Elzo Forms is a form builder for WordPress. You build a form in the admin, place one shortcode where the form should appear, and every submission is stored on your own site. No page builder, no account, and no external service is required to run a form.<\/p>\n\n
Use it for contact forms, request and quote forms, lead forms, application forms, feedback forms, file upload forms, and other everyday site forms.<\/p>\n\n
elzo-forms<\/code> directory in your theme.<\/li>\n- Hooks and filters for custom field types, validation, and submission handling.<\/li>\n
- Optional read-only JSON form sources, so a developer can ship forms with a theme or plugin and keep them under version control.<\/li>\n<\/ul>\n\n
Free and paid versions<\/h4>\n\n
Everything described above is included in this plugin. No field type, module, or setting is locked behind a purchase.<\/p>\n\n
Post-submission automations, including webhooks, conditional automation actions, and cookie actions, are part of Elzo Forms PRO, a separate commercial plugin available at https:\/\/elzoforms.com. Elzo Forms PRO replaces this plugin instead of extending it: while it is active, Elzo Forms (free) stops loading and can be deactivated.<\/p>\n\n
Privacy<\/h3>\n\n
Elzo Forms stores form submissions on your own site, in your WordPress database.<\/p>\n\n
For each submission the plugin stores the submitted field values, the time of submission, the visitor IP address and browser user agent, the WordPress user ID if the visitor is logged in, and the page the form was submitted from. Files uploaded through a file field are stored in your uploads directory under elzo-forms\/user-uploads<\/code>.<\/p>\n\nNone of this data leaves your site by default. It is shared with a third party only if you enable one of the optional anti-spam modules described below, and only in the way those sections describe.<\/p>\n\n
Elzo Forms does not add submission data to the WordPress personal data export and erasure tools. Submissions are managed from Forms > Submissions in the WordPress admin.<\/p>\n\n
Third-party Services<\/h3>\n\nGoogle reCAPTCHA v3<\/h4>\n\n
Elzo Forms includes an optional Google reCAPTCHA v3 module for spam protection. The module is disabled until a site administrator enables it and configures Google reCAPTCHA v3 site and secret keys.<\/p>\n\n
Service provider: Google LLC.<\/p>\n\n
When the module is enabled and a protected form with a configured site key is rendered, Elzo Forms loads the Google reCAPTCHA JavaScript API from:<\/p>\n\n
https:\/\/www.google.com\/recaptcha\/api.js\n<\/code><\/pre>\n\nBefore a protected form is submitted, the browser asks Google reCAPTCHA to generate a token for the form action. During submission, Elzo Forms sends the token, the configured secret key, and the visitor IP address to Google's verification endpoint:<\/p>\n\n
https:\/\/www.google.com\/recaptcha\/api\/siteverify\n<\/code><\/pre>\n\nGoogle may receive information required for reCAPTCHA risk analysis and verification, such as the site key, reCAPTCHA token, action name, visitor IP address, browser\/client information, and interaction signals. Elzo Forms uses the returned verification result, action, and score to decide whether the submission should be accepted or rejected as spam.<\/p>\n\n
If reCAPTCHA logging is enabled in the module settings, Elzo Forms may store the returned reCAPTCHA score in submission metadata and write verification pass\/fail messages to the site's PHP error log for debugging.<\/p>\n\n
Google reCAPTCHA is governed by Google's terms and privacy policy:<\/p>\n\n
\n- Terms: https:\/\/policies.google.com\/terms<\/li>\n
- Privacy Policy: https:\/\/policies.google.com\/privacy<\/li>\n
- reCAPTCHA documentation: https:\/\/developers.google.com\/recaptcha\/docs\/v3<\/li>\n<\/ul>\n\n
Akismet<\/h4>\n\n
Elzo Forms includes an optional Akismet module for spam protection. The module is disabled until a site administrator enables it and configures an Akismet API key.<\/p>\n\n
Service provider: Automattic Inc.<\/p>\n\n
Elzo Forms does not contact Akismet or send submission data to Automattic unless the Akismet module is enabled and configured with an API key. By enabling and configuring the Akismet module, the site administrator chooses to use Akismet as a third-party spam protection service.<\/p>\n\n
During submission, Elzo Forms sends contact-form spam check data to Akismet's comment-check endpoint:<\/p>\n\n
https:\/\/rest.akismet.com\/1.1\/comment-check\n<\/code><\/pre>\n\nAkismet may receive submitted text content, likely contact identity fields such as name, email address, or website URL when present, visitor IP address, browser user agent, referrer, form page URL, site URL, site language, and site character set. Elzo Forms uses the returned spam\/ham result to decide whether the submission should be accepted or marked as spam.<\/p>\n\n
If Akismet logging is enabled in the module settings, Elzo Forms may store the Akismet result and reason in submission metadata and write verification pass\/fail messages to the site's PHP error log for debugging.<\/p>\n\n
Site administrators should review Automattic's terms and privacy policy and update their own privacy policy or visitor notices as needed before enabling Akismet.<\/p>\n\n
Akismet is governed by Automattic's terms and privacy policy:<\/p>\n\n
\n- Terms: https:\/\/automattic.com\/terms\/<\/li>\n
- Privacy Policy: https:\/\/automattic.com\/privacy\/<\/li>\n
- Akismet documentation: https:\/\/akismet.com\/developers\/detailed-docs\/comment-check\/<\/li>\n<\/ul>\n\n
Support<\/h3>\n\n
For support, use the WordPress.org support forum for this plugin or visit https:\/\/elzoforms.com.<\/p>\n\n\n
\n- Install Elzo Forms from the WordPress.org plugin directory, or upload the
elzo-forms<\/code> folder to \/wp-content\/plugins\/<\/code>.<\/li>\n- Activate the plugin through the Plugins screen in WordPress.<\/li>\n
- Go to Forms > Add New in the WordPress admin.<\/li>\n
- Add fields, configure form settings, and publish the form.<\/li>\n
- Copy the shortcode, for example
[elzo_form id=\"123\"]<\/code>, into any post, page, or widget area that supports shortcodes.<\/li>\n<\/ol>\n\n\n\nHow do I display a form on my site?<\/h3><\/dt>\nAdd the form shortcode to a post, page, or shortcode-enabled widget area:<\/p>\n\n
[elzo_form id=\"123\"]\n<\/code><\/pre>\n\nYou can also pass layout options:<\/p>\n\n
[elzo_form id=\"123\" max_width=\"600px\" form_align=\"center\" text_align=\"left\"]\n<\/code><\/pre><\/dd>\nDoes it work with the block editor?<\/h3><\/dt>\nYes. Elzo Forms does not register its own block in this release, so add the form with the core Shortcode block, or paste [elzo_form id=\"123\"]<\/code> into any block that renders shortcodes. The same shortcode works in the classic editor, in widget areas, and in theme templates.<\/p><\/dd>\nWhere are submissions stored?<\/h3><\/dt>\nSubmissions are stored on your site as Elzo Forms submission records and can be opened from Forms > Submissions in the WordPress admin.<\/p><\/dd>\n
Can I receive email notifications?<\/h3><\/dt>\nYes. Enable email notifications in the form settings and configure the recipient address, subject, and message text.<\/p><\/dd>\n
Can visitors upload files?<\/h3><\/dt>\nYes. The file field supports upload size limits and a list of allowed file types, and it splits large uploads into chunks. Executable file types such as .php<\/code> and .phtml<\/code> are always rejected.<\/p><\/dd>\nDoes the plugin include conditional logic?<\/h3><\/dt>\nYes. Field visibility can depend on the values of other fields, on whether the visitor is logged in, and on the page the form is displayed on.<\/p><\/dd>\n
Is Google reCAPTCHA required?<\/h3><\/dt>\nNo. Google reCAPTCHA v3 is optional. Elzo Forms does not load the Google reCAPTCHA API or verify submissions with Google unless the reCAPTCHA module is enabled and configured with API keys.<\/p><\/dd>\n
Does the plugin send data to third-party services?<\/h3><\/dt>\nNo, not by default. Submissions are processed on your WordPress site. The optional anti-spam modules connect to their third-party services only after you enable and configure them. See the Third-party Services section for details.<\/p><\/dd>\n
Where does Elzo Forms store files?<\/h3><\/dt>\nAll generated files are stored below the site-specific directory returned by wp_upload_dir()<\/code>. Files uploaded through a form go to elzo-forms\/user-uploads<\/code>, and generated CSS goes to elzo-forms\/assets<\/code>.<\/p><\/dd>\nWhat happens when I delete the plugin?<\/h3><\/dt>\nYour forms, submissions, uploaded files, and settings are kept. Deleting Elzo Forms does not remove them, so you can reinstall the plugin without losing data. Remove the forms and submissions yourself first if you want the data gone.<\/p><\/dd>\n
Can developers customize the output?<\/h3><\/dt>\nYes. Themes can override plugin templates from a theme elzo-forms<\/code> directory, and WordPress hooks and filters cover custom field types, validation, and submission handling. A filter can also register read-only JSON form sources: Elzo Forms never creates or modifies those JSON files, it only reads forms from the paths a developer configures.<\/p><\/dd>\n\n<\/dl>\n\n\n1.0.0<\/h4>\n\n\n- Initial public release for WordPress.org.<\/li>\n
- Added the form builder, core field types, multi-step forms, AJAX and standard submissions, submissions storage, email notifications, redirects, file uploads, conditional field visibility, spam controls, optional Google reCAPTCHA v3 and Akismet protection, template overrides, and read-only JSON form sources.<\/li>\n<\/ul>","raw_excerpt":"Build contact and custom forms with a visual builder: multi-step, file uploads, conditional logic, email alerts, and spam protection.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/338921","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=338921"}],"author":[{"embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/elzoforms"}],"wp:attachment":[{"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=338921"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=338921"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=338921"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=338921"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=338921"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ko.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=338921"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}