Palette Form Builder
Palette Form Builder is a lightweight yet powerful WordPress plugin for creating beautiful multi-step (wizard-style) forms and questionnaires. Built with an object-oriented architecture and following WordPress.org…
Use with caution
Palette Form Builder works, but test it on a staging site before relying on it in 2026. Was last updated 3 months ago, and scores 49/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & supportDaily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Palette Form Builder stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| form | >100 |
| form builder | >100 |
| multi-step | >100 |
| persian | >100 |
| rtl | >100 |
About Palette Form Builder
From the official readme · v1.4.1Description
Palette Form Builder is a lightweight yet powerful WordPress plugin for creating beautiful multi-step (wizard-style) forms and questionnaires. Built with an object-oriented architecture and following WordPress.org Plugin Guidelines, it ships with a modern admin UI featuring drag & drop reordering, live preview, a visual type selector, and a color palette picker.
Key Features
- Multi-Step Forms — Break long forms into digestible steps with a progress bar and smooth transitions.
- Drag & Drop Builder — Reorder questions instantly with SortableJS. No page reloads required.
- Live Preview — See exactly how your form will look before publishing.
- Visual Type Selector — Choose between text, radio, and checkbox question types with clear visual buttons.
- Color Customization — Per-form primary color with a WordPress color picker and preset palette.
- Icon Picker — Search and select from 2,000+ Bootstrap Icons for the welcome screen.
- Email Notifications — Receive an email with full submission details. Customizable subject and body templates.
- SMS Notifications — Optional SMS alerts via MeliPayamak (REST API) when a new entry is submitted.
- Entries Management — View, filter, paginate, delete, and export submissions to CSV.
- Login Required — Optionally restrict form submission to logged-in users.
- RTL & Persian — Full RTL support with the Vazirmatn font and complete Persian (fa_IR) translation.
- 100% Local Assets — All CSS, JS, and fonts are bundled locally. No external CDN dependencies.
- Secure — Nonce-based CSRF protection, input sanitization, output escaping, and SSL-verified HTTP requests.
Question Types
- Text (Descriptive) — Single-line or multi-line text input.
- Radio (Single Choice) — Select one option from a list.
- Checkbox (Multiple Choice) — Select one or more options, with optional maximum selection limit.
Privacy
This plugin stores form submissions (entries) in the WordPress database as custom post types. Each entry may include:
- The answers provided by the user.
- The submitter’s IP address (
REMOTE_ADDR). - The submitter’s User-Agent string.
- The submission timestamp.
If the “Login Required” option is enabled, the submitter’s WordPress user ID is associated with the entry via the logged-in session.
No data is sent to external services except:
- Email — via
wp_mail()to the configured recipient (default: site admin). - SMS — only if you explicitly enable and configure the MeliPayamak SMS integration in Settings.
External services
This plugin optionally connects to the MeliPayamak SMS gateway API to send SMS notifications to the site administrator when a new form submission is received.
- What the service is and what it is used for: MeliPayamak (melipayamak.com) is an Iranian SMS service provider. The plugin uses its REST API to deliver a short text notification (the configured SMS template) to the admin’s phone number after each new entry, so the admin is instantly aware of new submissions.
- What data is sent and when: The request is sent only when SMS notifications are explicitly enabled in Palette Form Builder → Settings → Notifications and a new form entry is submitted. The data sent to
https://api.melipayamak.com/post/send.asmx/SendSmsincludes: your MeliPayamak account username, your MeliPayamak account password, your sender number, the admin recipient phone number, and the SMS text (which may contain the site name, form title, entry ID, and a short summary of the submitted answers). No visitor data (such as IP address or User-Agent) is transmitted to MeliPayamak. The plugin also optionally callshttps://api.melipayamak.com/post/credit.asmx/GetCreditto check your account balance, sending only your username and password. - Service terms and privacy policy:
- MeliPayamak Terms of Service: https://melipayamak.com
- MeliPayamak Privacy Policy: https://melipayamak.com
By enabling SMS notifications you acknowledge that the submitted form answers (as configured in your SMS template) will be transmitted to MeliPayamak’s servers.
Data Removal
When the plugin is deleted via the WordPress admin, uninstall.php removes:
- All
palette_formposts and their meta. - All
palette_entryposts and their meta. - The
palette_form_builder_settingsoption. - Cached transients.
Credits
This plugin bundles the following open-source libraries (all MIT licensed):
- Bootstrap 5.3.3 — CSS framework.
- Bootstrap Icons 1.11.3 — Icon set.
- Vazirmatn — Persian font.
- SortableJS 1.15.6 — Drag & drop library.
Installation
- Upload the
palette-form-builderfolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Go to Palette Form Builder in the admin sidebar to create your first form.
- Add questions using the drag & drop builder, then publish.
- Use the shortcode
[palette_form id="123"]on any page or post (or use the “Place on Page” action). - Configure email/SMS notifications under Palette Form Builder → Settings.
Frequently asked questions
Does this plugin use any external CDN?
No. All assets (Bootstrap, Bootstrap Icons, Vazirmatn font, SortableJS) are bundled locally inside the plugin’s assets/vendor/ directory. This complies with WordPress.org Plugin Guidelines and ensures your forms work even if external services are down.
Is the plugin RTL-compatible?
Yes. The plugin is fully RTL-aware and ships with the Vazirmatn Persian font. The admin interface and all strings are translated into Persian (fa_IR).
How do I enable SMS notifications?
Go to Palette Form Builder → Settings → Notifications. Check “Enable SMS notifications”. Enter your MeliPayamak username, password, sender number, and recipient number. Save settings. SMS will be sent via the MeliPayamak REST API using wp_remote_post().
Can I require users to log in before submitting?
Yes. Each form has a “Login Required” checkbox in the Access Settings metabox. You can also set a global default in Settings → General.
How are submissions exported?
Go to Palette Form Builder → Inbox, optionally filter by form, then click “Export CSV”. The file includes entry ID, date, form name, and all answers in UTF-8 (with BOM for Excel compatibility).
Is my data removed when I uninstall the plugin?
Yes. Deleting the plugin triggers uninstall.php, which removes all forms, entries, settings, and cached transients from your database.
Changelog
Maintenance release addressing WordPress.org Plugin Review feedback: documented the MeliPayamak external service, upgraded SortableJS, and lengthened all prefixes to 4+ characters. Recommended for all users.
1.4.1
- SECURITY: Fixed an XSS vulnerability in the client-side
escapeHtml()helper where HTML entities were stripped during development, leaving title/description/options unescaped when rendered into the DOM. - SECURITY: Sanitized the dynamic inline CSS output (
wp_add_inline_style) withsanitize_hex_color()andsafecss_filter_attr()so the per-form primary color meta value can no longer inject malicious CSS rules. - SECURITY: Escaped the intro/outro text in the frontend JavaScript output with the new
escapeHtmlMultiline()helper (late escaping at the point of output). - SECURITY: Applied “escape late” to all dynamic output — IDs are cast with
absint(), colors validated as hex, icon classes sanitized withsanitize_html_class(), and the settings tab state no longer echoes a variable. - SECURITY: Hardened the CSV export filename against header injection by whitelist-filtering the date value.
1.4.0
- NEW: Documented the MeliPayamak external SMS service in the readme (External services section).
- UPDATE: Upgraded bundled SortableJS from 1.15.2 to 1.15.6.
- FIX: Removed leftover template content (“Arbitrary section” / “A Brief Markdown Example”) from the readme.
- FIX: Moved inline
<style>output towp_add_inline_style()per WordPress.org guidelines. - FIX: Lengthened all plugin prefixes from
pf/PFto the 4+ characterpalefobu/PALEFOBUprefix to avoid naming collisions. - FIX: Corrected the Contributors list to match the WordPress.org account username.
1.3.0
- NEW: Drag & drop question reordering (SortableJS 1.15.2, bundled locally).
- NEW: Live preview modal for forms.
- NEW: Visual type selector replacing dropdown.
- NEW: Color palette presets in the color picker.
- NEW: Collapsible question cards with type badges.
- NEW: Sticky toolbar and empty state.
- NEW: Keyboard shortcuts (Ctrl+Enter to add question).
- FIX: Question type not changing when switching between text/radio/checkbox.
- SECURITY: WordPress.org Plugin Guidelines audit — removed all CDN dependencies, replaced SoapClient with wp_remote_post, removed SSL verification bypass, added per-field sanitization of form data, added dismissible admin notices.
1.2.0
- NEW: Email notification system with customizable subject/body templates.
- NEW: SMS notification via MeliPayamak.
- NEW: CSV export of entries.
- NEW: Entry filtering by form and pagination.
- NEW: Login-required option per form.
- NEW: Footer customization in settings.
- FIX: Improved nonce verification and output escaping.
1.1.0
- NEW: Multi-step form wizard with progress bar.
- NEW: Toast notifications and double-submit prevention.
- NEW: Autosave answers to localStorage.
- NEW: Required field validation.
- NEW: Accessibility improvements (ARIA, focus management, keyboard nav).
- FIX: Mobile responsiveness and RTL layout fixes.
1.0.0
- Initial release.
- Form builder with text, radio, and checkbox question types.
- Shortcode rendering with Bootstrap 5 RTL.
- Entries storage as custom post type.
- Settings page with general, footer, and notification tabs.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best Palette Form Builder alternatives
All form plugins →FAQ
Palette Form Builder: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 26, 2026
Is Palette Form Builder free?
Yes. Palette Form Builder is free to download and use from the official WordPress.org plugin directory.
Is Palette Form Builder safe to use in 2026?
Palette Form Builder works, but test it on a staging site before relying on it in 2026. Was last updated 3 months ago, and scores 49/100 on our health check.
How many websites use Palette Form Builder?
Palette Form Builder is active on <10 WordPress websites and has been downloaded 217 times since it launched in July 2026. It was downloaded 58 times in the last 30 days.
Does Palette Form Builder work with WordPress 7.1?
Palette Form Builder is officially tested up to WordPress 7.0.7, while the latest release is 7.1.3. It may still work, but try it on a staging site first.
What PHP version does Palette Form Builder need?
Palette Form Builder requires PHP 7.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Palette Form Builder last updated?
The latest version, 1.4.1, was released on July 16, 2026 (3 months ago).
Who makes Palette Form Builder?
Palette Form Builder is developed and maintained by PaletteAgency.
What are the best alternatives to Palette Form Builder?
The most popular alternatives to Palette Form Builder are MC4WP: Mailchimp for WordPr… (1M+ installs), MW WP Form (200K+ installs) and Conditional Fields for Cont… (100K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card


