Description

Rooted Forms is built for speed, reliability, and professional delivery:

Add lead forms with the [rooted_form] shortcode (legacy [leadflow_form] is also supported)
Capture name, email, phone, and message in a secure database table
Send email and webhook notifications
Built-in spam trap + nonce checks for safe submissions
Signed timing checks, rate limiting, and duplicate submission protection
Optional IP anonymization and configurable data retention
Export submissions to CSV
Clean admin dashboard and settings
Searchable Lead Inbox with lead details, statuses, filtering, and bulk actions
Visual builder for unlimited reusable forms and included custom fields
Optimized for accessibility and responsive layouts

Use it as a free starter lead engine and upgrade to Rooted Forms Pro for:

Built-in SMTP delivery, test emails, and recent delivery logs
Private follow-up notes on lead detail screens
Email and domain blocklists with privacy-conscious security logs

Privacy

Rooted Forms stores information submitted through forms, the source URL, submission time, and limited technical metadata. IP anonymization is enabled by default. Site owners control notification providers, webhook destinations, and retention settings.

Installation

Upload the rooted-forms folder to /wp-content/plugins/, or upload the Rooted Forms Free ZIP from Plugins > Add Plugin > Upload Plugin.
Activate Rooted Forms in the WordPress Plugins screen.
Add the form by inserting [rooted_form] (or [leadflow_form] for legacy installs) on a page or post.
Open Rooted Forms > Dashboard to see submissions.
Configure optional webhook/email settings under Rooted Forms > Settings.

FAQ

Does Rooted Forms work with any theme?: Yes. The plugin ships with style overrides that are responsive and neutral by default.
Can I customize the form?: Yes, via shortcode attributes such as title, submit_label, and id.
Is there a Pro version?: Yes. The Pro version is sold separately and adds authenticated SMTP delivery, delivery logs, private lead notes, and advanced security controls. Free includes unlimited forms and custom fields.
Does Rooted Forms support WordPress privacy tools?: Yes. Lead submissions can be exported or erased by email address under the WordPress personal data tools.
What happens when Rooted Forms is deleted?: Data is preserved by default. Administrators can explicitly enable complete uninstall cleanup under Rooted Forms Settings before deleting the Free plugin.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“Rooted Forms” is open source software. The following people have contributed to this plugin.

bigdawgdad2185

Translate “Rooted Forms” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

1.5.12

Made the included form builder fully functional with unlimited forms and custom fields.
Moved admin and form-builder JavaScript to a properly enqueued asset.
Corrected late URL escaping for the rendered source URL field.
Limited Free-plugin uninstall cleanup to data owned by the Free plugin.

1.5.11

Added separate customer-facing text for checkbox fields in the Pro form builder.
Prevented checkbox labels from being displayed twice on public forms.

1.5.10

Hid the success message until a form is submitted and removed the empty message gap below forms.

1.5.9

Fixed submissions for forms embedded by theme templates, widgets, and Customizer shortcode settings.
Added a visible connection error instead of leaving the submit button unresponsive when form data is unavailable.

1.5.8

Fixed the Settings save action so it returns to the settings screen with confirmation instead of displaying a blank page.

1.5.7

Completed the remaining WordPress.org internationalization and filesystem compliance cleanup.
Prevented theme styles from exposing the hidden anti-spam honeypot field.

1.5.6

Prepared the Free plugin for WordPress.org review by separating all Pro licensing code.
Standardized the install folder, main file, and translation domain as rooted-forms.
Limited submission processing to Rooted Forms fields and improved release metadata.
Fixed Lead Inbox links, filters, redirects, and detail navigation to use the registered WordPress admin route.
Added a compatibility route for links generated by Rooted Forms and Rooted Forms Pro 1.5.3.
Aligned the public readme with the Pro features currently available.

1.5.2

Aligned release metadata with the tested plugin version.
Hardened the installable plugin folder and include loading for customer testing.
Hardened include loading and completed Rooted Forms class-name compatibility updates.
Verified activation, form submission, Lead Inbox capture, and notification handoff on a clean WordPress installation.

1.5.0

Added WordPress personal data export and erasure integration.
Added suggested privacy-policy content and opt-in uninstall cleanup.
Updated WordPress compatibility metadata for the 7.0 release line.

1.4.0

Added a visual multi-form builder with field ordering and required-field controls.
Added the initial extensible form-builder architecture.

1.3.1

Display the specific server validation message for blocked and duplicate submissions.

1.3.0

Added signed submission timing checks and salted-IP rate limiting.
Added duplicate submission protection and Pro security extension hooks.
Added IP anonymization and optional scheduled lead retention cleanup.

1.2.0

Added the Lead Inbox with detail views, sales statuses, search, filters, and pagination.
Added secure single and bulk status changes and permanent deletion.
Added a Pro extension point for private lead notes.

1.1.0

Added stricter browser and server-side phone validation.
Added standard WordPress mail handoff status.
Added integration hooks for the separate Rooted Forms Pro SMTP add-on.

1.0.0

Initial release: lead capture shortcode, admin dashboard, settings, CSV export, and webhook/email pipeline.