Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

86 Quality Score

Active Installs

25/30

With 300,000 active installs it is widely used but sits well below giants like WPForms Lite and Contact Form 7, reflecting a more niche, power-user audience.

Update Freshness

25/25

Updated on July 14, 2026, and tested against WordPress 7.0.1 with a PHP 7.0 minimum, the maintenance signal is strong and current.

User Rating

14/15

A 96 out of 100 from 1,375 reviews indicates very high user satisfaction relative to comparable plugins in the category.

Support Health

8/15

Only 4 tracked support threads exist with a 100 percent resolution rate, which is good but the small sample size limits confidence in long-term support responsiveness.

WP Compatibility

15/15

Tested with the latest WordPress release and requiring only PHP 7.0 and WordPress 6.3, compatibility is broad and accessible to nearly every modern host.

Scores higher than 97% of indexed plugins

About

The most powerful drag and drop WordPress form builder for contact forms, payment forms, calculators, quizzes, surveys, and data-driven applications.

Active Installs 300k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-09 4:18pm GMT

Requires WordPress 6.3+

Tested Up To 7.1

Requires PHP 7.0+

Security History

27 known vulnerabilities, all patched

4 Critical 6 High 17 Medium

Most recent: September 14, 2026

View details ▸

Formidable Forms <= 6.34 - Unauthenticated Content Injection Medium

September 14, 2026 Patched in ["6.35"] CVE-2026-85641

Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode Execution Medium

September 14, 2026 Patched in ["6.35"] CVE-2026-19857

Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter High

August 25, 2026 Patched in ["6.34"] CVE-2026-18331

Formidable Forms <= 6.32.0 - Unauthenticated Payment Bypass Medium

June 25, 2026 Patched in ["6.32.1"] CVE-2026-11361

Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter Medium

March 12, 2026 Patched in ["6.29"] CVE-2026-2888

Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse High

March 12, 2026 Patched in ["6.29"] CVE-2026-2890

Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter Medium

November 22, 2024 Patched in ["6.16.2"] CVE-2024-11188

Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.14 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

October 31, 2024 Patched in ["6.14.1"] CVE-2024-9768

Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

July 30, 2024 Patched in ["6.11.2"] CVE-2024-6725

Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Medium

January 26, 2024 Patched in ["6.8"] CVE-2024-0660

Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

January 8, 2024 Patched in ["6.7.1"] CVE-2023-6842

Formidable Forms <= 6.7 - HTML Injection Medium

January 8, 2024 Patched in ["6.7.1"] CVE-2023-6830

Formidable Forms <= 6.3 - Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation Medium

May 31, 2023 Patched in ["6.3.1"] CVE-2023-2877

Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection Critical

April 6, 2023 Patched in ["6.2"] CVE-2023-1405

Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header Medium

March 6, 2023 Patched in ["6.1"] CVE-2023-0816

Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery High

February 1, 2023 Patched in ["5.5.7"] CVE-2023-24419

Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery Medium

December 16, 2022 Patched in ["5.5.5"] CVE-2022-45806

Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery Medium

December 16, 2022 Patched in ["5.5.5"]

Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting Medium

October 6, 2021 Patched in ["5.0.07"] CVE-2021-24608

Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting Critical

January 28, 2021 Patched in ["4.09.05"] CVE-2021-24884

Formidable Form Builder <= 4.02 - PHP Object Injection Critical

August 9, 2019 Patched in ["4.02.01"] CVE-2019-15780

Formidable Form Builder < 2.05.03 - SQL Injection High

November 13, 2017 Patched in ["2.05.03"]

Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting High

November 13, 2017 Patched in ["2.05.03"] CVE-2017-20192

Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting Medium

November 13, 2017 Patched in ["2.05.03"]

Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure Medium

November 12, 2017 Patched in ["2.05.03"] CVE-2017-20194

Formidable Form Builder <= 2.0.21 - Missing Authorization Checks Critical

February 16, 2016 Patched in ["2.0.22"]

Formidable Form Builder <= 1.07.11 - SQL Injection High

January 26, 2016 Patched in ["2.0"] CVE-2014-9309

What It Does

Formidable Forms is a drag and drop WordPress form builder that goes well beyond simple contact forms. It supports calculators, quizzes, surveys, payment forms, and data-driven applications, letting you store, display, and act on submitted data inside WordPress. Add-ons extend it into directories, registrations, and integrations with email marketing and payment services.

Who It's For

It is best for site owners and developers who want more than a basic contact form, especially those building calculators, quote forms, multi-page application forms, or any solution where submitted data needs to be viewed, edited, or displayed on the front end. Small businesses and agencies building lead-generating or data-collection workflows will get the most out of it.

Who Should Skip It

If you only need a simple contact form on a brochure site, Formidable is overkill and Contact Form 7 or WPForms Lite will be lighter and faster. Beginners who do not want to learn view templates, hooks, or conditional logic should also look elsewhere.

The Bottom Line

Formidable Forms earns an overall 86.43 out of 100 and delivers real depth for users who want to build data-driven forms, not just message collectors. The learning curve is steeper than WPForms or Contact Form 7, and several key features live behind paid add-ons, so casual users may feel pushed toward upgrading. For sites that need calculators, applications, or stored form data, it is one of the strongest options in the WordPress ecosystem.

Pick Akismet if spam filtering is your actual problem, since Formidable does not focus on anti-spam.

WPForms – AI Form Builder for WordPress 97/100

Choose WPForms Lite for an easier beginner experience and a far larger install base of 5,000,000.

Forminator Forms – Contact Form, Payment Form & Custom Form Builder 94/100

Pick Forminator if you want a free, well-rounded form builder with strong quiz and poll features built in.

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 88/100

Choose Fluent Forms if you want a fast, modern UI and a generous free tier with conversational form support.

Contact Form 7 88/100

Pick Contact Form 7 if you need a lightweight, developer-friendly contact form and nothing else, with no builder overhead.

Compare Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More

Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More vs Forminator Forms – Contact Form, Payment Form & Custom Form Builder 93/100