WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Plugin: campi-moduli-italiani (Used by 3 domains)

Campi Moduli Italiani

👤 Giuseppe 📦 v2.3.2 🔗 Plugin Homepage

This plugin creates form tags for Contact Form 7 and form fields for WPForms.

Contact Form 7

4 form-tags (and corresponding mail-tags) are available in this version:
* [comune]: creates a series of select for the selection of an Italian municipality
* [cf]: creates a field for entering the Italian tax code of a natural person
* [stato]: creates the ability to select a country
* [formsign]: creates the possibility to digitally sign the e-mails sent with a private key attributed to each individual form

WPForms

2 fields types are available:
* Cascade selection of an Italian municipality (returning Istat’s municipality code as value)
* A field to select a state (returning Istat’s country code as value)

Data used

At the time of activation, the plugin downloads the data it uses from the Istat and from the Italian Revenue Agency websites. This data can be updated from the administration console.
Downloading and entering data into the database takes several minutes: be patient during the activation phase.
The selection of the municipalities was created starting from the code of https://wordpress.org/plugins/regione-provincia-comune/

This plugin uses data made available by ISTAT and the Agenzia delle entrate (Italian revenue agency).
In particular, data made available at these URLs are acquired and stored:

  • https://www.istat.it/it/archivio/6789
  • https://www.istat.it/it/archivio/6747
  • https://www1.agenziaentrate.gov.it/servizi/codici/ricerca/VisualizzaTabella.php?ArcName=00T4

The data published on the ISTAT website are covered by a Creative Commons license – Attribution (CC-by) (https://creativecommons.org/licenses/by/3.0/it/), as indicated here: https://www.istat.it/it/note-legali
The data taken from the website of the Agenzia delle entrate are in the public domain and constitute a public database made available to allow tax compliance and, more generally, to allow the identification of physical persons with the Italian public administrations, through the personal fiscal code.
The data are managed by the Ufficio Archivio of the Agenzia delle entrate.
By Italian law (art. 52 d.lgs. 82/2005) all data, that are not personal data, published by an Italian administration without an explicit license are open data (CC0).
This plugin uses the data taken from the website of the Agenzia delle entrate exclusively for the purpose of carrying out a formal regularity check of the pesonal tax code.
This plugin does not include any links on the external pages of the website on which it is used, neither to the Agenzia delle entrate’s site nor to the ISTAT’s website; in particular, no kind of direct link is made, nor of deep linking.

How to use form tags in Contact Form 7

[comune]
[comune] has a manager in the CF7 form creation area that allows you to set various options.
In particular, it is possible to set the “kind” attribute to “tutti” (all); “attuali” (current), “evidenza_cessati” (evidence ceased). In the first and third cases, in different ways, both the currently existing municipalities and those previously closed are proposed (useful, for example, to allow the selection of the municipality of birth). In the “attuali” mode, however, only the selection of the currently existing municipalities is allowed (useful to allow the selection of the Municipality of residence / domicile).
It is also possible to set the “comu_details” option, to show an icon after the select cascade that allows the display of a modal table with the statistical details of the territorial unit.
The value returned by the group is always the ISTAT code of the selected municipality. The corresponding mail-tag converts this value into the name of the municipality followed by the indication of the automotive code of the province.
From version 1.1.1 hidden fields are also populated with the strings corresponding to the denomination of the region, province and municipality selected, useful for being used in plugins that directly capture the data transmitted by the form (such as “Send PDF for Contact Form 7” )
The cascade of select can also be used outside of CF7, using the [comune] shortcode (options similar to those of the form tag for Contact Form 7).

Starting from version 2.2.0 there is a new filters’ builder for the field [comune] useful for creating fields that allow the selection of a customizable list of municipalities.
Filters can be used both for CF7 tag, and for WPForms field, and for the shortcode ‘comune’.
A short youtube video illustrates how to use filters and the filters’ builder.

[cf]
[cf] has a manager in the CF7 form creation area that allows you to set the various options.
In particular, it is possible to set various validation options allowing you to find the correspondence of the tax code with other fields of the form.
Specifically, it is possible to verify that the tax code corresponds with the foreign state of birth (selected by means of a select [stato]), the Italian municipality of birth (selected by means of a cascade of select [comune]), gender (indicating the name of a form field that returns “M” or “F”), the date of birth. If multiple fields are used to select the date of birth, one for the day, one for the month and one for the year, it is possible to find the correspondence of the tax code with these values.

[stato]
[stato] has a manager in the CF7 form creation area that allows you to set various options.
In particular, it is possible to set the selection of only the currently existing states (“only_current” option) and it is possible to set the “use_continent” option to have the select values divided by continent. The field always returns the ISTAT code of the foreign state (code 100 for Italy). The ISTAT code is the type of data expected by [cf], for the verification of the tax code.

[formsign]
[formsign] NOW (v. 2.2.1) has a manager in the CF7 form creation area.
To use it, simply insert the tag followed by the field name in your own form: for example [formsign firmadigitale]. This tag will create a hidden field in the form with attribute name = “firmadigitale” and no value.
To use the code, it is also necessary to insert the [firmadigitale] mail-tag in the email or emails that the form sends (it is recommended at the end of the email).
In this way, in the email body it will be written a two-lines sequence containing:
an md5 hash of the data transmitted with the module (not of the content of any attached files)
a digital signature of the hash.
If you use html email, you can style the output using a wp option named: “gcmi-forsign-css” with a css as value.
The signature is affixed by generating a pair of RSA keys, attributed to each form.
By checking the hash and the signature, it will be possible to verify that the emails have actually been sent by the form and that the data transmitted by the user correspond to what has been registered.
To facilitate data feedback, it is preferable to use “Flamingo” for archiving sent messages. In fact, in the Flamingo admin screen, a specific box is created that allows feedback of the hash and the digital signature entered in the email.
The system is useful in the event that through the form it is expected to receive applications for registration or applications etc… and avoids disputes regarding the data that the candidates claim to have sent and what is recorded by the system in Flamingo.

Code

Want to check the code? https://github.com/MocioF/campi-moduli-italiani

DomainExposuresHeadersLast Checked
s*h*r*t*c*.com (WP 6.8.5) F 2026-07-02 04:49:14
d*a*s*t.com (WP 7.0) D 2026-07-01 13:31:32
s*h*r*t*c*n*l*g*e*.com (WP 6.8.5) F 2026-05-22 23:05:02

Top 50 Plugins

Plugin Count
elementor 1,746,968
contact-form-7 1,741,261
elementor-pro 1,030,588
woocommerce 799,751
revslider 605,482
jetpack 455,695
js_composer 420,816
wp-rocket 329,804
essential-addons-for-elementor-lite 263,935
complianz-gdpr 257,888
gravityforms 251,411
cookie-law-info 228,713
instagram-feed 225,455
google-site-kit 220,532
sitepress-multilingual-cms 210,485
google-analytics-for-wordpress 207,386
header-footer-elementor 206,651
bluehost-wordpress-plugin 185,254
elementskit-lite 180,875
gutenberg 160,215
gutenberg-core 159,345
cookie-notice 151,410
litespeed-cache 132,132
wpforms-lite 127,631
the-events-calendar 124,358
gtranslate 123,847
astra-sites 117,905
popup-maker 111,687
woocommerce-payments 110,725
tablepress 100,423
coblocks 98,654
honeypot 96,391
astra-addon 93,217
all-in-one-seo-pack 91,260
wp-smushit 90,979
layerslider 89,765
duracelltomi-google-tag-manager 89,533
bb-plugin 85,291
premium-addons-for-elementor 84,706
akismet 83,738
cleantalk-spam-protect 82,382
mailchimp-for-wp 82,193
megamenu 79,825
woocommerce-gateway-stripe 79,768
ml-slider 79,124
borlabs-cookie 78,500
fusion-builder 77,344
smart-slider-3 75,651
ewww-image-optimizer 75,481
formidable 75,409

Top 50 Themes

Theme Count
hello-elementor 608,078
Divi 500,899
astra 417,061
flatsome 127,857
Avada 121,508
generatepress 115,857
pub 110,062
oceanwp 82,111
kadence 78,800
enfold 70,814
salient 65,100
h4 54,851
twentyseventeen 54,766
twentytwentyfour 52,502
bb-theme 51,629
betheme 51,596
cocoon-master 50,763
blocksy 49,807
dt-the7 45,293
twentytwentyfive 43,539
neve 38,699
Avada-Child-Theme 36,662
gox 34,575
woodmart 33,779
bridge 32,211
twentytwentyone 31,168
lightning 29,643
twentytwenty 28,966
swell 27,916
Impreza 26,102
bricks 25,484
Newspaper 23,458
twentytwentythree 23,212
twentytwentytwo 19,490
epik-redesign 19,209
uncode 18,589
twentysixteen 17,574
pro 17,168
sydney 16,574
storefront 16,404
extendable 14,885
Total 14,532
hello-theme-child-master 13,377
factory-templates-4 13,276
yith-wonder 13,260
themify-ultra 12,864
yootheme 12,613
hestia 12,592
twentynineteen 11,737
porto 11,723