Ninja Forms is the modular form builder: a free, capable core extended through official extensions for payments, CRM connections, and workflow features. Its positioning sits between the friendly simplicity of drag-and-drop forms and the complexity ceiling of Gravity Forms — the drag-and-drop builder handles real conditional logic and multi-step flows, while the extension model lets you buy capabilities à la carte rather than in tiers. The layout-and-fields engine includes repeater fields, calculations, and multi-language support, and entries manage with full editing — submissions aren’t just read-only logs.
The 3.15.x releases show a team actively hardening: a two-tier permission model in the Abilities API, unserialize() input validation, shortcode-bracket neutralization in merge tags (both responsibly disclosed), plus workflow fixes for newsletter actions, CSV exports with special characters, and non-Latin list field values. For a form plugin, that security cadence across three consecutive releases is the trust signal that matters.
Competitive Features
- Modular extension model — buy capabilities as needed over a free core
- Conditional logic — show/hide and routing with AND/OR conditions
- Multi-step forms — paginated workflows with progress indication
- Calculations and repeater fields — dynamic totals and repeated groups
- Full entry editing — submissions editable after submission
- Multi-language forms — non-Latin characters handled correctly (3.15.1)
- Security-hardened (3.15.x) — consecutive releases addressing permission and validation issues
Key Features
- Drag-and-drop builder — visual field arrangement with live preview
- Email routing — notifications conditioned on form values
- Payment extensions — Stripe and PayPal collection add-ons
- CRM connections — Mailchimp, ActiveCampaign, Salesforce extensions
- CSV export — submission exports with correct character encoding (3.15.3)
- Webhook support — submissions to external endpoints
- Shortcode and block embedding — placement anywhere
Comparison with Competitors
Ninja Forms Premium vs WPForms Pro
| Aspect | Ninja Forms Premium | WPForms Pro |
|---|---|---|
| Extension model | Modular add-ons | Tiered license |
| Entry editing | Full edit capability | Standard management |
| Conditional logic | Advanced | Full |
| Learning curve | Moderate | Lowest |
| Free core quality | Strong | Strong |
| Security cadence | Active (3.15.x) | Active |
Bottom line: WPForms Pro remains the lowest-friction choice for standard forms. Ninja Forms Premium suits sites that want the modular path — start free, add extensions as requirements appear — or need full post-submission entry editing.
Ninja Forms Premium vs Gravity Forms
| Aspect | Ninja Forms Premium | Gravity Forms |
|---|---|---|
| Maturity | Long-established | Longest track record |
| API depth | Good | Deepest |
| Pricing | Modular add-ons | Tiered licenses |
| Ecosystem | Solid | Largest |
| Conditional logic | Advanced | Advanced |
| Developer surface | Documented | Extensive |
Bottom line: Gravity Forms keeps the deepest developer API and largest ecosystem; Ninja Forms counters with modular pricing and full entry editing. Complex custom integrations still lean Gravity Forms; cost-flexible form stacks lean Ninja Forms.
Recommended Stack — form submissions feed marketing automation: connect Ninja Forms to email newsletter workflows so entries flow into email segments without exports.
Official Changelog
Version 3.15.3
Release Date: September 7, 2026
- Security: Strengthened input validation for
unserialize()operations. - Fix: Preserve newsletter action list selection when the provider connection is temporarily unavailable.
- Fix: Encode special characters correctly in CSV submission exports.
- Fix: Allow optional and hidden Date/Time fields to submit correctly.
Version 3.15.2
Release Date: August 31, 2026
- Security: Enforced granular two-tier permission model in the Abilities API (responsibly reported by ChinhNguyen).
- Security: Neutralized shortcode brackets in IP address and referer URL merge tags (responsibly reported by Jakub Herman).
- Security: Validate repeater child field entries against server-side definitions.
Version 3.15.1
Release Date: August 24, 2026
- Security: Strengthened input validation for list field option imports.
- Fix: Allow non-Latin characters and special symbols in list field option values.
- Fix: Preserve HTML formatting in checkbox and radio list option labels after editing.
- Fix: Capture time values correctly for Date/Time fields.
Frequently Asked Questions
Is Ninja Forms free?
Yes — a free core on WordPress.org covers standard forms. Premium extensions add payments, CRM connections, and advanced workflow features, purchased à la carte rather than in license tiers.
Why three security releases in a row?
The 3.15.1–3.15.3 series addressed responsibly disclosed issues — permission models in the new Abilities API, merge-tag injection, and import validation. The rapid cadence with credited reporters is the security process working, and staying current on this line matters.
Can I edit submissions after they arrive?
Yes — full entry editing distinguishes Ninja Forms from builders where submissions are read-only records. Useful for support workflows and data correction.
Does it support multi-language forms?
Yes — the 3.15.1 release specifically restored non-Latin character support in list field options, and the builder is translation-ready for multilingual sites.
Can I collect payments?
Yes, through payment extensions — Stripe and PayPal add-ons handle one-time and subscription collection within the modular model.
Leave a Reply