WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

Plugin: campi-moduli-italiani (Used by 5 domains)

Campi Moduli Italiani

👤 Giuseppe 📦 v2.3.2 🔗 Plugin Homepage

This plugin creates form tags for Contact Form 7 and form fields for WPForms.

Contact Form 7

4 form-tags (and corresponding mail-tags) are available in this version:
* [comune]: creates a series of select for the selection of an Italian municipality
* [cf]: creates a field for entering the Italian tax code of a natural person
* [stato]: creates the ability to select a country
* [formsign]: creates the possibility to digitally sign the e-mails sent with a private key attributed to each individual form

WPForms

2 fields types are available:
* Cascade selection of an Italian municipality (returning Istat’s municipality code as value)
* A field to select a state (returning Istat’s country code as value)

Data used

At the time of activation, the plugin downloads the data it uses from the Istat and from the Italian Revenue Agency websites. This data can be updated from the administration console.
Downloading and entering data into the database takes several minutes: be patient during the activation phase.
The selection of the municipalities was created starting from the code of https://wordpress.org/plugins/regione-provincia-comune/

This plugin uses data made available by ISTAT and the Agenzia delle entrate (Italian revenue agency).
In particular, data made available at these URLs are acquired and stored:

  • https://www.istat.it/it/archivio/6789
  • https://www.istat.it/it/archivio/6747
  • https://www1.agenziaentrate.gov.it/servizi/codici/ricerca/VisualizzaTabella.php?ArcName=00T4

The data published on the ISTAT website are covered by a Creative Commons license – Attribution (CC-by) (https://creativecommons.org/licenses/by/3.0/it/), as indicated here: https://www.istat.it/it/note-legali
The data taken from the website of the Agenzia delle entrate are in the public domain and constitute a public database made available to allow tax compliance and, more generally, to allow the identification of physical persons with the Italian public administrations, through the personal fiscal code.
The data are managed by the Ufficio Archivio of the Agenzia delle entrate.
By Italian law (art. 52 d.lgs. 82/2005) all data, that are not personal data, published by an Italian administration without an explicit license are open data (CC0).
This plugin uses the data taken from the website of the Agenzia delle entrate exclusively for the purpose of carrying out a formal regularity check of the pesonal tax code.
This plugin does not include any links on the external pages of the website on which it is used, neither to the Agenzia delle entrate’s site nor to the ISTAT’s website; in particular, no kind of direct link is made, nor of deep linking.

How to use form tags in Contact Form 7

[comune]
[comune] has a manager in the CF7 form creation area that allows you to set various options.
In particular, it is possible to set the “kind” attribute to “tutti” (all); “attuali” (current), “evidenza_cessati” (evidence ceased). In the first and third cases, in different ways, both the currently existing municipalities and those previously closed are proposed (useful, for example, to allow the selection of the municipality of birth). In the “attuali” mode, however, only the selection of the currently existing municipalities is allowed (useful to allow the selection of the Municipality of residence / domicile).
It is also possible to set the “comu_details” option, to show an icon after the select cascade that allows the display of a modal table with the statistical details of the territorial unit.
The value returned by the group is always the ISTAT code of the selected municipality. The corresponding mail-tag converts this value into the name of the municipality followed by the indication of the automotive code of the province.
From version 1.1.1 hidden fields are also populated with the strings corresponding to the denomination of the region, province and municipality selected, useful for being used in plugins that directly capture the data transmitted by the form (such as “Send PDF for Contact Form 7” )
The cascade of select can also be used outside of CF7, using the [comune] shortcode (options similar to those of the form tag for Contact Form 7).

Starting from version 2.2.0 there is a new filters’ builder for the field [comune] useful for creating fields that allow the selection of a customizable list of municipalities.
Filters can be used both for CF7 tag, and for WPForms field, and for the shortcode ‘comune’.
A short youtube video illustrates how to use filters and the filters’ builder.

[cf]
[cf] has a manager in the CF7 form creation area that allows you to set the various options.
In particular, it is possible to set various validation options allowing you to find the correspondence of the tax code with other fields of the form.
Specifically, it is possible to verify that the tax code corresponds with the foreign state of birth (selected by means of a select [stato]), the Italian municipality of birth (selected by means of a cascade of select [comune]), gender (indicating the name of a form field that returns “M” or “F”), the date of birth. If multiple fields are used to select the date of birth, one for the day, one for the month and one for the year, it is possible to find the correspondence of the tax code with these values.

[stato]
[stato] has a manager in the CF7 form creation area that allows you to set various options.
In particular, it is possible to set the selection of only the currently existing states (“only_current” option) and it is possible to set the “use_continent” option to have the select values divided by continent. The field always returns the ISTAT code of the foreign state (code 100 for Italy). The ISTAT code is the type of data expected by [cf], for the verification of the tax code.

[formsign]
[formsign] NOW (v. 2.2.1) has a manager in the CF7 form creation area.
To use it, simply insert the tag followed by the field name in your own form: for example [formsign firmadigitale]. This tag will create a hidden field in the form with attribute name = “firmadigitale” and no value.
To use the code, it is also necessary to insert the [firmadigitale] mail-tag in the email or emails that the form sends (it is recommended at the end of the email).
In this way, in the email body it will be written a two-lines sequence containing:
an md5 hash of the data transmitted with the module (not of the content of any attached files)
a digital signature of the hash.
If you use html email, you can style the output using a wp option named: “gcmi-forsign-css” with a css as value.
The signature is affixed by generating a pair of RSA keys, attributed to each form.
By checking the hash and the signature, it will be possible to verify that the emails have actually been sent by the form and that the data transmitted by the user correspond to what has been registered.
To facilitate data feedback, it is preferable to use “Flamingo” for archiving sent messages. In fact, in the Flamingo admin screen, a specific box is created that allows feedback of the hash and the digital signature entered in the email.
The system is useful in the event that through the form it is expected to receive applications for registration or applications etc… and avoids disputes regarding the data that the candidates claim to have sent and what is recorded by the system in Flamingo.

Code

Want to check the code? https://github.com/MocioF/campi-moduli-italiani

DomainExposuresHeadersLast Checked
s*h*r*t*c*.com (WP 6.8.5) F 2026-05-04 12:04:30
f*e*o*e*i*a*.com (WP 5.9.1) ⚠️ F 2026-04-26 00:36:58
s*h*r*t*c*n*l*g*e*.com (WP 6.8.5) F 2026-04-16 06:11:43
p*o*o*e*f*n*n*i*m*n*i.com 2025-11-09 23:01:06
e*r*4*e*e*r*h.com 2025-11-07 09:00:13

Top 50 Plugins

Plugin Count
elementor 2,042,226
contact-form-7 1,910,576
elementor-pro 1,164,210
woocommerce 947,969
revslider 698,969
js_composer 470,163
jetpack 467,685
wp-rocket 350,781
essential-addons-for-elementor-lite 315,823
gravityforms 268,896
header-footer-elementor 253,761
complianz-gdpr 246,928
instagram-feed 244,520
google-analytics-for-wordpress 239,596
elementskit-lite 238,462
gutenberg-core 236,283
cookie-law-info 235,991
google-site-kit 235,154
sitepress-multilingual-cms 217,744
bluehost-wordpress-plugin 207,377
wpforms-lite 170,343
astra-sites 162,891
gutenberg 157,629
litespeed-cache 150,704
cookie-notice 140,280
gtranslate 138,641
coblocks 130,241
the-events-calendar 128,499
popup-maker 121,128
astra-addon 103,285
bb-plugin 102,615
tablepress 102,610
woocommerce-payments 101,312
LayerSlider 101,239
wp-smushit 100,582
premium-addons-for-elementor 98,751
mailchimp-for-wp 96,676
duracelltomi-google-tag-manager 93,550
honeypot 92,216
cleantalk-spam-protect 90,914
akismet 90,531
woocommerce-gateway-stripe 88,997
megamenu 86,393
fusion-builder 84,420
all-in-one-seo-pack 84,296
creame-whatsapp-me 82,848
smart-slider-3 82,792
formidable 82,376
creative-mail-by-constant-contact 80,738
pixelyoursite 79,986

Top 50 Themes

Theme Count
hello-elementor 674,966
Divi 562,521
astra 515,104
pub 160,466
Avada 130,518
flatsome 127,314
generatepress 126,963
oceanwp 92,567
h4 88,883
kadence 84,415
enfold 74,423
salient 71,495
bb-theme 63,882
twentytwentyfour 63,321
twentyseventeen 58,816
cocoon-master 58,267
blocksy 58,168
betheme 56,511
twentytwentyfive 55,512
dt-the7 48,164
neve 42,007
woodmart 41,188
Avada-Child-Theme 36,660
twentytwentyone 36,349
bridge 35,585
gox 34,459
twentytwenty 32,203
lightning 31,394
swell 30,662
twentytwentythree 29,059
bricks 26,436
Impreza 26,399
Newspaper 23,771
twentytwentytwo 23,290
epik-redesign 21,413
pro 19,529
storefront 19,379
uncode 19,357
extendable 19,255
twentysixteen 19,237
sydney 17,595
yith-wonder 17,151
themify-ultra 15,660
Total 15,560
twentyfifteen 13,897
hestia 13,737
porto 13,467
twentynineteen 13,254
yootheme 13,028
thrive-theme 12,935