shouldiuse.io

Categories

VERDICT

Formidable Forms Review

Depends

Should I use Formidable Forms?

WordPress form plugin that turns form entries into directories, web apps, calculators, and views. - formidableforms.com

· 1 month ago

Buy it if you're on WordPress and need calculators, directories, or form-driven web apps. Skip it if you just need a contact form — free or simpler plugins will do.

Confidence

Medium. Based on 14 public sources; no first-party pricing figures surfaced.

Ratings

  • Value for moneyNo pricing numbers in reviewed sources
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
ProNot disclosed in reviewed sources

Best for

  • WordPress sites needing calculators and quote tools
  • Directory and listing builders
  • Agencies building client portals on WordPress
  • No-code form-driven web apps

Not for

  • Anyone who just needs a basic contact form
  • Non-WordPress sites entirely
  • Owners who won't patch plugin vulnerabilities fast
  • Site owners obsessed with lean page speed

Gotchas - check before you buy

high

2026 payment-bypass flaw let unauthenticated attackers pay less on 300,000+ sites

high

Multiple stored-XSS CVEs disclosed; skip updates and you're exposed

medium

Real features sit behind Pro tiers; no pricing numbers surfaced in sources — verify before buying

medium

Reddit users report it slows sites down; benchmark on your host first

Pros and cons

Pros

  • Builds calculators, directories, and web apps — not just forms
  • 400+ ready-made templates, from contact to payment forms
  • Free version solidly covers the basics
  • Support widely praised as quick, thorough, patient
  • Handles conditional logic and multi-page data persistence well

Cons

  • Overkill for simple contact forms
  • Some users report noticeable site slowdown
  • UI reportedly needs work despite the power
  • Support reports are mixed despite mostly good ratings

Sources & method

- 14 sources - Patch-discipline required: CVEs spanning 2017–2026, including an unauthenticated payment bypass and stored XSS.

official x2review x8security x3news x1
  • Payment bypass flaw (March 2026), Unauthenticated attackers could pay less for expensive purchases; plugin on 300,000+ sites affected.
  • CVE-2026-18331 — stored XSS, Stored cross-site scripting in the plugin, disclosed August 2026.
  • Unauthenticated stored XSS, versions < 2.05.03, Older versions allowed unauthenticated stored XSS; fixed by updating immediately.

Key stats

  • Ease of use: 4/5

    Rating

  • $0

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money. No pricing numbers in reviewed sources
  • Ease of use: 4/5. Repeatedly called easy despite the depth
  • Feature depth: 5/5. Calculators, views, directories; reviewers call it most capable
  • Support quality: 4/5. Mostly praised; one loud Reddit dissenter
  • Security posture: 2/5. Repeated CVEs, including unauthenticated payment bypass
  • 300,000+ Sites installed per March 2026 payment-flaw coverage
  • Yes Free tier free core version on WordPress.org
  • 400+ Templates ready-made form templates

Pricing

Free

$0

  • Drag-and-drop builder
  • Covers form basics
  • Community support

Pro

Not disclosed

  • Payments, calculators, views
  • Conditional logic
  • 400+ templates

Security

Patch-discipline required: CVEs spanning 2017–2026, including an unauthenticated payment bypass and stored XSS.

  • Payment bypass flaw (March 2026)Unauthenticated attackers could pay less for expensive purchases; plugin on 300,000+ sites affected.11
  • CVE-2026-18331 — stored XSSStored cross-site scripting in the plugin, disclosed August 2026.12
  • Unauthenticated stored XSS, versions < 2.05.03Older versions allowed unauthenticated stored XSS; fixed by updating immediately.13

What users say

Users praise its power, templates, and support, while some find it heavy and the UI dated.

“Relatively easy to use, with a lot of advanced features. Formidable forms is the most sophisticated and customizable WordPress Form plugin I've ever used.”
Software Advice review
“Formidable Forms is my go-to app because it's easy to use, and support is quick, thorough and patient in the rare occasion I need help.”
Capterra review
“I find them slows down site quite a lot for a form”
Reddit, r/Wordpress
Full analysis

Based on 14 public sources; no first-party pricing figures surfaced.

Powerful WordPress form builder for apps and calculators — overkill for simple forms, and its security record demands fast patching.

Methodology

Based on 14 public sources; no first-party pricing figures surfaced.

Read how a report is made.

Sources

  1. Formidable Forms — official siteformidableforms.com
    official
  2. Formidable Forms on WordPress.orgwordpress.org
    official
  3. Formidable Forms Review: Unmatched Power, Overkill for...fatlabwebsupport.com
    review
  4. The 8 best WordPress form plugins — Zapierzapier.com
    review
  5. Formidable Forms Reviews — G2g2.com
    review
  6. Formidable Forms Software Reviews — Software Advicesoftwareadvice.com
    review
  7. Formidable Forms Cost & Reviews — Capterracapterra.com.au
    review
  8. Formidable Forms Review — BlogVaultblogvault.net
    review
  9. Looking for advanced form plugin — Redditreddit.com
    review
  10. Battle of the Form Builders — Redditreddit.com
    review
  11. Formidable Forms Flaw Lets Attackers Pay Less — Search Engine Journalsearchenginejournal.com
    news
  12. CVE-2026-18331 — SentinelOne vulnerability databasesentinelone.com
    security
  13. Formidable Form Builder < 2.05.03 stored XSS — Wordfencewordfence.com
    security
  14. WordPress Sites Exposed by Formidable Forms Flaws — SecurityWeeksecurityweek.com
    security

Add this review to your site

This check for Formidable Forms says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Formidable Forms Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.