/ Plugin Category

/ Forms & Data Collection

/ Contact Forms

/ MW WP Form

MW WP Form

By Webã®ç¸è«æ

Forms & Data Collection / Contact Forms

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

MW WP Form Review - In-Depth Analysis

MW WP Form is a shortcode-based contact form plugin with various features. It allows for multiple validation rules, inquiry data saving, and more.

Performance Overview

WPS Score

6.77/10

User Rating

4.2/5 (based on 23+ reviews)

Active Installations

200,000+

Update Frequency

Outstanding It is calculated using the weighted average of same category plugins.

Security Score

7.17 / 10 (High Risk) It is calculated using the weighted average of all versions.

What It Does

MW WP Form is a versatile contact form plugin that utilizes shortcodes for easy form creation. You can create mail forms with a confirmation screen, enhancing user experience.

This plugin supports various features such as using a confirmation page, changing URLs, and implementing multiple validation rules. Additionally, it allows for saving inquiry data, which can be displayed in charts.

For more information, visit the official site or explore the GitHub repository for updates and contributions.

Comparing to Alternatives

MW WP Form competes in a crowded field of WordPress form builders, most of which offer more active development, wider integrations, and stronger security track records. Compared to mainstream options like Contact Form 7 or WPForms, MW WP Form feels niche, with a smaller install base and a history that demands extra scrutiny before adoption.

Top alternatives

Strengths

Popular in Japanese-language WordPress installs with dedicated user base
Free and fully functional without upsells or paywalls
Straightforward form creation workflow for basic contact use cases
Active recent patching once vulnerabilities are reported

Weaknesses

Long history of serious vulnerabilities, including several high-severity file upload/move and XSS issues
Slower or unclear initial communication on security disclosures per user reports
Smaller community and less frequent feature updates than major alternatives
Localization files have reportedly disappeared in past updates

User Sentiment Analysis

With a 4.2/5 average from 23 ratings, sentiment leans positive overall, with nearly 70% of reviewers giving 5 stars. However, a notable 13% left 1-star reviews, and several mid-range reviews reference update-related bugs and security concerns, adding nuance to the otherwise favorable score.

Positive highlights

"Very useful form. We installed this plugin over hundred for client sites" — childsview
Praised by theguysnews (3★) for the developer's "prompt release of the security fixes" despite initial friction
Long-standing reliability noted by users who deploy it repeatedly across multiple client sites

Common complaints

Japanese language files (.mo/.po) disappeared after an update, breaking the admin interface language for some users
Plugin could not be deleted/uninstalled when a user wanted to remove it

Weaknesses

A very high number of known vulnerabilities (12) including multiple high-severity unauthenticated file upload/move and XSS flaws
Security risk score of 6.97/10 signals a concerning historical pattern rather than an isolated incident
Update-related breakage reported by multiple users, including PHP compatibility issues and admin errors post-update

Who Should Use This?

Best for

Site owners already familiar with MW WP Form, particularly in Japanese-language WordPress environments, who need basic form functionality and are committed to promptly applying every security update. It suits users comfortable monitoring vulnerability disclosures closely.

Not ideal for

Not recommended for security-conscious users or agencies managing many sites, given the extensive history of high-severity vulnerabilities including unauthenticated file upload and move flaws. Anyone wanting a low-maintenance, well-supported form builder should look elsewhere.

Pricing & Value

Free version includes

The plugin is entirely free, providing form building, submission handling, and basic customization without any locked premium tier.

Final Verdict

MW WP Form retains a loyal following and a respectable overall rating, but its security record is hard to ignore: 12 known vulnerabilities, several rated high severity, including unauthenticated arbitrary file upload and move issues that could lead to full site compromise. While the developer has consistently released fixes, the sheer frequency of serious flaws over recent years is a red flag for any security-conscious site owner.

Given the abundance of actively maintained, widely-used alternatives like WPForms, Fluent Forms, and Contact Form 7, most users would be better served switching to a plugin with a cleaner security history and broader community support. MW WP Form may still suit a narrow audience with existing familiarity and a strong patching discipline, but it is not a plugin to recommend broadly today.