Xtreme Forms – WP Contact Form Builder, Lead Capture, Form to
Xtreme Forms is a modern, drag-and-drop contact form and lead capture plugin for WordPress. Build any form you need — contact forms, quote requests, event registrations, newsletter signups, multi-step lead qualification — then capture every submission into a built-in lead inbox, route email notifications to the right person, fire webhooks to your CRM, and track conversions on a clean analytics dashboard. No upsells. No “Pro-only” features hidden inside the free download. Every feature listed below ships in the free plugin and is fully functional out of the box. The optional Pro add-on (sold separately at xtremeplugins.com) only adds advanced routing rules, retry queues, and extended analytics — it never gates or limits any feature you see on this page. Useful Links Plugin homepage: https://xtremeplugins.com/plugins/xtreme-forms — overview, screenshots, live demo Features: https://xtremeplugins.com/plugins/xtreme-forms#features — full feature breakdown with comparison vs other form plugins Pricing: https://xtremeplugins.com/plugins/xtreme-forms/pricing — Pro add-on plans (free plugin stays free forever) Support: the WordPress.org support forum for free-version questions; Pro subscribers get priority support at xtremeplugins.com Source / issues: GitHub Why Xtreme Forms? If you’ve used the other popular form plugins (WPForms, Contact Form 7, Gravity Forms, Ninja Forms, Formidable Forms) you already know the trade-offs: free versions lock the features you actually need behind a Pro upgrade, the lighter ones don’t manage your leads after the email is sent, and the heavier ones drag down page speed with bloated assets. Xtreme Forms is built differently: Real lead management, not just form-to-email. Every submission lands in a searchable, filterable inbox with a full status workflow (new → read → contacted → converted), per-lead notes, tags, assignment to team members, and an append-only audit log. Treat your leads like a pipeline, not like inbox clutter. Everything in the free download is actually free. Drag-and-drop builder, conditional logic, webhooks, analytics, GDPR tools, multisite, audit log, JSON import/export — no popup nag screens, no “upgrade to Pro” overlay on settings pages. Lightweight on the page. No jQuery dependency on the frontend, no third-party font request, no external service call unless you explicitly enable and configure one. Modern WordPress stack. Tested up to WordPress 7.0, requires PHP 8.1+, ships a native Gutenberg block alongside the classic shortcode, and works inside any block-theme template / Elementor / Bricks / Beaver Builder widget that accepts shortcodes. WordPress.org-compliant. Fully GPL, no obfuscated code, no telemetry, no auto-update side-channels, and every external-service touchpoint is disclosed below. A solid free alternative to WPForms for site owners who want lead management built in, not an afterthought. Built-in Form Templates Skip the blank canvas. Xtreme Forms ships ready-to-go templates for the forms you actually need: Simple Contact Form — name, email, message — the classic WordPress contact form Quote Request Form — name, email, phone, project description, budget range Event Registration Form — full name, email, phone, company, attendee count, date picker Newsletter Signup Form — name, email, GDPR consent Multi-step Lead Qualification Form — built using the conditional-logic engine Booking / appointment request form — fully customizable in the drag-and-drop form builder Works With Your Page Builder The [xtreme_forms id="X"] shortcode and the native Gutenberg block work inside every WordPress page builder and block theme: Elementor — drop the shortcode in the Shortcode widget, or use the Gutenberg block in Elementor Pro’s container element Bricks Builder — works via shortcode element Beaver Builder — works via the Text/HTML or Shortcode module Divi — works in any Text or Code module via shortcode Oxygen Builder — works via shortcode element WPBakery Page Builder — works via the Raw HTML / Shortcode element Block-based themes (Twenty Twenty-Four, Twenty Twenty-Five, Frost, Blockbase) — native Gutenberg block with live preview Classic editor — paste the shortcode anywhere Switching From Another WordPress Form Plugin? If you’re moving away from a heavier or upsell-driven WordPress contact form plugin — WPForms, Contact Form 7, Gravity Forms, Ninja Forms, Formidable Forms, Forminator, Fluent Forms, Everest Forms, or Happyforms — Xtreme Forms makes the transition straightforward: Rebuild forms in minutes using the drag-and-drop builder + the six ready-made templates above Bring existing leads with you via the JSON import endpoint — map your old plugin’s CSV/JSON export to the Xtreme Forms lead schema Keep your email recipients and routing rules — Xtreme Forms’s email-routing engine accepts the same rule structure most form plugins use (field value → recipient address) Shortcode parity — the [xtreme_forms id="X"] shortcode drops into any page that was using [wpforms id="X"], [contact-form-7], [gravityform id="X"], etc., so you don’t have to touch every theme template No vendor lock-in — your leads, forms, and audit log live in your own WordPress database, exportable as JSON at any time Core Features (Free) Drag-and-drop Form Builder — text, email, phone, select, checkbox, radio, textarea, date, file, hidden fields with per-field conditional logic Lead Inbox — searchable, filterable lead list with status management (new, read, contacted, converted, archived, spam) Email Notifications — route notifications to different recipients based on form field values Auto-Responder — send a branded confirmation email to the lead on submission Email Templates — reusable templates with merge tags ({{first_name}}, {{form_name}}, etc.) Webhooks — fire HTTP POST payloads to external URLs on lead capture with delivery logging Analytics Dashboard — submission trends, conversion rates, top forms, lead source breakdown UTM Tracking — automatically capture and store UTM parameters with each lead Duplicate Detection — configurable duplicate suppression by email/phone within a time window Spam Protection — honeypot, time-gate, reCAPTCHA v3, and keyword blocklist GDPR Tools — consent checkbox, right-to-erasure helper, configurable data retention (tools to support your own GDPR workflow; the plugin does not guarantee legal compliance) Activity Timeline — per-lead event history (submitted, emailed, status changes, notes) Notes — add internal notes to any lead Tags — tag and filter leads with custom labels Audit Log — append-only log of all admin actions Import / Export — full JSON round-trip export and import Multisite Support — per-site tables, network-aware activation Gutenberg Block — embed any form with the Xtreme Forms block (live editor preview) Shortcode — [xtreme_forms id="X"] works everywhere Optional Pro Add-On An optional paid add-on is sold separately by the author. It is not required for any feature listed above and is not bundled with this plugin. Plugin page (overview + demo): xtremeplugins.com/plugins/xtreme-forms Full feature list: xtremeplugins.com/plugins/xtreme-forms#features Pricing & plans: xtremeplugins.com/plugins/xtreme-forms/pricing What the Pro add-on adds on top of the free download: Priority routing rules with complex AND/OR conditions Webhook retry queue with exponential backoff Advanced analytics: cohort analysis, lead value tracking Priority email support from the developer External services Xtreme Forms is fully self-hosted by default. It only contacts third-party services when a site administrator explicitly enables and configures the corresponding feature. Each service below is opt-in: nothing is sent until you turn it on and provide credentials. Google reCAPTCHA v3 (optional spam protection) If you enable reCAPTCHA v3 in Xtreme Forms → Settings → Spam Protection and enter your site/secret keys, the public-facing form page loads the reCAPTCHA JavaScript from https://www.google.com/recaptcha/api.js, which executes in the visitor’s browser to generate a token. On submit, the plugin then sends a server-to-server request from your site to https://www.google.com/recaptcha/api/siteverify containing the token, your secret key, and the visitor’s IP address so Google can return a spam score. Service provider: Google LLC. Terms of service: https://policies.google.com/terms Privacy policy: https://policies.google.com/privacy reCAPTCHA-specific terms: https://www.google.com/recaptcha/about/ Cloudflare Turnstile (optional spam protection) If you enable Cloudflare Turnstile in Xtreme Forms → Settings → Spam Protection and enter your site/secret keys, the public-facing form page loads the Turnstile widget from https://challenges.cloudflare.com/turnstile/v0/api.js. On submit, the plugin sends a server-to-server request from your site to https://challenges.cloudflare.com/turnstile/v0/siteverify containing the widget token, your secret key, and the visitor’s IP address so Cloudflare can validate the challenge. Service provider: Cloudflare, Inc. Terms of service: https://www.cloudflare.com/website-terms/ Privacy policy: https://www.cloudflare.com/privacypolicy/ Zoho CRM (optional integration) If you enable the Zoho integration in Xtreme Forms → Automations → Integrations and enter your OAuth client ID, client secret, refresh token, and data-center region, then for every new lead capture the plugin makes two server-to-server requests from your site to Zoho: A token exchange request to https://accounts.zoho. /oauth/v2/token (where is com, eu, in, au, or jp based on the region you select) containing your refresh token, client ID, and client secret. A lead-create request to https://www.zohoapis. /crm/v2/Leads containing the lead’s name, email address, phone number, and company name (only the fields that were submitted in the form). Service provider: Zoho Corporation Pvt. Ltd. Terms of service: https://www.zoho.com/terms.html Privacy policy: https://www.zoho.com/privacy.html HubSpot CRM (optional integration) If you enable the HubSpot integration in Xtreme Forms → Automations → Integrations and enter a Private App access token, then for every new lead capture the plugin makes a server-to-server request from your site to https://api.hubapi.com/crm/v3/objects/contacts containing the lead’s email, first/last name, phone number, and company name (only the fields that were submitted in the form). When you click the Test button on the integrations page, the plugin also sends a single GET request to the same host to verify the token. Service provider: HubSpot, Inc. Terms of service: https://legal.hubspot.com/terms-of-service Privacy policy: https://legal.hubspot.com/privacy-policy Salesforce (optional integration) If you enable the Salesforce integration in Xtreme Forms → Automations → Integrations and enter your consumer key, consumer secret, instance URL, and access token, then for every new lead capture the plugin makes a server-to-server request from your site to /services/data/v57.0/sobjects/Lead/ containing the lead’s last name, email, phone number, and company name (only the fields that were submitted in the form). Service provider: Salesforce, Inc. Terms of service: https://www.salesforce.com/company/legal/agreements/ Privacy policy: https://www.salesforce.com/company/privacy/ Pipedrive (optional integration) If you enable the Pipedrive integration in Xtreme Forms → Automations → Integrations and enter an API token, then for every new lead capture the plugin makes two server-to-server requests from your site to https://api.pipedrive.com/v1/persons and https://api.pipedrive.com/v1/leads containing the lead’s name, email, and phone number (only the fields that were submitted in the form). The Test button sends one GET request to https://api.pipedrive.com/v1/users/me to verify the token. Service provider: Pipedrive OÜ. Terms of service: https://www.pipedrive.com/en/terms-of-service Privacy policy: https://www.pipedrive.com/en/privacy LeadPerfection (optional integration) If you enable the LeadPerfection integration in Xtreme Forms → Automations → Integrations and enter your LeadPerfection webhook URL (a https:// .leadperfection.com/batch/addleads.asp address), Sender name and Source Sub ID, then for every new lead capture the plugin makes one server-to-server URL-encoded POST from your site to that URL containing the lead’s name, phone, email, address, city, state, ZIP and a notes summary of the submitted fields. The Test button sends one sample lead (marked “TEST”) to the same URL to verify connectivity. The webhook URL is your own LeadPerfection account endpoint; no data is sent unless you enable and configure the integration. Service provider: RJR Technology, LLC (LeadPerfection). Website: https://www.leadperfection.com/ Privacy policy: https://www.leadperfection.com/privacy-policy/ Webhooks (optional, user-defined destination) If you create one or more webhooks in Xtreme Forms → Automations → Webhooks, the plugin will send the captured lead’s data as a JSON POST request to the URL(s) you configure for every new lead. These URLs are arbitrary endpoints that you (the site administrator) choose; the plugin itself is not affiliated with any particular webhook destination. Review the terms/privacy policy of whichever service you point your webhooks to. Xtreme Plugins licensing API (optional, only for the paid Pro add-on) The free Xtreme Forms plugin on WordPress.org is fully functional with no license required. A separately-sold Pro add-on is available from xtremeplugins.com; if (and only if) a site administrator chooses to buy it, the free plugin includes a “License” tab under Xtreme Forms → Settings → License that activates the Pro key. The licensing API is only contacted when the administrator actively clicks a button on that tab: Clicking Activate sends a server-to-server POST from your site to https://xtremeplugins.com/api/v1/license/activate containing the license key the admin entered and your site URL (home_url()), so the licensing server can validate the key and bind a seat to this site. Clicking Deactivate sends a server-to-server POST from your site to https://xtremeplugins.com/api/v1/license/deactivate containing the same two values, so the licensing server can release the seat. No request is ever made on form submissions, page loads, or in the background — the endpoints are only hit on the two explicit button clicks above, and only after an administrator has typed in a license key. If you never use the License tab, the plugin never contacts xtremeplugins.com. The endpoint URLs can be overridden (for example to point at a self-hosted licensing server or a staging environment) via the xtremeforms_license_activate_url and xtremeforms_license_deactivate_url filters. Service provider: XtremePlugins (xtremeplugins.com). Terms of service: https://xtremeplugins.com/terms Privacy policy: https://xtremeplugins.com/privacy
