76
MW WP Form
Reliable Japanese workflows currently marred by critical security scares.
HealthyGrowing
76/100
This Japanese staple offers great confirmation flows but suffers from critical security flaws and usability bugs.
Active installs
~250,000
our estimate · wp.org shows 200k+
Rating
4.2★
23 ratings
Trend · vs a year ago
+439%
Growing fast
70 → 375 installs/day
Downloads over time
real new installs per day · release spikes shown separately from the trend2025-04-302025-08-082025-11-162026-02-232026-06-03
organicrelease spikerelease tailorganic trend · 14d rolling median
Growing fast · +439% in the last year
70/day a year ago→375/day today
Reviews
what people actually sayMW WP Form is a well-regarded Japanese-market WordPress form plugin valued for its confirmation/completion screen flow and flexibility, but it carries a serious unpatched security vulnerability and some notable usability rough edges.
What people like
- +Widely used and trusted for client work, including bulk deployment across many sites×3
- +Praised for its confirmation and completion screen flow, which sets it apart from alternatives like Contact Form 7×2
- +Considered beginner-friendly and easy to use×2
- +Supports add-ons for visual editing and fine-grained customization
Common complaints
- −Critical Arbitrary File Move vulnerability (CVE-2026-4347) allowing unauthenticated site takeover and remote code execution; fixed in versions 5.1.1 and 5.1.2 — users must update immediately (since 5.1.1)
- −Japanese language files were removed in a new version, breaking localization for Japanese users
- −Complex configuration with quirky behavior around page transitions and URL settings, leading to wasted time for some users
- −No reliable export/backup path for forms — rebuilding from scratch required after server migration
- −Confirmation and completion pages appear in site search results with no clear way to hide them
- −Plugin reportedly cannot be deleted once installed
Review trustMostly organic
- 4.39★Verified rating — holds steady vs the raw 4.20★
- 22%One-shot reviewers — most reviewers are active community members
- past spikeReview timing — up to 50% of all reviews landed in a single month
Reviews per month · 5★ vs lower
2023-10-182025-02-092026-06-04
5★ reviews1–4★ reviews
All-time ratings · 23 total
Latest reviews · 23 analyzed
- 2026-04-08★★★★★Arbitrary File Move vulnerability in MW WP Formtheguysnews1-shot
- 2023-09-23★★★★★You can't delete the pluginseaj1one
- 2021-01-08★★★★★日本語の言語ファイルが消えていますrei15
- 2018-09-17★★★★★PHP5.3に非対応ikaneko1-shot
- 2018-09-11★★★★★4.0.3アップデートでエラーichaing1-shot
- 2018-09-11★★★★★4.0.3アップデート後shinzo351-shot
- 2018-09-01★★★★★awesome!childsview
- 2018-07-26★★★★★Awesome pluginYutaro Ikeda
- 2017-12-07★★★★★Great!!kutsu
- 2017-09-26★★★★★So cool!tomy1016
Releases
recent versions from WordPress.org SVNAlternatives to MW WP Form
Top Forms plugins, ranked by score.For developers & the curious
the raw signals behind the grade — none of this is on the friendly summary aboveDownload signals
Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.
561
Baseline · median of last 7 organic days
283
Prior 7-day baseline
423
Floor · 25th percentile over 14 days
7,108
Mean release-day peak (30d)
677
Latest day · 2026-06-03(tail)
+98.2%
Week-over-week organic trend
Review signals
Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.
50%
Max month share · biggest single 30-day window
3.94
Distribution CV · <0.6 even, >1.5 bursty
70%
5★ share in analyzed sample
22%
Solo reviewers · only this one wp.org activity
—
Volume velocity · last 6mo vs prior 6mo
4.22 → 4.39★
Sample avg · raw → solo-filtered