Free WP contact form plugin with drag-and-drop form builder, lead inbox, email routing, webhooks &amp; analytics. Lightweight WPForms alternative.

Xtreme Forms – WP Contact Form Builder, Lead Capture, Form to Email & Webhooks

Xtreme Forms is a modern, drag-and-drop contact form and lead capture plugin for WordPress. Build any form you need — contact forms, quote requests, event registrations, newsletter signups, multi-step lead qualification — then capture every submission into a built-in lead inbox, route email notifications to the right person, fire webhooks to your CRM, and track conversions on a clean analytics dashboard.
No upsells. No &#8220;Pro-only&#8221; features hidden inside the free download. Every feature listed below ships in the free plugin and is fully functional out of the box. The optional Pro add-on (sold separately at xtremeplugins.com) only adds advanced routing rules, retry queues, and extended analytics — it never gates or limits any feature you see on this page.
<h4>Useful Links</h4>
<ul>
<li>Plugin homepage: <a href="https://xtremeplugins.com/plugins/xtreme-forms" rel="nofollow ugc">https://xtremeplugins.com/plugins/xtreme-forms</a> — overview, screenshots, live demo</li>
<li>Features: <a href="https://xtremeplugins.com/plugins/xtreme-forms#features" rel="nofollow ugc">https://xtremeplugins.com/plugins/xtreme-forms#features</a> — full feature breakdown with comparison vs other form plugins</li>
<li>Pricing: <a href="https://xtremeplugins.com/plugins/xtreme-forms/pricing" rel="nofollow ugc">https://xtremeplugins.com/plugins/xtreme-forms/pricing</a> — Pro add-on plans (free plugin stays free forever)</li>
<li>Support: the <a href="https://wordpress.org/support/plugin/xtreme-forms/" rel="ugc">WordPress.org support forum</a> for free-version questions; Pro subscribers get priority support at xtremeplugins.com</li>
<li>Source / issues: <a href="https://github.com/Xtreme-Plugins/xtreme-forms" rel="nofollow ugc">GitHub</a></li>
</ul>
<h4>Why Xtreme Forms?</h4>
If you&#8217;ve used the other popular form plugins (WPForms, Contact Form 7, Gravity Forms, Ninja Forms, Formidable Forms) you already know the trade-offs: free versions lock the features you actually need behind a Pro upgrade, the lighter ones don&#8217;t manage your leads after the email is sent, and the heavier ones drag down page speed with bloated assets. Xtreme Forms is built differently:
<ul>
<li>Real lead management, not just form-to-email. Every submission lands in a searchable, filterable inbox with a full status workflow (new → read → contacted → converted), per-lead notes, tags, assignment to team members, and an append-only audit log. Treat your leads like a pipeline, not like inbox clutter.</li>
<li>Everything in the free download is actually free. Drag-and-drop builder, conditional logic, webhooks, analytics, GDPR tools, multisite, audit log, JSON import/export — no popup nag screens, no &#8220;upgrade to Pro&#8221; overlay on settings pages.</li>
<li>Lightweight on the page. No jQuery dependency on the frontend, no third-party font request, no external service call unless you explicitly enable and configure one.</li>
<li>Modern WordPress stack. Tested up to WordPress 7.0, requires PHP 8.1+, ships a native Gutenberg block alongside the classic shortcode, and works inside any block-theme template / Elementor / Bricks / Beaver Builder widget that accepts shortcodes.</li>
<li>WordPress.org-compliant. Fully GPL, no obfuscated code, no telemetry, no auto-update side-channels, and every external-service touchpoint is disclosed below.</li>
</ul>
A solid free alternative to WPForms for site owners who want lead management built in, not an afterthought.
<h4>Built-in Form Templates</h4>
Skip the blank canvas. Xtreme Forms ships ready-to-go templates for the forms you actually need:
<ul>
<li>Simple Contact Form — name, email, message — the classic WordPress contact form</li>
<li>Quote Request Form — name, email, phone, project description, budget range</li>
<li>Event Registration Form — full name, email, phone, company, attendee count, date picker</li>
<li>Newsletter Signup Form — name, email, GDPR consent</li>
<li>Multi-step Lead Qualification Form — built using the conditional-logic engine</li>
<li>Booking / appointment request form — fully customizable in the drag-and-drop form builder</li>
</ul>
<h4>Works With Your Page Builder</h4>
The <code>[xtreme_forms id="X"]</code> shortcode and the native Gutenberg block work inside every WordPress page builder and block theme:
<ul>
<li>Elementor — drop the shortcode in the Shortcode widget, or use the Gutenberg block in Elementor Pro&#8217;s container element</li>
<li>Bricks Builder — works via shortcode element</li>
<li>Beaver Builder — works via the Text/HTML or Shortcode module</li>
<li>Divi — works in any Text or Code module via shortcode</li>
<li>Oxygen Builder — works via shortcode element</li>
<li>WPBakery Page Builder — works via the Raw HTML / Shortcode element</li>
<li>Block-based themes (Twenty Twenty-Four, Twenty Twenty-Five, Frost, Blockbase) — native Gutenberg block with live preview</li>
<li>Classic editor — paste the shortcode anywhere</li>
</ul>
<h4>Switching From Another WordPress Form Plugin?</h4>
If you&#8217;re moving away from a heavier or upsell-driven WordPress contact form plugin — WPForms, Contact Form 7, Gravity Forms, Ninja Forms, Formidable Forms, Forminator, Fluent Forms, Everest Forms, or Happyforms — Xtreme Forms makes the transition straightforward:
<ul>
<li>Rebuild forms in minutes using the drag-and-drop builder + the six ready-made templates above</li>
<li>Bring existing leads with you via the JSON import endpoint — map your old plugin&#8217;s CSV/JSON export to the Xtreme Forms lead schema</li>
<li>Keep your email recipients and routing rules — Xtreme Forms&#8217;s email-routing engine accepts the same rule structure most form plugins use (field value → recipient address)</li>
<li>Shortcode parity — the <code>[xtreme_forms id="X"]</code> shortcode drops into any page that was using <code>[wpforms id="X"]</code>, <code>[contact-form-7]</code>, <code>[gravityform id="X"]</code>, etc., so you don&#8217;t have to touch every theme template</li>
<li>No vendor lock-in — your leads, forms, and audit log live in your own WordPress database, exportable as JSON at any time</li>
</ul>
<h4>Core Features (Free)</h4>
<ul>
<li>Drag-and-drop Form Builder — text, email, phone, select, checkbox, radio, textarea, date, file, hidden fields with per-field conditional logic</li>
<li>Lead Inbox — searchable, filterable lead list with status management (new, read, contacted, converted, archived, spam)</li>
<li>Email Notifications — route notifications to different recipients based on form field values</li>
<li>Auto-Responder — send a branded confirmation email to the lead on submission</li>
<li>Email Templates — reusable templates with merge tags ({{first_name}}, {{form_name}}, etc.)</li>
<li>Webhooks — fire HTTP POST payloads to external URLs on lead capture with delivery logging</li>
<li>Analytics Dashboard — submission trends, conversion rates, top forms, lead source breakdown</li>
<li>UTM Tracking — automatically capture and store UTM parameters with each lead</li>
<li>Duplicate Detection — configurable duplicate suppression by email/phone within a time window</li>
<li>Spam Protection — honeypot, time-gate, reCAPTCHA v3, and keyword blocklist</li>
<li>GDPR Tools — consent checkbox, right-to-erasure helper, configurable data retention (tools to support your own GDPR workflow; the plugin does not guarantee legal compliance)</li>
<li>Activity Timeline — per-lead event history (submitted, emailed, status changes, notes)</li>
<li>Notes — add internal notes to any lead</li>
<li>Tags — tag and filter leads with custom labels</li>
<li>Audit Log — append-only log of all admin actions</li>
<li>Import / Export — full JSON round-trip export and import</li>
<li>Multisite Support — per-site tables, network-aware activation</li>
<li>Gutenberg Block — embed any form with the Xtreme Forms block (live editor preview)</li>
<li>Shortcode — <code>[xtreme_forms id="X"]</code> works everywhere</li>
</ul>
<h4>Optional Pro Add-On</h4>
An optional paid add-on is sold separately by the author. It is not required for any feature listed above and is not bundled with this plugin.
<ul>
<li>Plugin page (overview + demo): <a href="https://xtremeplugins.com/plugins/xtreme-forms" rel="nofollow ugc">xtremeplugins.com/plugins/xtreme-forms</a></li>
<li>Full feature list: <a href="https://xtremeplugins.com/plugins/xtreme-forms#features" rel="nofollow ugc">xtremeplugins.com/plugins/xtreme-forms#features</a></li>
<li>Pricing &amp; plans: <a href="https://xtremeplugins.com/plugins/xtreme-forms/pricing" rel="nofollow ugc">xtremeplugins.com/plugins/xtreme-forms/pricing</a></li>
</ul>
What the Pro add-on adds on top of the free download:
<ul>
<li>Priority routing rules with complex AND/OR conditions</li>
<li>Webhook retry queue with exponential backoff</li>
<li>Advanced analytics: cohort analysis, lead value tracking</li>
<li>Priority email support from the developer</li>
</ul>
<h3>External services</h3>
Xtreme Forms is fully self-hosted by default. It only contacts third-party services when a site administrator explicitly enables and configures the corresponding feature. Each service below is opt-in: nothing is sent until you turn it on and provide credentials.
<h4>Google reCAPTCHA v3 (optional spam protection)</h4>
If you enable reCAPTCHA v3 in Xtreme Forms → Settings → Spam Protection and enter your site/secret keys, the public-facing form page loads the reCAPTCHA JavaScript from <code>https://www.google.com/recaptcha/api.js</code>, which executes in the visitor&#8217;s browser to generate a token. On submit, the plugin then sends a server-to-server request from your site to <code>https://www.google.com/recaptcha/api/siteverify</code> containing the token, your secret key, and the visitor&#8217;s IP address so Google can return a spam score.
Service provider: Google LLC. 
Terms of service: https://policies.google.com/terms 
Privacy policy: https://policies.google.com/privacy 
reCAPTCHA-specific terms: https://www.google.com/recaptcha/about/
<h4>Cloudflare Turnstile (optional spam protection)</h4>
If you enable Cloudflare Turnstile in Xtreme Forms → Settings → Spam Protection and enter your site/secret keys, the public-facing form page loads the Turnstile widget from <code>https://challenges.cloudflare.com/turnstile/v0/api.js</code>. On submit, the plugin sends a server-to-server request from your site to <code>https://challenges.cloudflare.com/turnstile/v0/siteverify</code> containing the widget token, your secret key, and the visitor&#8217;s IP address so Cloudflare can validate the challenge.
Service provider: Cloudflare, Inc. 
Terms of service: https://www.cloudflare.com/website-terms/ 
Privacy policy: https://www.cloudflare.com/privacypolicy/
<h4>Zoho CRM (optional integration)</h4>
If you enable the Zoho integration in Xtreme Forms → Automations → Integrations and enter your OAuth client ID, client secret, refresh token, and data-center region, then for every new lead capture the plugin makes two server-to-server requests from your site to Zoho:
<ol>
<li>A token exchange request to <code>https://accounts.zoho.&lt;tld&gt;/oauth/v2/token</code> (where <code>&lt;tld&gt;</code> is <code>com</code>, <code>eu</code>, <code>in</code>, <code>au</code>, or <code>jp</code> based on the region you select) containing your refresh token, client ID, and client secret.</li>
<li>A lead-create request to <code>https://www.zohoapis.&lt;tld&gt;/crm/v2/Leads</code> containing the lead&#8217;s name, email address, phone number, and company name (only the fields that were submitted in the form).</li>
</ol>
Service provider: Zoho Corporation Pvt. Ltd. 
Terms of service: https://www.zoho.com/terms.html 
Privacy policy: https://www.zoho.com/privacy.html
<h4>HubSpot CRM (optional integration)</h4>
If you enable the HubSpot integration in Xtreme Forms → Automations → Integrations and enter a Private App access token, then for every new lead capture the plugin makes a server-to-server request from your site to <code>https://api.hubapi.com/crm/v3/objects/contacts</code> containing the lead&#8217;s email, first/last name, phone number, and company name (only the fields that were submitted in the form). When you click the Test button on the integrations page, the plugin also sends a single <code>GET</code> request to the same host to verify the token.
Service provider: HubSpot, Inc. 
Terms of service: https://legal.hubspot.com/terms-of-service 
Privacy policy: https://legal.hubspot.com/privacy-policy
<h4>Salesforce (optional integration)</h4>
If you enable the Salesforce integration in Xtreme Forms → Automations → Integrations and enter your consumer key, consumer secret, instance URL, and access token, then for every new lead capture the plugin makes a server-to-server request from your site to <code>&lt;your_instance_url&gt;/services/data/v57.0/sobjects/Lead/</code> containing the lead&#8217;s last name, email, phone number, and company name (only the fields that were submitted in the form).
Service provider: Salesforce, Inc. 
Terms of service: https://www.salesforce.com/company/legal/agreements/ 
Privacy policy: https://www.salesforce.com/company/privacy/
<h4>Pipedrive (optional integration)</h4>
If you enable the Pipedrive integration in Xtreme Forms → Automations → Integrations and enter an API token, then for every new lead capture the plugin makes two server-to-server requests from your site to <code>https://api.pipedrive.com/v1/persons</code> and <code>https://api.pipedrive.com/v1/leads</code> containing the lead&#8217;s name, email, and phone number (only the fields that were submitted in the form). The Test button sends one <code>GET</code> request to <code>https://api.pipedrive.com/v1/users/me</code> to verify the token.
Service provider: Pipedrive OÜ. 
Terms of service: https://www.pipedrive.com/en/terms-of-service 
Privacy policy: https://www.pipedrive.com/en/privacy
<h4>LeadPerfection (optional integration)</h4>
If you enable the LeadPerfection integration in Xtreme Forms → Automations → Integrations and enter your LeadPerfection webhook URL (a <code>https://&lt;your-id&gt;.leadperfection.com/batch/addleads.asp</code> address), Sender name and Source Sub ID, then for every new lead capture the plugin makes one server-to-server URL-encoded <code>POST</code> from your site to that URL containing the lead&#8217;s name, phone, email, address, city, state, ZIP and a notes summary of the submitted fields. The Test button sends one sample lead (marked &#8220;TEST&#8221;) to the same URL to verify connectivity. The webhook URL is your own LeadPerfection account endpoint; no data is sent unless you enable and configure the integration.
Service provider: RJR Technology, LLC (LeadPerfection). 
Website: https://www.leadperfection.com/ 
Privacy policy: https://www.leadperfection.com/privacy-policy/
<h4>Webhooks (optional, user-defined destination)</h4>
If you create one or more webhooks in Xtreme Forms → Automations → Webhooks, the plugin will send the captured lead&#8217;s data as a JSON <code>POST</code> request to the URL(s) you configure for every new lead. These URLs are arbitrary endpoints that you (the site administrator) choose; the plugin itself is not affiliated with any particular webhook destination. Review the terms/privacy policy of whichever service you point your webhooks to.
<h4>Xtreme Plugins licensing API (optional, only for the paid Pro add-on)</h4>
The free Xtreme Forms plugin on WordPress.org is fully functional with no license required. A separately-sold Pro add-on is available from xtremeplugins.com; if (and only if) a site administrator chooses to buy it, the free plugin includes a &#8220;License&#8221; tab under Xtreme Forms → Settings → License that activates the Pro key.
The licensing API is only contacted when the administrator actively clicks a button on that tab:
<ol>
<li>Clicking Activate sends a server-to-server <code>POST</code> from your site to <code>https://xtremeplugins.com/api/v1/license/activate</code> containing the license key the admin entered and your site URL (<code>home_url()</code>), so the licensing server can validate the key and bind a seat to this site.</li>
<li>Clicking Deactivate sends a server-to-server <code>POST</code> from your site to <code>https://xtremeplugins.com/api/v1/license/deactivate</code> containing the same two values, so the licensing server can release the seat.</li>
</ol>
No request is ever made on form submissions, page loads, or in the background — the endpoints are only hit on the two explicit button clicks above, and only after an administrator has typed in a license key. If you never use the License tab, the plugin never contacts xtremeplugins.com. The endpoint URLs can be overridden (for example to point at a self-hosted licensing server or a staging environment) via the <code>xtremeforms_license_activate_url</code> and <code>xtremeforms_license_deactivate_url</code> filters.
Service provider: XtremePlugins (xtremeplugins.com). 
Terms of service: https://xtremeplugins.com/terms 
Privacy policy: https://xtremeplugins.com/privacy

Alternative Plugins for

Discover the Lists with Xtreme Forms – WP Contact Form Builder, Lead Capture, Form to Email & Webhooks