Skip to content
PluginCanary

Cognito Forms

by Cognito Forms · 2,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 19 Aug 2026, 6 releases in 24 months, no unpatched vulnerabilities.

98/ 100 Canary Score
Sub-scores for Cognito Forms
Ownership100
Maintenance100
Security95
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Cognito Forms still maintained?
Yes. Last release 19 Aug 2026, 6 releases in the last 24 months. 19 Aug 2026 · wordpress.org
Who owns Cognito Forms, and has it changed hands?
No change recorded. Main committer cognitoapps since May 2014. 3 Nov 2026 · SVN log
Was Cognito Forms removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Cognito Forms safe?
1 known vulnerability, fixed (latest in 2.0.8). Not on the exploited list. 11 Dec 2024 · Wordfence Intelligence
Is the latest Cognito Forms update safe to install?
No ownership change before 2.0.12. No one-star spike after it. 19 Aug 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cognitoapps16 May 2014 to 19 Aug 2026, 52 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
3 months ago
Releases, 24 months
6
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Cognito Forms
Q1 20241
Q2 20240
Q3 20241
Q4 20242
Q1 20250
Q2 20251
Q3 20250
Q4 20250
Q1 20260
Q2 20262
Q3 20261
Q4 20260

Last release 19 Aug 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.0.

Rating distribution
5 star13
4 star1
3 star0
2 star2
1 star3

Security record

1 vulnerability in 24 months, patched (latest fixed in 2.0.8).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
11 Dec 2024Cognito Forms <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter6.4<= 2.0.72.0.8Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

2,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Cognito Forms
4 May 2026133
11 May 2026219
18 May 2026363
25 May 2026345
1 Jun 2026131
8 Jun 20261,455
15 Jun 2026278
22 Jun 2026182
29 Jun 2026154
6 Jul 2026342
13 Jul 2026160
20 Jul 2026143
27 Jul 2026164
3 Aug 2026267
10 Aug 2026129
17 Aug 20261,695
24 Aug 2026322
31 Aug 2026369
7 Sep 2026173
14 Sep 2026202
21 Sep 2026160
28 Sep 2026186
5 Oct 2026153
12 Oct 2026158
19 Oct 2026211
26 Oct 2026214
2 Nov 202652

Weekly downloads over the last 4 weeks are 49% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Zoho FormsScore 100 · 10,000+

Facts

Version2.0.12
AuthorCognito Forms
Added16 May 2014
Last updated19 Aug 2026
Active installs2,000+
Requires WordPress3.5
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagsform, forms, cognito, create form, cognito forms

Questions

Is Cognito Forms still maintained?

Yes. Last release 19 Aug 2026, 6 releases in the last 24 months.

Who owns Cognito Forms, and has it changed hands?

No change recorded. Main committer cognitoapps since May 2014.

Was Cognito Forms removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Cognito Forms safe?

1 known vulnerability, fixed (latest in 2.0.8). Not on the exploited list.

Is the latest Cognito Forms update safe to install?

No ownership change before 2.0.12. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue