A WordPress plugin that captures form submissions from any form plugin and stores them as searchable, manageable leads with automatic PII detection.
Form Submission Lead Tracker automatically captures submissions from popular WordPress form plugins and stores them in a centralized lead management system. Every form field is dynamically captured — no configuration needed for supported plugins. Sensitive payment data is automatically detected and redacted before storage.
- Contact Form 7
- Gravity Forms
- WPForms
- Ninja Forms
- Formidable Forms
- Fluent Forms
- Any custom form via hidden field or REST API
- Automatic capture of all frontend forms (optional)
- Automatic Capture — Hooks into form plugins automatically. No configuration needed for supported plugins.
- Dynamic Field Storage — Handles any form fields, not just predefined columns. Every field submitted is captured and stored.
- PII Detection — Automatically detects and redacts credit card numbers, CVV codes, SSNs, bank account numbers, and IBANs to prevent accidental storage of payment data. Uses Luhn algorithm validation to minimize false positives.
- Lead Management — Status workflow (New > Read > Contacted > Qualified > Converted / Closed), starring, notes timeline, and full-text search.
- Admin Interface — Inbox-style lead list with filtering by status/source/date, sorting, bulk actions, and a detailed single-lead view.
- CSV Export — Export leads with dynamic columns matching the actual form fields submitted. Respects active filters.
- GDPR Friendly — IP storage is opt-in (off by default), configurable data retention policies, and integration with WordPress privacy tools (data export and erasure requests).
- Extensible — 15+ filters and 10+ action hooks for developers to customize behavior.
For forms not built with a supported plugin, two capture methods are available:
- Explicit Capture — Add a hidden field (
<input type="hidden" name="_fslt_capture" value="1">) to any HTML form, or POST to the REST API endpoint (/wp-json/fslt/v1/submit). Best for developers who want precise control. - Automatic Capture — Intercepts all frontend POST submissions automatically. WordPress system forms (login, comments, WooCommerce checkout) are filtered out. Configurable exclusion list for additional forms to ignore. Best for non-technical users.
Both methods can be enabled simultaneously via the settings page.
- WordPress 5.8+
- PHP 7.4+
- Upload the
form-submission-lead-trackerfolder to/wp-content/plugins/. - Activate the plugin through the Plugins menu in WordPress.
- Visit Lead Tracker > Settings to configure integrations and PII detection.
- Form submissions will automatically appear under Lead Tracker > All Leads.
No. If you have a supported form plugin active (CF7, Gravity Forms, WPForms, etc.), submissions are captured automatically with zero configuration.
No. Lead capture runs after the form plugin's own processing is complete and adds negligible overhead.
By default, the PII detector uses the Luhn algorithm to identify credit card numbers and replaces them with a redaction notice before storing. This behavior is configurable under Settings > PII Detection. You can choose to redact, flag only, skip the field, or skip the entire submission.
WooCommerce checkout forms are automatically excluded from generic capture to prevent storing payment data. Individual form submissions (contact forms, etc.) on WooCommerce sites work normally.
Click the Export CSV button on the All Leads page. The export respects your current filters (status, source, search, date range) and includes dynamic columns for all form fields.
- Initial release
- Support for Contact Form 7, Gravity Forms, WPForms, Ninja Forms, Formidable Forms, and Fluent Forms
- Generic form capture via hidden field, REST API, and global POST intercept
- PII detection with Luhn-validated credit card scanning, CVV, SSN, bank account, and IBAN detection
- Admin lead list with filtering, search, sorting, and bulk actions
- Single lead detail view with notes timeline and status management
- CSV export with dynamic columns
- Dashboard summary widget
- GDPR privacy tools integration (data export and erasure)
- Automated data retention cleanup via WP-Cron
- Web Lifter — Author
- John O'Connor — Contributor
This project is licensed under the GPL v2 or later — see the LICENSE file for details.