Skip to content
PluginCanary

Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

by WPManageNinja · 800,000+ active installs · Checked 3 Nov 2026
Healthy8 Warnings

Healthy: vulnerability published 19 Oct 2026, fixed in 6.2.16.

88/ 100 Canary Score
Sub-scores for Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Ownership100
Maintenance100
Security60
Support100
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 6.2.16. Update to version 6.2.16 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 6.2.6. Update to version 6.2.6 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 6.2.15. Update to version 6.2.15 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 6.2.15. Update to version 6.2.15 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 6.2.15. Update to version 6.2.15 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 12 Aug 2026, fixed in 6.2.12. Update to version 6.2.12 or later.12 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 11 Aug 2026, fixed in 6.2.5. Update to version 6.2.5 or later.11 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 10 Aug 2026, fixed in 6.2.1. Update to version 6.2.1 or later.10 Aug 2026Evidence
  • InfoSEC-328 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
techjewel29 Dec 2017 to 22 Aug 2026, 119 commits
adreastrian24 Feb 2022 to 2 Nov 2026, 56 commits
pyrobd8 Sep 2023 to 28 Jul 2026, 82 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
53
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
Q1 20245
Q2 20248
Q3 20245
Q4 20245
Q1 20256
Q2 20253
Q3 20255
Q4 20258
Q1 20269
Q2 20266
Q3 202610
Q4 20262

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 9 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.15 - Missing Authorization5.3<= 6.2.156.2.160
9 Oct 2026Fluent Forms <= 6.2.5 - Missing Authorization to Authenticated (Custom+) Sensitive Data Exposure and Modification5.4<= 6.2.56.2.60
9 Oct 2026Fluent Forms <= 6.2.14 - Reflected Cross-Site Scripting via '{get.*}' Editor SmartCode Parameter4.7<= 6.2.146.2.150
1 Oct 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.2.146.2.150
1 Oct 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.2.14 - Missing Authorization5.3<= 6.2.146.2.150
12 Aug 2026Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values7.2<= 6.2.116.2.120
11 Aug 2026Fluent Forms <= 6.2.4 - Insecure Direct Object Reference to Authenticated (Form Manager+) Cross-Form Submission Entry Deletion4.3<= 6.2.46.2.50
10 Aug 2026Fluent Forms <= 6.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Subscription Cancellation4.3<= 6.2.06.2.10
31 Jul 2026Fluent Forms <= 6.2.8 - Reflected Cross-Site Scripting via 'param'6.1<= 6.2.86.2.90
30 Jul 2026Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter5.3<= 6.2.86.2.90
30 Jul 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder < 6.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 6.2.66.2.60
28 Jul 2026Fluent Forms <= 6.2.7 - Unauthenticated Stored Cross-Site Scripting via Name Field Nested `password` Member7.2<= 6.2.76.2.80
9 Jul 2026Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Subscription Cancellation via 'subscription_id'5.4<= 6.2.16.2.20
13 May 2026Fluent Forms <= 6.2.0 - Authenticated (Subscriber+) Authorization Bypass via 'table' Parameter8.2<= 6.2.06.2.10
13 May 2026Fluent Forms <= 6.1.21 - Authenticated (Subscriber+) Authorization Bypass via 'form_id' Parameter8.2<= 6.1.216.2.00
12 May 2026Fluent Forms <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'permission_message' Shortcode Attribute6.4<= 6.2.16.2.20
5 May 2026Fluent Forms <= 6.2.1 - Authenticated (Administrator+) Arbitrary File Read via Path Traversal in Email Attachment4.9<= 6.2.16.2.20
16 Apr 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.21 - Insecure Direct Object Reference in Stripe SCA Confirmation to Unauthenticated Payment Status Modification5.36.1.216.2.00
9 Feb 2026Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module6.4<= 6.1.146.1.150
25 Jan 2026Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 6.1.14 - Missing Authorization4.3<= 6.1.146.1.155
13 Jan 2026FluentForm <= 6.1.11 - Unauthenticated Arbitrary Shortcode Execution6.5<= 6.1.116.1.120
6 Jan 2026Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder5.3<= 6.1.76.1.80
5 Dec 2025Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id5.3<= 6.1.76.1.80
2 Sep 2025Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read6.55.1.16 to 6.1.16.1.20
16 Apr 2025Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 6.0.26.0.30

Source: Wordfence Intelligence.

Reputation

Average rating fell from 5.0 to 4.6 between Q3 2026 and Q4 2026.

Rating distribution
5 star758
4 star11
3 star11
2 star6
1 star22
Latest low reviews

Momentum

800,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder
4 May 202623,176
11 May 202641,196
18 May 2026231,112
25 May 2026229,416
1 Jun 202648,839
8 Jun 2026217,311
15 Jun 202655,088
22 Jun 202638,497
29 Jun 202633,874
6 Jul 2026208,866
13 Jul 2026274,450
20 Jul 2026235,090
27 Jul 2026258,032
3 Aug 2026274,176
10 Aug 2026278,708
17 Aug 2026214,892
24 Aug 202689,315
31 Aug 202654,200
7 Sep 202640,327
14 Sep 2026260,991
21 Sep 202670,954
28 Sep 2026240,777
5 Oct 202695,324
12 Oct 2026217,599
19 Oct 202699,910
26 Oct 202683,420
2 Nov 202693,264

Weekly downloads over the last 4 weeks are 17% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version6.2.17
AuthorWPManageNinja
Added29 Dec 2017
Last updated2 Nov 2026
Active installs800,000+
Requires WordPress6.4
Tested up to7.1.4
Requires PHP7.4
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, WP Forms, custom form, contact form, form builder

Other plugins by this author: FluentSMTP - WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP, FluentCRM - Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution, Ninja Tables - Easy Data Table Builder, FluentSnippets - High-Performance Code Snippets, Header & Footer Code, Custom CSS & PHP Code Manager, Fluent Booking - The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution, Fluent PDF Generator, Fluent Support - Helpdesk & Customer Support Ticket System, FluentAuth - Login Security, Two-Factor Authentication, Passkeys & Social Login, FluentCart - Online Store Builder & eCommerce Checkout, FluentCommunity - Ultra-Fast High-Performance Social Network, Community, LMS & Online Courses, Paymattic - Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management, FluentAffiliate - Affiliate Program Management Suite, Affiliates Manager

Questions

Is Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder still maintained?

Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder safe?

Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder has no open unpatched vulnerabilities on record. 28 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder?

The wordpress.org author is WPManageNinja. Recent committers: adreastrian, techjewel, pyrobd, plugin-master. We have recorded no ownership change.

What can I use instead of Fluent Forms - Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue