Skip to content
PluginCanary

Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

by Strategy11 Team · 300,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 29 Oct 2026, fixed in 7.0.

81/ 100 Canary Score
Sub-scores for Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 7.0. Update to version 7.0 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Oct 2026, fixed in 7.0. Update to version 7.0 or later.21 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 6.35. Update to version 6.35 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 6.35. Update to version 6.35 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 25 Aug 2026, fixed in 6.34. Update to version 6.34 or later.25 Aug 2026Evidence
  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sswells12 Dec 2009 to 3 Apr 2024, 1142 commits
formidableforms4 Jan 2021 to 16 Oct 2026, 146 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
19 days ago
Releases, 24 months
35
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Q1 20247
Q2 20244
Q3 20247
Q4 20247
Q1 20254
Q2 20254
Q3 20256
Q4 20254
Q1 20263
Q2 20264
Q3 20264
Q4 20261

Last release 16 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter8.8<= 6.357.00
21 Oct 2026Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder < 7.0 - Unauthenticated Denial of Service7.5< 7.07.00
14 Sep 2026Formidable Forms <= 6.34 - Unauthenticated Content Injection5.3<= 6.346.350
14 Sep 2026Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode Execution6.5<= 6.346.350
25 Aug 2026Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter7.2<= 6.33.16.340
25 Jun 2026Formidable Forms <= 6.32.0 - Unauthenticated Payment Bypass5.3<= 6.32.06.32.10
12 Mar 2026Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter5.3<= 6.286.290
12 Mar 2026Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse7.5<= 6.286.290
22 Nov 2024Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter6.1<= 6.16.1.26.16.20
31 Oct 2024Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.14 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 6.146.14.10
30 Jul 2024Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting4.9<= 6.11.16.11.21
26 Jan 2024Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting6.1<= 6.7.26.80
8 Jan 2024Formidable Forms <= 6.7 - HTML Injection6.5<= 6.76.7.10
8 Jan 2024Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 6.76.7.10
31 May 2023Formidable Forms <= 6.3 - Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation6.5< 6.3.16.3.10
6 Apr 2023Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection9.8<= 6.1.26.21
6 Mar 2023Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header5.3<= 6.0.16.10
1 Feb 2023Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery7.1<= 5.5.65.5.71
16 Dec 2022Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery5.4<= 5.5.45.5.50
16 Dec 2022Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery4.7<= 5.5.45.5.50
6 Oct 2021Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting4.8< 5.0.075.0.070
28 Jan 2021Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting9.6< 4.09.054.09.05435
9 Aug 2019Formidable Form Builder <= 4.02 - PHP Object Injection9.8< 4.02.014.02.01973
13 Nov 2017Formidable Form Builder < 2.05.03 - SQL Injection8.6< 2.05.032.05.03927
13 Nov 2017Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting6.1< 2.05.032.05.03927

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Q2 20264.9
Q3 20264.4
Q4 20265.0

Average rating rose from 4.9 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star1270
4 star39
3 star15
2 star10
1 star54
Latest low reviews

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
4 May 20267,119
11 May 202612,557
18 May 202624,569
25 May 2026129,748
1 Jun 202626,516
8 Jun 202617,584
15 Jun 2026126,811
22 Jun 2026137,274
29 Jun 202624,586
6 Jul 202630,466
13 Jul 2026222,470
20 Jul 202630,487
27 Jul 202619,411
3 Aug 202615,875
10 Aug 2026135,511
17 Aug 202639,087
24 Aug 202624,045
31 Aug 202616,455
7 Sep 2026129,188
14 Sep 202643,506
21 Sep 202624,721
28 Sep 202614,985
5 Oct 202614,012
12 Oct 2026125,134
19 Oct 202639,738
26 Oct 202636,880
2 Nov 20263,007

Weekly downloads over the last 4 weeks are 6% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - JotformScore 91 · 20,000+Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & MoreScore 91 · 10,000+Contact Form Clean and SimpleScore 91 · 7,000+Formzu WPScore 91 · 3,000+Woorise - Forms, Quizzes & GiveawaysScore 91 · 1,000+

Facts

Version7.0
AuthorStrategy11 Team
Added12 Dec 2009
Last updated16 Oct 2026
Active installs300,000+
Requires WordPress6.3
Tested up to7.1.4
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagsforms, custom form, contact form, form builder, payment form

Other plugins by this author: Business Directory Plugin - Easy Listing & Member Directories for WordPress, AWP Classifieds, Contact Form 7 Widget, Tasty Recipes Lite - WordPress Recipe Card Plugin with Built-In Recipe Schema, Contact Form Migrator from Gravity Forms to Formidable, Contact Form Migrator from Pirate Forms to Formidable

Questions

Is Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder still maintained?

Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder was last updated on 16 Oct 2026. Its Canary status is Healthy.

Is Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder safe?

Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder has no open unpatched vulnerabilities on record. 9 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder?

The wordpress.org author is Strategy11 Team. Recent committers: formidableforms, sswells, jamie.wahlin, srwells, plugin-master. We have recorded no ownership change.

What can I use instead of Formidable Forms - Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder?

Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue