Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder has 28 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 28 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 4 critical and 7 high. 2026 was the busiest year with 7 disclosures.
The most common weakness is Cross-Site Scripting, behind 10 of the records (36%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 28 issues recorded for Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder has a vendor fix available, so running the current release closes all known holes.
23 independent researchers contributed these findings, most of them (4) reported by Jouko Pynnöne. Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder is installed on roughly 300,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2023-1405Formidable Forms <= 6.1.2 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records

Formidable Forms – Contact Form, Survey, Quiz, Payment, Calculator Form & Custom Form Builder
Author
Strategy11 Team
Formidable Forms (https://formidableforms.com/?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion) is a WordPress form plugin, form maker, and quiz maker for contact forms, payment forms, survey forms, quiz forms, registration forms, and calculator forms, plus complete web applications, all built with a drag and drop form builder interface. A beginner can have a working contact form running in minutes. A developer can turn the same plugin into a data-driven registration system, a front-end directory, or a calculated pricing tool. One plugin covers the ground that otherwise takes five separate contact form plugins: forms, payments, surveys, quizzes, calculators, and web apps, all inside WordPress. Watch the video overview for the Formidable form builder, calculator, and quiz maker Formidable Pro This plugin is the free version of Formidable Pro, which adds email subscription forms, multi-page forms, file upload forms, quiz grading, and conditional logic. Add repeater fields, premium Stripe and PayPal payment integrations, cascading dropdowns, calculated fields, front-end editing, the AI form builder, and the web application builder. Get Formidable Pro and unlock every premium form feature. Start with the Lite vs Pro comparison. WordPress Form Builder for Every Type of Form Start from one of 300+ pre-built form templates, build a custom form from scratch, or describe the form you need in plain English and let the AI form builder create it. A simple contact form takes minutes with this plugin. Layer in conditional logic, multi-step pages, and calculated fields, and the same plugin produces registration forms, quote forms, and price calculator forms. Every form is mobile-responsive by default, and this plugin includes unlimited forms in the free version. AI Form Builder and MCP: Build Forms with Claude, ChatGPT, Cursor, or Any AI Agent Describe a contact form or quiz in a sentence and Formidable builds it. The AI form builder (Pro) turns a plain-text prompt into a complete, editable contact form, registration form, or quiz, with fields, validation, and layout already in place. Add an AI field inside any form to show a ChatGPT-generated response based on what a visitor typed, then reuse that text in confirmation messages, email notifications, or Formidable Views. Formidable also includes built-in Model Context Protocol (MCP) support, free in the plugin. Claude, ChatGPT, Cursor, or any MCP-compatible client can create and edit forms, entries, styles, form actions, payments, and subscriptions directly on your WordPress site from a chat prompt. No separate MCP adapter plugin or Composer setup is required. Payment Forms with Stripe, PayPal, Square, and More Accept credit card payments, subscriptions, and donations directly through your WordPress forms. This plugin connects to Stripe, PayPal, Square, and Authorize.net. Set up a donation form, a product order form, an event payment form, or a service booking form in a few minutes. Stripe and PayPal payment forms are available for free. Stripe supports ACH, Cash App, Klarna, and iDeal. A transaction fee applies without a Pro license. For in-person events, payment forms can also be set to cash, manual recording, or on-site collection, so hybrid businesses aren’t locked into a single workflow. Survey Forms, Quiz Forms, and Online Calculators Formidable’s survey form builder covers NPS fields, Likert scales, star ratings, and image choices, then turns the results into graphs and charts on your WordPress pages, without a separate SurveyMonkey subscription. As a quiz maker, it handles scored assessments, personality quizzes, and graded tests. Calculator forms cover mortgage calculators, loan calculators, BMI calculators, price calculators, and instant quote calculators, all driven by calculated fields that update as a visitor fills out the form. Build Directories, Listings, and Web Applications with Formidable Views Formidable is a web application builder as much as a form plugin. Formidable Views turns submitted registration form and entry data into a searchable database you can present as front-end pages: searchable directories, job boards, real estate listings, member directories, event calendars, and timeline views. No additional plugin is required. This plugin’s forms and Views work together, so a form’s data can become a full web application without leaving WordPress, with more built-in depth than Ninja Forms reaches through its own add-ons. Registration Forms, User Profiles, and Entry Management The repeater field builds registration forms for teams, events, and courses, with multiple rows of fields for each registrant on a registration form. Front-end profile editing lets users update their own registration form information without visiting the WordPress dashboard. Every registration form and contact form submission is stored in your WordPress database, exportable to CSV, and importable into Mailchimp and similar services. This plugin includes GDPR controls for IP tracking, saved submissions, and consent fields on any registration form or contact form, along with automated email notifications, autoresponders, and redirect rules after a form is submitted. Marketing, CRM, and Automation Integrations Formidable connects contact forms, registration forms, and payment forms to the rest of your marketing stack. Email Marketing: Direct integrations for Mailchimp, Constant Contact, AWeber, MailPoet, ActiveCampaign, HubSpot, Salesforce, GetResponse, and Campaign Monitor. CRM and Automation: Zapier connects contact forms, registration forms, and payment forms to thousands of apps, including Zoho CRM, Slack, Trello, and Twilio for SMS notifications. Newer integrations: Formidable connects to Google Sheets, sends entry data through webhooks to any endpoint, and works with Advanced Custom Fields (ACF) for developers already building with ACF. WooCommerce: Build custom WooCommerce product forms with variable pricing, configuration options, and calculated totals that flow into the cart. Multilingual: WPML and Polylang integrations for multilingual WordPress forms. Analytics and Reporting: Survey results, quiz scores, and calculator entries can all be charted automatically with Charts & Graphs, so a customer satisfaction survey or an NPS survey produces a report without exporting to a spreadsheet first. Combined with Formidable Views, the same entry data can be filtered and displayed as a live dashboard on the front end, for teams that want survey results or quiz completion rates visible to more than just the WordPress admin. Visual Form Styler and Advanced Fields Formidable includes a built-in visual style editor, so contact forms, survey forms, and payment forms can match your brand without custom CSS. Adjust colors, fonts, layouts, and field styles in a few clicks. Pro adds multi-page forms with progress bars, save-and-continue, cascading dropdowns, and digital signatures. Invisible spam protection (honeypot, Akismet, reCAPTCHA, hCaptcha, Cloudflare Turnstile) is included. Address fields are included in the free version, and Google address autofill and geolocation are available with the Geolocation add-on. Every form is WCAG-compliant and accessible by default. A WordPress Form Plugin for Every Industry Small businesses use Formidable for contact forms and lead capture. Financial services build loan and mortgage calculators. HR teams and researchers run survey forms and employee surveys, with results charted automatically instead of exported to a separate survey tool. Schools and event coordinators build registration forms. Nonprofits collect donations on a contact form or dedicated donation form. Legal and medical practices use file upload forms for intake. Real estate and job sites build front-end directories. Service businesses handle booking and appointment forms. Course creators and coaches use quiz forms to grade knowledge checks and route students based on their score. Market researchers looking for a Wufoo alternative or a paid SurveyMonkey plan get the same customer satisfaction survey and NPS survey reporting without leaving WordPress. Teams looking for a Formstack alternative for internal request forms find the same calculator and workflow features here, at no added monthly cost. Agencies comparing Fluent Forms or Forminator for calculator forms and a front-end data display layer typically find both together in Formidable. Full Formidable Forms Feature List From contact forms and registration forms to calculators and quizzes: Drag and Drop Form Builder – Build contact forms, payment forms, and survey forms visually AI Form Builder – Describe a form in plain text and have it built for you Formidable MCP Server – Let Claude, ChatGPT, or Cursor build and edit forms on your site ChatGPT Integration – Show AI-generated responses inside a form based on user input Calculator Forms – Mortgage, loan, BMI, price, and instant quote calculators Survey Forms – NPS, Likert scale, star rating, and image choice fields Quiz Maker & Quiz Form Builder – Scored quizzes, personality quizzes, and graded assessments Multi-Step Forms – Multi-page forms with progress bars and conditional logic Payment Forms – Stripe, PayPal, Square, and Authorize.net, online and in-person WooCommerce Form Builder – Custom product forms with dynamic pricing Formidable Views – Display form data as directories, job boards, and listings Directories – Turn entries into a searchable database presented as member and business directories Real Estate Listings – Property listing pages built from form entries Calendar Views – Display entries as an event calendar Timeline Views – Display entries as a chronological timeline Job Boards – Job listing and application sites built on form data Charts & Graphs – Turn survey and entry data into visual reports Web Application Builder – Build custom data-driven apps without code Form Templates – 300+ pre-built templates for every use case Conditional Logic – Show and hide fields dynamically based on answers File Upload Form – Accept documents, photos, and files in any form User Registration Form – Registration and profile forms for membership sites PDF Forms – Generate PDFs, certificates, and invoices from submissions Invisible SPAM Protection – Honeypot, Akismet, reCAPTCHA, hCaptcha, Cloudflare Turnstile Customize Form HTML – Full control over form HTML like Contact Form 7, plus drag and drop Conversational Forms – One question at a time, similar to Typeform Repeater Fields – Add multiple rows of fields in registration and order forms Visual Form Styler – Brand your forms with colors, fonts, and layouts Cascading Dropdown Fields – Dynamic dependent dropdowns for complex forms Digital Signatures – Collect signatures in contract and booking forms Front-End Editing – Let users edit their own submissions without logging in Save & Continue – Let users finish long forms on their own schedule WCAG-Compliant Forms – Accessible form plugin for all users Built by Strategy11 Formidable Forms is a WordPress plugin built by Steve and Steph Wells and the Strategy11 team, with Syed Balkhi (https://syedbalkhi.com/) as an advisor. Over 300,000 WordPress sites run this form maker for contact forms, registration forms, and payment forms. Its users have built more than 3 million forms and processed over $350 million in payments through Formidable-powered forms, and it holds a 4.8 out of 5 rating across more than 1,300 WordPress.org reviews. Formidable Forms vs. Gravity Forms, WPForms, JotForm, and Typeform If you’ve compared WordPress form plugins, you’ve probably looked at Gravity Forms, WPForms, JotForm, or Typeform. Formidable brings calculator forms, quiz forms, and front-end data display with Formidable Views into one plugin, so you don’t need separate tools for each. Form data stays in your own WordPress database instead of an external SaaS platform, and built-in MCP support lets AI clients like Claude and ChatGPT build and edit forms directly on your site. Formidable Branding Guidelines Formidable Forms is also known as Formidable, Formidable Form Builder, Formidable Pro, or Formidable Views. Formidable Forms Resources Docs and support (https://formidableforms.com/knowledgebase/?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion), the Formidable blog (https://formidableforms.com/blog/?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion), and the full release changelog (https://formidableforms.com/changelog/?utm_source=wprepo&utm_medium=link&utm_campaign=liteversion) are all linked from inside the plugin. Credits This online form and quiz builder is created by Steve and Steph Wells and the Strategy11 Team, with Syed Balkhi (https://syedbalkhi.com/) as an Advisor.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C