• Captcha – Google reCAPTCHA v2 (keys configured in Settings) or math-based fallback
• Turnstile – Cloudflare Turnstile via the Simple Cloudflare Turnstile plugin
• Honeypot – Hidden field technique

File Upload

Drag-and-drop file upload with visual dropzone, keyboard navigation, configurable extensions.

Developer Friendly

• Gutenberg block and classic editor button for embedding forms
• Custom CSS class and ID on all field types, per-option on radios/checkboxes
• Extension hooks for custom field types
• WordPress Filters for form generation, validation, and custom tokens
• English, Italian, and Spanish translations, WPML supported

Theme Helper

Scans your theme’s CSS for conflicts with Contact Forms. Shows conflicting selectors and properties.

What Changed in Version 2.0

Version 2.0 is the result of five months of focused development:

• Accessibility rewrite (WCAG 2.2 AA / European Accessibility Act)
• Live preview in the form editor
• Inline Labels layout (floating labels)
• GDPR data retention, anonymization, and Privacy API
• Turnstile and reCAPTCHA v2
• Drag-and-drop file upload
• Telephone field with E.164 validation
• Submissions list with Excel export
• Gutenberg block
• Danger Zone and deactivation cleanup

Privacy Notices

With the default configuration, this plugin does not track users, send data to external servers, or use cookies on the frontend.

If you use reCAPTCHA, data may be sent to Google. If you use Turnstile, data may be sent to Cloudflare.

Docs and Support

Documentation and FAQ: cimatti.it. Support: WordPress.org forum.

Where do I report security bugs?

Through the Patchstack Vulnerability Disclosure Program.