Oumma Contact – Drag & Drop Contact Form Builder

Oumma Contact is a professional form builder for WordPress that combines simplicity with power. Create beautiful, responsive contact forms in minutes with an intuitive drag-and-drop builder — no coding required.

Whether you need a simple contact form, a feedback form, a booking request, or a multi-field application form, Oumma Contact gives you everything out of the box. Built for speed and accessibility, it works with any theme and loads only when needed.

✨ Key Features (Free)

• Drag-and-Drop Form Builder – Create and customize forms visually with an easy-to-use interface
• 30+ Field Types – Text, email, phone, textarea, select, radio, checkbox, number, full name, date, time, file upload, signature, rating, NPS, address, URL, range slider, switch, color picker, IBAN, GDPR consent, and more
• Anti-Spam Protection – Time-based verification, honeypot trap, reCAPTCHA v2/v3, IP/email/word blacklists, and rate limiting per IP
• Beautiful Form Design – Modern, mobile-responsive forms with customizable colors, borders, shadows, corner radius, and fonts
• Multi-Language Support – Fully translated in 11 languages including RTL (EN, FR, DE, ES, IT, PT, NL, PL, RU, TR, AR)
• Email Notifications – Receive submissions via beautifully formatted HTML emails
• Submission Management – View, filter, search, and export all entries from your dashboard
• Shortcode Integration – Embed anywhere with [oumma-contact id="X"]
• Elementor Widget – Native Elementor integration for drag-and-drop embedding
• Gutenberg Compatible – Works seamlessly with the block editor
• Unlimited Forms & Submissions – No limits whatsoever
• GDPR Ready – Built-in consent checkbox with customizable privacy policy link
• Dashboard Widget – View recent submissions at a glance
• Lightweight & Fast – Minimal footprint, assets loaded only on pages with forms

🚀 Premium Add-on

A separate Premium add-on extends Oumma Contact with:

• SMTP configuration – Built-in SMTP setup with test tool for reliable email delivery
• Auto-reply emails – Automatic confirmation emails to form submitters
• CSV export – Export all submissions to CSV
• Form duplication – Duplicate forms with one click
• Advanced design options – Premium styling controls for inputs, labels, and buttons

The free plugin contains no premium code — the premium add-on adds all functionality via WordPress hooks.

Get Oumma Contact →

🌍 Available Languages

Oumma Contact is fully translated in 11 languages:

• 🇬🇧 English
• 🇫🇷 Français
• 🇩🇪 Deutsch
• 🇪🇸 Español
• 🇮🇹 Italiano
• 🇵🇹 Português
• 🇳🇱 Nederlands
• 🇵🇱 Polski
• 🇷🇺 Русский
• 🇹🇷 Türkçe
• 🇸🇦 العربية (RTL supported)

External services

Google reCAPTCHA

This plugin optionally uses Google reCAPTCHA to protect forms against spam submissions.

When enabled by the site administrator, the plugin:

• Loads the reCAPTCHA JavaScript library from https://www.google.com/recaptcha/api.js
• Sends the user’s reCAPTCHA response token to https://www.google.com/recaptcha/api/siteverify for server-side verification

Data sent to Google: reCAPTCHA response token, site key, user’s IP address, and browser user-agent.

This service is only active when the administrator configures reCAPTCHA keys in the plugin settings (Oumma Contact > Settings > Security).

• Google Terms of Service: https://policies.google.com/terms
• Google Privacy Policy: https://policies.google.com/privacy

SMTP Provider Documentation Links

The plugin settings page (admin only) displays informational links to third-party SMTP provider documentation to help administrators configure their email settings. These are standard hyperlinks displayed in the admin interface — no data is sent to these services by the plugin.

The following documentation links may be displayed depending on the selected SMTP provider:

• Gmail: https://support.google.com/accounts/answer/185833 — Google Privacy Policy
• Microsoft Outlook / 365: https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/authenticated-client-smtp-submission — Microsoft Privacy Policy
• Mailjet: https://app.mailjet.com/account/apikeys — Mailjet Privacy Policy
• Brevo (Sendinblue): https://app.brevo.com/settings/keys/smtp — Brevo Privacy Policy
• SendGrid: https://app.sendgrid.com/settings/api_keys — SendGrid Privacy Policy
• Mailgun: https://app.mailgun.com/app/sending/domains — Mailgun Privacy Policy
• Postmark: https://account.postmarkapp.com/servers — Postmark Privacy Policy
• OVH: https://help.ovhcloud.com/csm/en-emails-configure-email-address — OVH Privacy Policy
• Zoho Mail: https://www.zoho.com/mail/help/zoho-smtp.html — Zoho Privacy Policy
• SMTP2GO: https://app.smtp2go.com/settings/users/ — SMTP2GO Privacy Policy

When the administrator configures SMTP, the plugin sends emails through the configured SMTP server using the credentials provided by the administrator. The plugin itself does not communicate with any of these providers’ APIs — it only uses standard SMTP protocol to relay emails.

Oumma Pro License API

The optional Premium add-on communicates with the Oumma Pro license server at https://oumma-pro.com/wp-json/cplm/v1/ to verify and activate license keys.

Data sent: license key and site URL. This communication occurs during license activation, periodic license verification, and update checks.

This service is only active when the Premium add-on is installed and a license key is entered.

• Terms of Service: https://oumma-pro.com/cgu/
• Privacy Policy: https://oumma-pro.com/politique-de-confidentialite/

1. Upload the oumma-contact folder to /wp-content/plugins/
2. Activate the plugin through the ‘Plugins’ menu
3. Go to Oumma Contact > Forms to create your first form
4. Use shortcode [oumma-contact id="X"] to display your form on any page or post
5. (Optional) Purchase and install the Premium add-on for advanced features

1. 

   Form Builder – Drag-and-drop interface with 30+ field types organized by category (Essentials, Identity, Choices, Advanced), live field editing panel, and shortcode copy button

2. 

   Settings – General – Language selector with 11 flags, email notification configuration with recipient and reply-to fields

3. 

   Settings – SMTP – Built-in SMTP setup with one-click provider templates (Gmail, Outlook, Brevo, SendGrid, Mailgun, Amazon SES, OVH, and more)

4. 

   Settings – Security – Anti-spam protection with message rate limiting, honeypot invisible trap field, and difficulty levels (Beginner, Intermediate, Expert)

5. 

   Settings – Design – Full form customization: border color, background, focus color, text color, corner radius, and border width with live sliders

6. 

   Submissions Management – Searchable list of all form entries with date filters (Today, This week, This month), CSV export, bulk delete, and per-entry View/Delete actions

7. 

   Help & Support – Report a Bug – Built-in bug reporting form with email, title, description, and file attachment

8. 

   Help & Support – Suggestion – Built-in suggestion form to submit feature requests directly from the plugin

9. 

   Frontend Form Preview – Live form display with all field types filled: full name, email, phone, IBAN, website, date, rating, time, slider, radio, checkbox, dropdown, color picker, signature, file upload, message, and GDPR consent

10.1.5

• Fixed: Plugin Check compliance — added phpcs:ignore for custom escaping function

10.1.4

• Fixed: Design settings (colors, borders, button styles) now correctly applied to frontend forms
• Changed: License page only visible when the Pro add-on is installed or a license was previously activated

10.1.3

• Fixed: Design settings not applied to forms — CSS inline style handle mismatch (oumc-public-css → oumc-public)

10.1.2

• Fixed: File attachment not included in emails — base64-reconstructed files now use wp_handle_sideload() instead of wp_handle_upload()

10.1.1

• Fixed: Form submission not working — inline script handle mismatch prevented form data from loading
• Fixed: Premium fields (file upload, signature, date, etc.) not rendering — wp_kses_post() was stripping form elements
• Fixed: Console debug message changed from French to English

10.1.0

• Verified: Full compatibility with WordPress 6.9.3 (bugfix follow-up to 6.9.2 security release)

10.0.9

• Updated: Tested up to WordPress 6.9.2 (security release)
• Verified: Full compatibility with WordPress 6.9.2 security patches

10.0.8

• Improved: SEO-optimized readme title for better search visibility on WordPress.org
• Improved: Enriched long description with detailed feature overview and use cases
• Added: 4 new FAQ entries (page builders, form design, file uploads, mobile responsive)
• Updated: Anti-spam FAQ now reflects all free features (honeypot, blacklists, rate limiting)
• Added: Gutenberg compatibility mention in features list
• Fixed: Dashboard widget CSS not loading on WordPress dashboard (dedicated stylesheet)
• Fixed: Dashboard widget displays correctly with proper grid layout for stats
• Fixed: PRO/FREE detection now correctly checks if add-on is installed with valid license
• Fixed: Builder PRO tools correctly greyed out when add-on is not active
• Fixed: License page shows activation form when add-on is not installed
• Fixed: Dashboard widget shows upgrade button when add-on is not active
• Fixed: Settings page, forms list, and submissions list correctly reflect add-on status
• Added: New oumc_has_pro_addon() function for accurate PRO add-on detection
• Updated: Field types FAQ corrected to reflect all 30+ types included for free
• Updated: All new content translated in 11 languages

10.0.6

• Improved: SEO-optimized plugin title and description for better discoverability
• Updated: All 30+ field types now listed in plugin description
• Improved: Translation quality for German (du-form per WordPress standard) and Dutch (je-form per WordPress standard)
• Fixed: WordPress glossary compliance across all 11 languages (Settings, Configuration terms)
• Fixed: Portuguese translations standardized to PT-PT
• Updated: Translation files refreshed for all 11 languages

10.0.5

• Fixed: All inline styles converted to properly enqueued CSS files
• Fixed: All inline scripts converted to wp_add_inline_script
• Fixed: Variable gettext replaced with literal string mapping
• Fixed: All features enabled in free version (premium add-on extends via hooks)
• Fixed: Plugin Check – 0 errors, 0 warnings

10.0.4

• Fixed: SMTP provider documentation links now fully disclosed in External Services section of readme.txt
• Fixed: file_base64 POST data sanitization improved with explicit wp_unslash + character whitelist
• Fixed: $_FILES properties now explicitly sanitized (sanitize_file_name, sanitize_mime_type, intval) instead of raw assignment
• Fixed: All phpcs:ignore comments updated with precise justifications

10.0.3

• Fixed: External services (Google reCAPTCHA, Oumma Pro License API) fully documented in readme.txt as required by WordPress.org
• Fixed: ABSPATH replaced with wp_get_upload_dir() for file path resolution
• Fixed: Settings save no longer iterates over entire $_POST — all fields explicitly listed with proper sanitization
• Fixed: JSON-decoded form data now recursively sanitized after json_decode()
• Fixed: Premium field output escaped with wp_kses_post() instead of raw echo
• Fixed: Removed unprefixed shortcodes (contact_pro, oumma_contact) — only [oumma-contact] remains
• Fixed: Elementor widget name prefixed (oumc_contact)
• Fixed: GDPR FAQ corrected to mention reCAPTCHA external service
• Fixed: Installation instructions reference correct plugin folder name
• Fixed: Duplicate ABSPATH check removed in admin-forms class

10.0.2

• Improved: SMTP provider help texts with detailed warnings for Outlook/Microsoft 365 (SMTP AUTH, MFA, Azure Security Defaults)
• Improved: SMTP provider help texts for OVH, Zoho Mail, SMTP2GO and Other SMTP with clear instructions and links
• Improved: UI font weights normalized across all admin pages (lighter, more readable text)
• Improved: Input fields text no longer appears bold
• Improved: Page titles changed from bold to normal weight
• Improved: Forms list name column no longer bold
• Improved: Builder right panel labels and controls normalized
• Added: 23 new translated strings for SMTP provider help (11 languages)

10.0.1

• Fixed: File upload attachment now uses base64 encoding to bypass WAF/firewall blocking
• Fixed: Textarea line breaks preserved in emails (sanitize_textarea_field)
• Fixed: OC License Manager footer CSS selector updated after prefix rename

10.0.0

• Major: All internal prefixes renamed for WordPress.org compliance (cp_ → oumc_, cpp_ → oumcp_)
• Major: 27 files refactored, ~3400 replacements across PHP, CSS, JS
• Major: PRO plugin now uses dedicated text domain (oumma-contact-pro) with 31 strings × 10 languages
• Fixed: Plugin Check now passes with 0 errors
• Fixed: Global variables properly prefixed
• Fixed: Shortcodes renamed [contact_pro] → [oumma-contact] (backward compat aliases maintained)

9.9.9

• Architecture: All premium functional code moved to the separate Oumma Contact add-on
• Compliance: No locked, restricted, or gated functionality in the free plugin (WordPress.org Guideline #5)
• Added: Hook system (do_action/apply_filters) for premium features delegation to add-on
• Fixed: cp_is_pro() now requires the Premium add-on to be installed and active
• Fixed: reCAPTCHA v3 site key option name corrected in form renderer
• Fixed: reCAPTCHA moved to free field types where it belongs
• Updated: readme.txt to accurately describe free vs premium features

9.9.7

• Fixed: All remaining Plugin Check errors in password field escaping
• Fixed: PreparedSQL.NotPrepared error on count_submissions query
• Fixed: NonceVerification warning on form builder navigation parameter
• Improved: Full Plugin Check compliance with 0 errors and 0 warnings

9.9.6

• Fixed: phpcs:ignore directives moved inside PHP tags in HTML templates
• Fixed: wp_unslash() and sanitize_text_field() added on all $_POST and $_SERVER access
• Fixed: isset() added on $_FILES and $_POST access
• Added: phpcs:ignore for DirectDatabaseQuery on custom table queries

9.9.5

• Fixed: All Plugin Check escaping errors (esc_html, esc_attr, esc_url, intval)
• Fixed: wp_redirect() replaced with wp_safe_redirect() everywhere
• Fixed: wp_unslash() added on all superglobals
• Fixed: unlink() replaced with wp_delete_file()
• Fixed: rand() replaced with wp_rand()
• Fixed: date() replaced with gmdate()

9.9.4

• Fixed: Nonce verification added to all admin forms

9.9.3

• Prepared for WordPress.org submission
• Added: Plugin URI and Tested up to in plugin header
• Improved: Plugin description for guidelines compliance

9.9.2

• Fixed: License activation now works on external sites via remote API
• Added: New error messages for connection and API errors
• Improved: License activation flow with multiple fallback methods

9.9.1

• Improved: License status detection and support email formatting
• Fixed: Cache refresh for license expiration date after renewal

9.9.0

• Improved: Auto-update icon display with cache-busting
• Fixed: WordPress transient cache handling

9.8.0

• Added: Automatic updates for Premium add-on via license server
• Added: Dashboard widget with recent submissions

9.7.5

• Improved: Freemium architecture with separate add-on for premium features
• Removed: Form and submission limits – now unlimited for all users
• Fixed: Security improvements
• Improved: 11 language translations