Gravity — Forms Shortcodes

Gravity Forms offers a suite of shortcodes that go far beyond simple [gravityform id="1"] . While often underutilized, these shortcodes are the backbone of embedding, dynamic population, conditional display, and data retrieval. However, they come with notable performance caveats and learning curves that power users must understand.

| Shortcode | XSS Risk | CSRF Protection | Data Leakage | |-----------|----------|----------------|--------------| | [gravityform] | Medium (field labels) | ✅ Yes (nonce) | No | | [gravityformspopulate] | (if no sanitization) | ❌ None | Yes (exposes field IDs) | gravity forms shortcodes

| Goal | Shortcode | | :--- | :--- | | | [gravityform id="1"] | | No Title/Description | [gravityform id="1" title="false" description="false"] | | AJAX Enabled | [gravityform id="1" ajax="true"] | | Display Entry Count | [gravityforms action="counts" id="1"] | | Display Directory | [gravityform id="1" action="directory"] | Gravity Forms offers a suite of shortcodes that

: Click the "Add Form" button above the text editor to generate a shortcode via a popup interface. 5. Advanced Tips | Shortcode | XSS Risk | CSRF Protection

: You can force the newer "Orbital" or "Gravity" visual themes by adding theme="gravity" to your shortcode.

: If your shortcode displays as plain text on the front end, ensure your theme's template uses the_content() or that you are using the dedicated Gravity Forms Shortcode Block . Creating a Form Shortcode - Gravity Forms Documentation