alesas

Sobi Forms is a lightweight contact form plugin built for speed and simplicity. Create multiple forms, embed them anywhere with a shortcode or Gutenberg block, and keep your front-end lean.
Learn more on the official site: <a href="https://sobiforms.com" rel="nofollow ugc">sobiforms.com</a> — features, FAQ, and the <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">public roadmap</a>.
Performance-first front-end
<ul>
<li>Vanilla JavaScript on the front-end</li>
<li>~3.7 KB CSS + JS combined (gzipped transfer; ~13.3 KB unminified source on form pages)</li>
<li>Assets enqueue only when a form is rendered on the page – zero impact on other pages</li>
<li>Script loaded in the footer with <code>defer</code> strategy (WordPress 6.3+)</li>
<li>No global front-end CSS frameworks</li>
</ul>
Form builder (admin only)
<ul>
<li>Redesigned editor for more comfort — form canvas on the left, settings sidebar on the right; save without a full page reload</li>
<li>Lucide icons in the admin builder and submissions inbox (modern, consistent UI)</li>
<li>Document-first drag-and-drop editor (React via WordPress <code>wp-element</code>, loaded only on the form edit screen)</li>
<li>Field types: text, email, link (URL), textarea, phone, number, select, multiple choice (radio tiles), multi-option checkbox, file upload; layout blocks: title (section heading), paragraph (instructions)</li>
<li>URL prefill: optional per-field URL parameter to pre-populate scalar fields from query strings (client-side; cache-friendly)</li>
<li>Hidden fields: compact sidebar table to pass invisible data (URL params and/or static defaults); invisible on the front; always submitted; visible in inbox</li>
<li>File upload: one file per field; admin picks allowed types by category (Application, Image, Text) or individual extensions; private storage under <code>uploads/sobiforms/</code>; download from the Submissions inbox (admin only). Save to database is required when a form includes a file field</li>
<li>Field settings: number min/max; text min/max characters; show/hide label; textarea resize and max length; file max size (default 5 MB, capped by server)</li>
<li>Radio and multi-checkbox options edited inline in the builder (add option, remove on hover); dropdown options in the field menu</li>
<li>Multiple recipient emails per form</li>
<li>After submit: inline success message or redirect to a published page</li>
<li>Availability: pause a form, auto-close at a date/time, or after a set number of submissions, with a visitor message when closed</li>
</ul>
Embedding
<ul>
<li>Shortcode: <code>[sobiforms id="3"]</code> or <code>[sobiforms slug="contact"]</code> (ID or slug required; slug is fixed after creation)</li>
<li>Gutenberg block: Sobi Forms Contact with form picker</li>
<li>Works with any page builder that supports shortcodes or blocks</li>
</ul>
Submissions
<ul>
<li>Email notifications via <code>wp_mail()</code> (HTML)</li>
<li>Optional visitor confirmation email — simple thank-you receipt to the submitter (per form, Notifications sidebar)</li>
<li>Per-form delivery — email notifications and/or database storage (new forms default to inbox storage)</li>
<li>Inbox with read/unread, starred, spam queue, admin notes, search and filters; split list + detail layout with resizable columns; All / Unread / Starred view tabs and per-form filter in the list header</li>
<li>Submission source page — frozen page title and pathname at submit time in the detail sidebar (no query string; use hidden fields for UTM/campaign params)</li>
<li>Dashboard widget on the WordPress admin home — recent unread submissions at a glance</li>
<li>Optional Akismet spam filtering (when the Akismet plugin is active)</li>
<li>Honeypot, nonce verification, rate limiting (5 submissions/hour per hashed IP)</li>
</ul>
Security
<ul>
<li>Nonce on every submission</li>
<li>Honeypot field</li>
<li>Server-side field validation against a strict JSON schema</li>
<li>Capability checks and nonces on all admin actions</li>
<li>Optional Akismet integration — spam submissions quarantined when the Akismet plugin is active</li>
<li>File uploads — server-side MIME validation; upload directory hardened on Apache (direct HTTP access denied); admin-only download with path verification</li>
</ul>
<h3>Privacy Policy</h3>
Sobi Forms processes data submitted through your forms. Per form you choose how submissions are delivered:
<ul>
<li>Email notifications – when enabled and recipient addresses are set, field values are sent via <code>wp_mail()</code>.</li>
<li>Visitor confirmation – when Visitor email confirmation is enabled, the submitter may receive a simple thank-you at the address from the selected email field (no submitted field values in that email).</li>
<li>Database storage – when Save to database is enabled (default for new forms in the builder), submissions are saved in custom tables on your site (<code>wp_sobiforms_submissions</code>, <code>wp_sobiforms_forms</code>). Each form has its own retention setting (auto-delete after N days). You can use inbox-only delivery with no email.</li>
<li>Hashed IP – when storage is enabled, a one-way SHA-256 hash of the visitor IP is stored with each submission for abuse prevention. Raw IP addresses are not stored.</li>
<li>Rate limiting – a transient keyed by hashed IP limits submissions to 5 per hour. Transients expire automatically.</li>
<li>Admin notes – internal notes on submissions are stored in your database and never shown on the front-end or included in emails.</li>
<li>No tracking – Sobi Forms does not connect to third-party analytics or advertising when processing form submissions.</li>
<li>Optional Akismet – if you enable Akismet spam filtering and the Akismet plugin is active, submission content may be sent to Akismet’s service for spam checks.</li>
<li>No data sent to the plugin author – form submissions stay on your server and mail server. The Feedback settings tab links to the WordPress.org support forum and <a href="https://sobiforms.com/roadmap/" rel="nofollow ugc">sobiforms.com/roadmap</a> only if you choose to open them.</li>
</ul>
Site owners are responsible for their privacy policy and lawful basis for collecting visitor data.
<h3>Licenses for Third-Party Resources</h3>
This plugin bundled resources covered by their own respective licenses: 
* Lucide Icons – https://lucide.dev 
 License: ISC (https://lucide.dev/license) 
 Copyright (c) Lucide Contributors

Sobi Forms

Lightweight form builder with inbox, shortcode, Gutenberg block, and vanilla AJAX.

Seerox

<a href="http://www.seerox.com/" rel="nofollow ugc">Seerox</a> brings another exciting plugin for you. This plugin will allow you to manage different file types in Media Library, So if you want to Enable/Disable any specific file type in media library to upload for Security reasons. Using this plugin you can control permissions for Your Site users to upload specific type of files not only from media library section but also from frontend.
<h3>Features</h3>
<ul>
<li>Adds file extensions that WordPress doesn’t support by default</li>
</ul>

WP Media File Type Manager

WP Media File Type Manager will allow you to manage different file types in Media Library.

Sobi Forms vs WP Media File Type Manager