Companies Using Ninja Forms

I've looked at a lot of WordPress plugin footprints since we started TechnologyChecker, and Ninja Forms is one where a single builder changes the reading. Our October 2026 crawl finds it on 43,785 live domains, 31,103 of them matched to a company, 4th of 64 in Form Builders. About a tenth of those domains come from one company's website template, and I'll separate them out wherever it changes the answer.

What the count measures

A domain counts when its pages load files from the Ninja Forms plugin folder or set the nfForms object that comes with a rendered form. That makes it a stricter test than Contact Form 7's. We opened 80 random Ninja Forms domains in a browser; 70 loaded, 64 of those carried Ninja Forms and 60 showed a rendered form. In a second sample fetched without a browser, 185 of the 193 pages that carried the plugin also printed nfForms. When we count a Ninja Forms site, there is almost always a form on the page we crawled.

Sales Signal: a Ninja Forms domain is almost always a live lead-capture page. That makes the list useful for anyone selling call tracking, CRM routing or form analytics.

One builder, one tenth

4,411 domains run Ninja Forms together with Invoca call tracking and Adobe Analytics, 10.2% of the 43,057 domains left after removing for-sale and gambling pages. We opened 20 of them and 19 carried the footer "Business Development Solutions by FindLaw"; the 20th blocked us. Six random Ninja Forms sites in our browser sample were FindLaw-built, and all six were in that set. Every one of the 4,411 also runs the Divi theme, and 4,025 sit on WP Engine. These are real installs on each law firm's own site, so they stay in the count. The choice of form plugin, though, was FindLaw's.

Sales Signal: FindLaw's 4,411 sites are a single buying decision. A vendor that wants them talks to FindLaw; anyone selling to the firms themselves should expect the website to be FindLaw's to change, not the firm's.

A flat line

The chart reads 37,951 in June, 42,490 in July, 42,679 in August, 43,650 in September and 43,785 in October. The June to July step is on our side: the domains we crawl turn over every month, with dead sites out and new ones in, and the signals we capture changed over the summer. Since March 2026, 4,932 domains have dropped Ninja Forms on at least one hostname, and when we rechecked, 706 of 4,950 such domains (14.3%) still ran it on another.

"Strip out one law-firm template and Ninja Forms looks like what it is: a mid-sized, mostly American form plugin used by small service businesses that want a little more than a contact form." - Mehmet Suleyman, CEO & Co-founder at TechnologyChecker.io

Sales Signal: about 44,000 domains and no sign of rapid change. Size your campaign to a stable pool.

Who runs it

65.06% of matched companies with a known size have 1 to 10 employees and 24.38% have 11 to 50, so 89.44% have 50 or fewer staff, close to Contact Form 7's 87.46%. Only 173 companies have more than 1,000 staff. The named ones include Sanmina, Vanderlande, NCH Corporation and Practice Plus Group on their main sites, plus single-team sites such as McKee Foods' careers pages, Charles Taylor's US claims site and TÜV Rheinland's Risktec consulting site. Washington State's Recreation and Conservation Office runs it on rco.wa.gov.

Sales Signal: the typical buyer is a small firm owner or the agency that maintains the site. Enterprise rows are departmental, so prospect the team that owns that property.

American, and legal for one reason

The United States has 12,181 matched companies, the United Kingdom 3,173 and Germany 1,542, about eight American companies for every German one. On Contact Form 7's page the ratio is 2.4 to one. Law Practice leads the industries at 8.41% and Legal Services is third at 4.49%, but 1,753 of the 2,223 Law Practice companies and 799 of the 1,187 Legal Services ones are FindLaw sites. Outside FindLaw, the two legal industries come to 858 of 23,850 matched companies (3.6%), and Construction, agencies and consultancies lead as they do for any WordPress form plugin.

Sales Signal: if you sell to law firms, the FindLaw block is worth a separate approach. If you don't, filter it out and the rest of the list is a generic US and UK small-business list.

Few second plugins

Our migration panel is empty, and the overlaps are small. 228 domains run Ninja Forms with WPForms today and 113 with Gravity Forms, out of 43,785. Contact Form 7, on 2,956,339 domains, loads on every page by default, which is part of why it looks about 68 times bigger in our table while WordPress.org's install counts (10+ million against Ninja Forms' 500,000+) put the gap nearer 20 to one.

"Ninja Forms sites rarely carry a second form plugin. Whoever picked it, a firm or a builder like FindLaw, picked it on purpose." - Mehmet Suleyman, CEO & Co-founder at TechnologyChecker.io

Sales Signal: with a few hundred overlapping domains, there's no measurable switching corridor to sell into. Competitive displacement here means a site rebuild.

The stack around it

WordPress runs on 99.77% of the 43,057 domains these shares are based on. Underscore.js (96.2%) loads with Ninja Forms' own scripts. Divi is on 21.04%, and outside FindLaw it's still on 12%, several times its 3.98% on Contact Form 7 domains. Elementor is on 20.86%. Hosting is split between GoDaddy (20.31%) and WP Engine (15.19%), where FindLaw explains 4,025 of the 6,541 WP Engine domains.

Sales Signal: Divi agencies and GoDaddy-hosted small businesses are the core outside FindLaw, a better fit for site-care plans than for enterprise software.

Versions, CVEs and price

WordPress.org rates Ninja Forms 88 out of 100 across 1,395 ratings, but security is the live issue. NVD lists CVE-2026-90438, published 2 October 2026, an unauthenticated stored cross-site scripting flaw in every version up to 3.15.4 when a Paragraph Text field uses the rich text editor. In a random sample of 250 domains fetched on 14 October, 152 showed a version: 47.4% ran 3.15.5 and 52.6% something older, and 24.3% sat in the 3.10.4 to 3.14.9 range covered by CVE-2026-65048. Most FindLaw sites blocked that fetch, so the sample is mostly the rest of the base. On price, Ninja Forms' pricing page (captured 24 September 2026) lists a free core plugin, then Plus at $99, Pro at $199 and Elite at $499 a year, with lower first-year prices.

Sales Signal: half the sampled sites need an update for a public CVE. Managed WordPress and security vendors have a concrete, checkable reason to call.

Key takeaways

1. 43,785 live domains, 1.2% of Form Builders, 4th of 64.

2. FindLaw's law firm template is 4,411 domains, 10.2% of the clean count.

3. A small-business, US-leaning base: 89.44% at 50 staff or fewer, eight US companies per German one.

4. Almost no stacking with rival form plugins.

5. 52.6% of sampled sites ran a version below 3.15.5 when CVE-2026-90438 was already public.

How to use this list

Split FindLaw sites from the rest first, then filter by country, size and version. For the full list of 43,785 Ninja Forms domains with company, size and stack data, explore TechnologyChecker.io. Our note on how technology detection works explains why a plugin that loads only beside a form is harder to see than one that loads everywhere.