Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1000 searches this plugin appeared in over the last 90 days, 20 listed. 785 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 23 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

1. ★★★★★ sipcgc

   4mo ago

   After years trying different form creation tools, I’ve finally found one that does everything it says, and everything I need and more. There are plenty of tutorials, and their support team are excellent. I’ve logged 2 calls so far, and both issues were addressed the same day.I highly recommend paying for the subscription. The suport alone is worth it. The addons you get extend simple form creation to the level of online apps with automated payment systems, email notifications, invoicing, reporting, and so much more.There’s a bit of a learning curve, but you have to expect that with a tool as flexible as Formidable Forms. As I mentioned, there’s plenty of help available.Nice job, and thank you!

   Read on wp.org ↗
2. ★★★★★ sotosx

   4mo ago

   Our 1st choice for extended functionality forms!

   Read on wp.org ↗
3. ★★★★★ JR72

   4mo ago

   I needed a form to create an event registration form with repeater fields to allow one person to buy tickets for multiple people at a time, with a variety of details per person – Formidable was the only form builder I could find to offer this with a sensible annual license cost. I had some issue with Stripe integration and caching, but the Formidable support team have been absolutely great at responding to support tickets ultra fast, with clear and calm help which worked first time every time so far. there are options to create custom styling with CSS. There are a couple of tiny niggle with how the builder works but really for the money, it has been great. Easy to see booker entries, payment statuses, easy to refund if necessary, and easy to export data. Hidden fields is a boon as is permission/role based visibility.

   Read on wp.org ↗
4. ★★★★★ johanndm

   5mo ago

   Formidable Forms is an excellent product. It is extremely feature-rich, reliable, and works exactly as expected. It offers a huge amount of flexibility and functionality, making it a very strong solution for building forms and managing more advanced requirements. What really stands out, though, is the support. Every single time I have needed help or had to deal with the support team, my experience has been excellent — 100% of the time. They are professional, helpful, and responsive. A great product backed by great people. Highly recommended.

   Read on wp.org ↗
5. ★★★★★ nasbotic

   5mo ago

   Formidable Forms is an excellent plugin with many features, great support team – thanks so much….

   Read on wp.org ↗
6. ★★★★★ corpconv

   5mo ago

   Had an issue with a form on a site, using the Lite version – and support sent detailed instructions on how to troubleshoot the issue I was having. Immensely helpful and appreciated. We typically use the Pro version – no complaints at all, it’s a great plugin with many great features. Especially love the conversational add-on. Highly recommend.

   Read on wp.org ↗
7. ★★★★★ bernicembutler

   5mo ago

   Formidable Forms has made my life so much easier as an event planner.

   Read on wp.org ↗
8. ★★★★★ jmguridi

   5mo ago

   This plugin is extraordinary

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 6.33.1 Fix: Public taxonomy pages could result in 404 errors, caused by a missing check in the new Gated Content actions. See changelog for all versions 6.33.1
2. — Version 6.33 New: A new Gated Content form action type has been added. Now you can easily give access to restricted pages, views, pdfs, and files! New: A new Spam settings section has been added to Form settings. Several spam setting 6.33
3. — Version 6.32.1 Security: An issue has been fixed where requests could be manipulated to attempt form submissions using test payments instead of live payments, for Stripe, Square, and PayPal Commerce. Security: An incorrect status check 6.32.1
4. — Version 6.32 New: The form listing table now includes new Embeds and List Settings columns, for displaying every post and page where a form is embedded, and an added gear icon for controlling screen options. New: The generated Formid 6.32
5. — Version 6.34 Security: Additional validation has been added to guarantee that submitted HTML in form data by untrusted users cannot be used for XSS. New: Address fields are now included in Lite! New: Address field data is included in 6.34
6. — Version 6.35 Security: More strict sanitizing is now applied to entry key values before it gets used in the HTML of a form. Security: The value that records who last saved an entry is now always set from the current user, not allowin 6.35

All 29 disclosed vulnerabilities are patched in the current version (7.0). Sites still on an older version should update.

1. Patched High · 8.8 Formidable Forms <= 6.35 - Authenticated (Subscriber+) Arbitrary Plugin Installation via 'file_url' Parameter ↗
   2026-10-29 CVE-2026-89435 Improper Neutralization of Special Elements in Output Used by a Downstream Component Affects <= 6.35 Patched in 7.0
2. Patched High · 7.5 Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder < 7.0 - Unauthenticated Denial of Service ↗
   2026-10-21 CVE-2026-85642 Uncontrolled Resource Consumption Affects < 7.0 Patched in 7.0
3. Patched Medium · 5.3 Formidable Forms <= 6.34 - Unauthenticated Content Injection ↗
   2026-09-14 CVE-2026-85641 Improper Input Validation Affects <= 6.34 Patched in 6.35
4. Patched Medium · 6.5 Formidable Forms <= 6.34 - Unauthenticated Arbitrary Shortcode Execution ↗
   2026-09-14 CVE-2026-19857 Improper Control of Generation of Code Affects <= 6.34 Patched in 6.35
5. Patched High · 7.2 Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter ↗
   2026-08-25 CVE-2026-18331 Improper Neutralization of Input During Web Page Generation Affects <= 6.33.1 Patched in 6.34
6. Patched Medium · 5.3 Formidable Forms <= 6.32.0 - Unauthenticated Payment Bypass ↗
   2026-06-25 CVE-2026-11361 Missing Authorization Affects <= 6.32.0 Patched in 6.32.1
7. Patched Medium · 5.3 Formidable Forms <= 6.28 - Unauthenticated Payment Amount Manipulation via 'item_meta' Parameter ↗
   2026-03-12 CVE-2026-2888 Authorization Bypass Through User-Controlled Key Affects <= 6.28 Patched in 6.29
8. Patched High · 7.5 Formidable Forms <= 6.28 - Missing Authorization to Unauthenticated Payment Integrity Bypass via PaymentIntent Reuse ↗
   2026-03-12 CVE-2026-2890 Missing Authorization Affects <= 6.28 Patched in 6.29
9. Patched Medium · 6.1 Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.16.1.2 - Reflected Cross-Site Scripting via Custom HTML Form Parameter ↗
   2024-11-22 CVE-2024-11188 Improper Neutralization of Input During Web Page Generation Affects <= 6.16.1.2 Patched in 6.16.2
10. Patched Medium · 4.4 Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder <= 6.14 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-10-31 CVE-2024-9768 Improper Neutralization of Input During Web Page Generation Affects <= 6.14 Patched in 6.14.1
11. Patched Medium · 4.9 Formidable Forms <= 6.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
    2024-07-30 CVE-2024-6725 Improper Neutralization of Input During Web Page Generation Affects <= 6.11.1 Patched in 6.11.2
12. Patched Medium · 6.1 Formidable Forms <= 6.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
    2024-01-26 CVE-2024-0660 Cross-Site Request Forgery Affects <= 6.7.2 Patched in 6.8
13. Patched Medium · 4.4 Formidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-01-08 CVE-2023-6842 Improper Neutralization of Input During Web Page Generation Affects <= 6.7 Patched in 6.7.1
14. Patched Medium · 6.5 Formidable Forms <= 6.7 - HTML Injection ↗
    2024-01-08 CVE-2023-6830 Improper Neutralization of Input During Web Page Generation Affects <= 6.7 Patched in 6.7.1
15. Patched Medium · 6.5 Formidable Forms <= 6.3 - Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation ↗
    2023-05-31 CVE-2023-2877 Missing Authorization Affects < 6.3.1 Patched in 6.3.1
16. Patched Critical · 9.8 Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection ↗
    2023-04-06 CVE-2023-1405 Deserialization of Untrusted Data Affects <= 6.1.2 Patched in 6.2
17. Patched Medium · 5.3 Formidable Forms <= 6.0.1 - IP Spoofing via HTTP header ↗
    2023-03-06 CVE-2023-0816 Reliance on Untrusted Inputs in a Security Decision Affects <= 6.0.1 Patched in 6.1
18. Patched High · 7.1 Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery ↗
    2023-02-01 CVE-2023-24419 Cross-Site Request Forgery Affects <= 5.5.6 Patched in 5.5.7
19. Patched Medium · 5.4 Formidable Form Builder <= 5.5.4 - Cross-Site Request Forgery ↗
    2022-12-16 CVE-2022-45806 Cross-Site Request Forgery Affects <= 5.5.4 Patched in 5.5.5
20. Patched Medium · 4.7 Formidable Forms <= 5.5.4 - Authenticated (Admin+) Server-Side Request Forgery ↗
    2022-12-16 Server-Side Request Forgery Affects <= 5.5.4 Patched in 5.5.5
21. Patched Medium · 4.8 Formidable Form Builder <= 5.0.06 - Admin+ Stored Cross-Site Scripting ↗
    2021-10-06 CVE-2021-24608 Improper Neutralization of Input During Web Page Generation Affects < 5.0.07 Patched in 5.0.07
22. Patched Critical · 9.6 Formidable Form Builder <= 4.09.04 - Unauthenticated Stored Cross-Site Scripting ↗
    2021-01-28 CVE-2021-24884 Improper Neutralization of Input During Web Page Generation Affects < 4.09.05 Patched in 4.09.05
23. Patched Critical · 9.8 Formidable Form Builder <= 4.02 - PHP Object Injection ↗
    2019-08-09 CVE-2019-15780 Deserialization of Untrusted Data Affects < 4.02.01 Patched in 4.02.01
24. Patched High · 8.6 Formidable Form Builder < 2.05.03 - SQL Injection ↗
    2017-11-13 Improper Neutralization of Special Elements used in an SQL Command Affects < 2.05.03 Patched in 2.05.03
25. Patched High · 8.3 Formidable Form Builder < 2.05.03 - Unauthenticated Stored Cross-Site Scripting ↗
    2017-11-13 CVE-2017-20192 Improper Neutralization of Input During Web Page Generation Affects < 2.05.03 Patched in 2.05.03
26. Patched Medium · 6.1 Formidable Form Builder < 2.05.03 - Reflected Cross-Site Scripting ↗
    2017-11-13 Improper Neutralization of Input During Web Page Generation Affects < 2.05.03 Patched in 2.05.03
27. Patched Medium · 5.3 Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure ↗
    2017-11-12 CVE-2017-20194 Exposure of Sensitive Information to an Unauthorized Actor Affects < 2.05.03 Patched in 2.05.03
28. Patched Critical · 9.1 Formidable Form Builder <= 2.0.21 - Missing Authorization Checks ↗
    2016-02-16 Improper Access Control Affects <= 2.0.21 Patched in 2.0.22
29. Patched High · 8.8 Formidable Form Builder <= 1.07.11 - SQL Injection ↗
    2016-01-26 CVE-2014-9309 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.07.11 Patched in 2.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 102 languages, 1 at 90% or more

Plus 78 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-11-30 400K+ → 300K+ down after 203 days in tier
2. 2024-05-11 300K+ → 400K+ up after 1653 days in tier
3. 2019-11-01 200K+ → 300K+ up after 758 days in tier
4. 2017-10-04 300K+ → 200K+ down after 551 days in tier
5. 2016-04-01 200K+ → 300K+ up after 27 days in tier
6. 2016-03-05 100K+ → 200K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder into a readme, a review or a deck. It updates itself.

Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder: 300K+ active installs, 4.8★ (1,387 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/formidable