Find your workflow

Search Deluxe Plugins

Try “automation”, “checkout”, “AI”, or “WordPress security”.

Deluxe Contact Form

Free no charge

Add a private, accessible WordPress contact form with one-time verification, saved messages, atomic rate limits, and administrator notifications.

Free — no charge. No activation key is required.

Source-reviewed product fit

What this plugin does—and where its responsibility ends.

Receive accessible contact submissions in a private WordPress inbox with one-time challenges, atomic rate limits, retention controls, and save-before-mail handling.

Supported workflow

  • Add a session-free contact form with a shortcode and accessible labels
  • Store messages before attempting the administrator notification email
  • Use one-time server-stored challenges, bounded rate limits, timing checks, a nonce, and a honeypot
  • Search, delete, export, retain, and process privacy requests for saved messages

Important boundaries

  • Mail notification delivery still depends on the site's wp_mail configuration
  • The plugin has no attachments, CRM sync, sender auto-replies, or conditional form builder
  • High-risk sites should add a managed network or WAF rate limit and an appropriate privacy policy

Compare more tools in ai, leads & customer engagement.

Learn the workflow

Practical guides that put this tool in context.

Understand the decisions around the workflow before changing a production store.

Description

Overview

Place a focused contact form with the [deluxe_contact_form] shortcode and manage its messages from a private, paginated WordPress inbox.

Core capabilities

  • Cryptographically random, single-use verification tokens
  • Atomic fixed-window rate limiting without storing raw IP addresses
  • Session-free form handling with a honeypot and minimum fill time
  • Messages saved before administrator email is attempted
  • Search, individual deletion, formula-safe CSV export, and optional retention
  • WordPress personal-data export and erasure integration

Privacy and delivery

The plugin uses no remote service, tracking code, PHP session, file attachment, or sender auto-reply. It stores the submitted name, email, topic, message, and receive time in the site database. Site owners remain responsible for their privacy notice and retention policy.

Requirements

WordPress 6.4 or newer and PHP 7.4 or newer.

License, support, and delivery

Free — no charge. You receive the current installable WordPress ZIP. No activation key is required. Updates are provided when released; support is best-effort with no guaranteed response time.