I don't use it, but beware if you're running the Custom Contacts Form plugin: http://arstechnica.com/security/2014...ands-of-sites/

Gravity Forms is not free, but it's very flexible and powerful and seems to be safe.

Thanks for point hat out, fortunately I also use gravity forms