Until recently I've been using Custom Contact Forms to create some more advanced forms. The sole reason I've chosen this plugin was the ability to create my own layouts and basically just code clean HTML with CCF taking care of the rest.
However, recently I came across this topic and realized how vulnerable the plugin might actually be. Therefore, my question is: is there any other safe Forms plugin that allows me to create my own HTML-based - not UI-based - forms? I'd be grateful for any suggestions.
Edit: Since I don't want to expose the vulnerability (however obvious it is), a temporary solution is to hard-code the recipient e-mail in the plugin code itself. If anybody would like to do that find and edit:
/wp-contents/plugins/custom-contact-forms/custom-contact-forms-front.php line 427 and replace
$dest_email_array = $this->getDestinationEmailArray($_POST['destination_email']);
$dest_email_array = $this->getDestinationEmailArray('firstname.lastname@example.org');
Other solutions I can think of, if you really are stuck with the plugin and have to use different e-mail recipients, is to use Advanced Custom Fields Plugin, to create page-dependent recipients, however, it's not a place to describe the quite lengthy process of doing so.