BuddyPress · From $49 · Profile contact form
BuddyPress private messages need both people signed in. Contact Me adds a Contact tab to the member profile instead, so a visitor can write to that member without an account. The message lands in the member's own inbox, with an email and a notification to match.
Runs on BuddyPress and BuddyBoss Platform. Version 1.5.0.
Send message
Send Priya a message
Your message is delivered privately. Your email is shared so she can reply.
The security question appears only for visitors who are not signed in.
How it works
The plugin registers a single Contact item on the BuddyPress member nav. What opens underneath it changes with the viewer, so nobody has to learn two different places to look.
On someone else
/members/priya/contact/send/
Visitors get a name and email field so the member can write back. Signed-in members skip both, because their profile already carries them. Subject and message are bounded server side at 200 and 5000 characters, and the same validator runs whether the browser posts the form or the REST route does.
On your own
/members/priya/contact/inbox/
Received messages are listed newest first, ten to a page, with All and Unread tabs that carry their own counts. Opening one marks it read and offers a reply by email, a jump to BuddyPress private messages, or delete. The Preferences sub-tab holds the on and off switch plus a contact link the member can paste into a bio.
Three places the form can appear
Before it reaches anyone
Letting people write to members without an account is the whole point, and it is also the risk. Four checks stand between the send button and a member's inbox, and a message has to clear all of them.
The form posts either the classic way or through the REST route, and both carry the same form nonce. The REST route asks for it on top of the standard WordPress REST nonce, so a replayed or cross-site post is refused before anything is read.
Logged-out senders answer a small sum such as 13 plus 6. The expected answer travels as a hash and is compared with a timing-safe check, so it cannot be read off the page source. Signed-in members never see it, because being signed in is already the proof.
Name 2 to 100 characters, subject 3 to 200, message 10 to 5000. These are enforced on the server, not just as HTML attributes, and the classic and REST paths run the same validator so neither is the soft way in.
Messages are screened for the usual pharmacy, casino, loan-offer, act-now and prize-winner phrasing, and for bodies stuffed with three or more links. Every verdict passes through the bcm_spam_check filter, so a site can loosen it for a community where those words are ordinary talk.
Delete is owner-scoped as well. The REST route that removes a message checks that the person asking is the one it was addressed to, so a message ID cannot be guessed into someone else's inbox.
Settings
Access
Who can send messages
Who can be contacted
Notifications
The email itself is a BuddyPress email template, so its subject, body and branding are edited beside every other one under Emails.
A master switch turns the profile tab on or off site wide. With it off the form still works through the shortcode, so a site can place it deliberately rather than everywhere.
One grid picks who may send, visitors included as their own group. A second picks whose profiles carry a form at all, which is how a site keeps inbound mail pointed at tutors or support staff. Leave a grid empty and it means everyone. Administrators always pass.
A member switch set to off is checked before any role grid runs. The tab disappears from their profile, the shortcode renders nothing for them, and a submission aimed at them is turned away with a plain message. An allowed role cannot put it back.
Pricing
Personal, Professional and Agency all ship the same Contact tab, the same spam screening and the same controls. The plan decides site count and how fast support replies. Every plan is annual or a one time lifetime licence. Read the refund policy.
Multiple sites
$99/year
or $299 once · lifetime
Every plan includes the full list above. Version 1.5.0, tested to WordPress 6.9. 30-day money-back guarantee.
Before you install
It adds a Contact tab to the BuddyPress member profile. On another member's profile that tab holds a message form; on your own it holds an inbox of what people have sent you, plus a preferences screen for switching the form off.
No, and that is the point. Private messages need both people registered and signed in. Contact Me stores the submission in its own table and alerts the recipient by BuddyPress notification and email, so a visitor with no account can still reach a member. When the recipient wants to answer a fellow member, the message view offers a link into the BuddyPress compose screen.
Yes, once you allow it. The sender list carries a "Visitors (not logged in)" group alongside the WordPress roles. With it selected, guests get name and email fields so the member can reply. Leave the sender list completely empty and everyone is allowed, guests included.
Logged-out senders answer an arithmetic question whose expected answer travels as a hash and is compared with a timing-safe check. Every submission also carries a nonce, is bounded server side at 200 characters of subject and 5000 of message, and is screened for pharmacy, casino, loan-offer and prize-winner phrasing or three or more links. The screen result runs through the bcm_spam_check filter if your community needs it loosened.
Yes, and the member has the last word. A switch on their Contact preferences, mirrored on BuddyPress Settings, hides the tab from their profile, makes the shortcode render nothing for them, and turns away any message aimed at them. It is checked before the role rules, so an allowed role cannot override it.
Two grids, working on both ends. One picks which roles may send, the other picks whose profiles carry a form at all, which is how sites point inbound mail at tutors, mentors or support staff. Leave a grid empty and it means everyone. Administrators always pass either way.
In the Inbox sub-tab of their own profile. Messages list newest first, ten to a page, with All and Unread tabs carrying their own counts. Opening one marks it read and offers a reply by email, a jump to private messages, or delete. Delete is scoped to the recipient, so a message ID cannot be guessed into another inbox.
Yes. The alert is a BuddyPress email template, so its subject, body and branding are edited alongside every other BuddyPress email under Emails. You can also switch the in-site notification and the email on or off independently, send the sender a copy as their record, and BCC the site admin for moderation.
Use the [buddypress-contact-me] shortcode with an id or user attribute to place it on any page for a specific member. If you want the shortcode to be the only placement, turn the profile tab off in the settings and the shortcode keeps working.
Yes to both. BuddyBoss Platform is detected at runtime and member links are resolved its way. The frontend colours inherit BuddyX and Reign theme variables instead of painting WordPress admin blue, and dark mode follows the class the host theme sets rather than the operating system, so it matches whatever switch your site already has. An RTL stylesheet ships with it.
BuddyPress or BuddyBoss Platform, WordPress 6.0 or newer and PHP 7.4 or newer. Version 1.5.0 is tested to WordPress 6.9. The in-site notification channel also needs the BuddyPress Notifications component active.
There is no free edition, and every purchase carries a 30-day money-back guarantee. All three tiers ship the identical feature set. Personal covers one site, Professional covers several, Agency is unlimited, and each is available annually or as a one time lifetime licence.
Yes. Documentation and support are available through the Wbcom Designs support channels.
From $49 a year
Activate the plugin, decide whether visitors may write, and the Contact tab is on every member profile. Each member keeps the switch that turns their own form off, so being reachable stays their decision rather than yours.
WBComDesigns is amazing. The WP plugins and themes are of top notch quality with lots of features and updated very frequently. Supports are very responsive and helpful. I use Reign with TutorLMS, and the experience is surprisingly smooth.…