Ninja Forms is the modular form builder: a free, capable core extended through official extensions for payments, CRM connections, and workflow features. Its positioning sits between the friendly simplicity of HappyForms and the complexity ceiling of Gravity Forms – the drag-and-drop builder handles real conditional logic and multi-step flows, while the extension model lets you buy capabilities à la carte rather than in tiers. The layout-and-fields engine includes repeater fields, calculations, and multi-language support, and entries manage with full editing – submissions are not just read-only logs.
The 3.15.x releases show a team actively hardening: a two-tier permission model in the Abilities API, unserialize() input validation, shortcode-bracket neutralization in merge tags (both responsibly disclosed), plus workflow fixes for newsletter actions, CSV exports with special characters, and non-Latin list field values. For a form plugin, that security cadence across three consecutive releases is the trust signal that matters.
Competitive Features
- Modular extension model – buy capabilities as needed over a free core
- Conditional logic – show/hide and routing with AND/OR conditions
- Multi-step forms – paginated workflows with progress indication
- Calculations and repeater fields – dynamic totals and repeated groups
- Full entry editing – submissions editable after submission
- Multi-language forms – non-Latin characters handled correctly (3.15.1)
- Security-hardened (3.15.x) – consecutive releases addressing permission and validation issues
Key Features
- Drag-and-drop builder – visual field arrangement with live preview
- Email routing – notifications conditioned on form values
- Payment extensions – Stripe and PayPal collection add-ons
- CRM connections – Mailchimp, ActiveCampaign, Salesforce extensions
- CSV export – submission exports with correct character encoding (3.15.3)
- Webhook support – submissions to external endpoints
- Shortcode and block embedding – placement anywhere
Comparison with Competitors
Ninja Forms Premium vs HappyForms
| Aspect | Ninja Forms Premium | HappyForms |
|---|---|---|
| Extension model | Modular add-ons | Complete core, no add-ons |
| Entry editing | Full edit capability | Standard management |
| Conditional logic | Advanced | Basic |
| Learning curve | Moderate | Minimal |
| Best for | Growing form workflows | Simple contact forms |
Bottom line: HappyForms is the lightweight contact-form answer; Ninja Forms Premium suits sites that want the modular path – start free, add extensions as requirements appear – or need full post-submission entry editing.
Ninja Forms Premium vs Gravity Forms
| Aspect | Ninja Forms Premium | Gravity Forms |
|---|---|---|
| Maturity | Long-established | Longest track record |
| API depth | Good | Deepest |
| Billing model | Modular add-ons | Tiered licenses |
| Ecosystem | Solid | Largest |
| Conditional logic | Advanced | Advanced |
| Developer surface | Documented | Extensive |
Bottom line: Gravity Forms keeps the deepest developer API and largest ecosystem; Ninja Forms counters with modular pricing and full entry editing. Complex custom integrations still lean Gravity Forms; cost-flexible form stacks lean Ninja Forms.
Recommended Stack – form submissions feed marketing automation: connect Ninja Forms to MailPoet Premium so entries flow into email segments without exports.
Official Changelog
Version 3.15.3
Release Date: September 7, 2026
- Security: Strengthened input validation for
unserialize()operations. - Fix: Preserve newsletter action list selection when the provider connection is temporarily unavailable.
- Fix: Encode special characters correctly in CSV submission exports.
- Fix: Allow optional and hidden Date/Time fields to submit correctly.
Version 3.15.2
Release Date: August 31, 2026
- Security: Enforced granular two-tier permission model in the Abilities API (responsibly reported by ChinhNguyen).
- Security: Neutralized shortcode brackets in IP address and referer URL merge tags (responsibly reported by Jakub Herman).
- Security: Validate repeater child field entries against server-side definitions.
Version 3.15.1
Release Date: August 24, 2026
- Security: Strengthened input validation for list field option imports.
- Fix: Allow non-Latin characters and special symbols in list field option values.
- Fix: Preserve HTML formatting in checkbox and radio list option labels after editing.
- Fix: Capture time values correctly for Date/Time fields.
Frequently Asked Questions
Is Ninja Forms free?
Yes – a free core on WordPress.org covers standard forms. Premium extensions add payments, CRM connections, and advanced workflow features, purchased à la carte rather than in license tiers.
Why three security releases in a row?
The 3.15.1-3.15.3 series addressed responsibly disclosed issues – permission models in the new Abilities API, merge-tag injection, and import validation. The rapid cadence with credited reporters is the security process working, and staying current on this line matters.
Can I edit submissions after they arrive?
Yes – full entry editing distinguishes Ninja Forms from builders where submissions are read-only records. Useful for support workflows and data correction.
Does it support multi-language forms?
Yes – the 3.15.1 release specifically restored non-Latin character support in list field options, and the builder is translation-ready for multilingual sites.
Can I collect payments?
Yes, through payment extensions – Stripe and PayPal add-ons handle one-time and subscription collection within the modular model.
Leave a Reply