Developers · GPL · Self-hosted
A WordPress Form Builder Developers Can Actually Work With
Free, open-source form building with webhooks, a submission-data filter, shortcodes, blocks and embed — no external calls unless you opt in.
Auto Form Builder is free, GPL-licensed, and self-hosted — your forms and submissions live in your own WordPress database, with no external calls unless you enable them. If you integrate forms into a client stack, wire submissions to automation, or need a predictable place to hook custom logic, here is what the plugin exposes today.
This page covers documented developer surfaces only: outbound webhooks, the submission-data filter, placement options (shortcode, block, widget, embed), URL prefill, and data ownership. It does not describe a public REST API, a broad hooks catalog, or CLI tooling — those are not part of the current readme.
Webhooks & Integrations
Send form submissions to any HTTP endpoint the moment someone submits. Configure a webhook URL per form and push JSON payloads to Zapier, Make, GoHighLevel, or your own server — no manual export step. Webhooks fire even on redirect-only forms, so submissions are not skipped when the visitor only sees a thank-you redirect.
For endpoints you control, enable an optional HMAC-SHA256 signing secret. Receiving systems can verify the signature and reject forged payloads. Slack notifications and other optional integrations are separate, opt-in add-ons — the core webhook path is built in and free.
See the webhooks & integrations feature page for setup steps and payload behavior.
Extend Submission Handling
Use the auto_form_builder_processed_submission_data filter to adjust submission data before it is stored in the database, included in notification emails, or sent to outbound webhooks. Typical uses: normalize field values, strip internal keys, enrich records with computed metadata, or gate certain fields from external endpoints.
Illustrative example — adapt to your form and field structure:
add_filter( 'auto_form_builder_processed_submission_data', function ( $data, $form_id ) {
// Adjust $data before storage, email, or webhooks.
// Return the modified array.
return $data;
}, 10, 2 );Parameter names and return shape follow WordPress filter conventions; inspect the plugin source for the exact $data structure your forms produce.
Embed & Placement
Shortcode — embed any form on WordPress pages and posts. Gutenberg block — place forms in the block editor without pasting shortcodes. Dashboard widget — surface forms, submission counts and recent entries in wp-admin.
Cross-site embed — copy an iframe/embed code for non-WordPress sites. The embedded form keeps your styling, auto-resizes to its content, and stays isolated from the host page theme. URL prefill — populate fields from query parameters on load, including forwarding prefill values into embedded forms so campaign links can deep-link with known contact data.
For login flows on custom pages, the documented [auto_form_builder_login] shortcode provides sign-in, lost-password and reset without sending visitors to wp-login.php.
Docs: Embed anywhere · Shortcodes and blocks
Data Ownership & Privacy
Submissions are stored in your site's own WordPress database. Exports, retention policies and access control stay on infrastructure you operate — important for client work, regulated industries and GDPR-style requirements.
The plugin is privacy-first by default: no external calls until you enable optional services. AIDA (AI features), Slack notifications and Google Sheets sync are opt-in — webhooks only fire to URLs you configure. Read how we handle data on the privacy policy page.
Free & Open Source
Auto Form Builder is GPL-2.0+ and distributed on WordPress.org. Install on unlimited sites, audit the source, and extend it within GPL terms. Core form building, webhooks, conditional logic, multi-step forms and submission storage are free — no paid tier for the features described on this page.
For a product overview aimed at builders and marketers, start with the WordPress form builder head page or the free model explanation.
Frequently asked questions
- Is there a way to modify submission data in code?
- Yes. Use the auto_form_builder_processed_submission_data filter to adjust submission data before it is stored in the database, included in notification emails, or sent to outbound webhooks.
- Can I verify webhook authenticity?
- Yes. Enable an optional HMAC-SHA256 signing secret in webhook settings. Your receiving endpoint can verify the signature to confirm the payload came from your form.
- Where is form data stored?
- Submissions are stored in your WordPress site's own database — not on a third-party SaaS by default. You control backups, exports and retention on your server.
- Is it open source?
- Yes. Auto Form Builder is GPL-2.0+ licensed and available on WordPress.org. Inspect, fork and extend the code under the terms of the GPL.
Install Free from WordPress.org
GPL-2.0+ · Self-hosted submissions · Webhooks and filters included free.