shouldiuse.io

VERDICT

Should I use Formidable Forms?

Over 400,000 users trust Formidable Forms, the best WordPress form plugin. Use our WordPress form builder to create contact forms, surveys, and calculators now! - formidableforms.com

Depends. Buy it if you run a WordPress site and need advanced forms — calculators, payments, conditional logic, directories. Skip it if you just need a simple contact form; free plugins do that fine.

Confidence

High. Based on 20+ public sources: reviews, Reddit threads, security databases, and pricing guides.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo direct evidence in sources.
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Pro tiers$39.50–$399/year

Best for

  • WordPress sites needing advanced forms
  • Agencies and developers
  • Calculators, payment, and directory forms
  • Conditional-logic and multi-step workflows

Not for

  • Anyone who just needs a basic contact form
  • Non-WordPress sites
  • Teams that won't patch plugin security updates promptly
  • Budget buyers wanting all features at one flat price

Gotchas - check before you buy

high

Freemium: top features locked until higher tiers up to $399/year; add-ons bill separately.

high

History of XSS, HTML-injection, and payment-flaw CVEs — apply security updates immediately.

medium

License renewals drew 'predatory business practices' complaints from a multi-year customer.

low

Deep feature set means a steeper learning curve for casual users.

Pros and cons

Pros

  • Over 400,000 users; long-established plugin
  • Independent reviewers call it the most capable WordPress form plugin
  • Strong conditional logic and custom functionality control
  • Drag-and-drop builder; forms built in minutes
  • Handles payments, calculators, surveys, multi-step forms in one plugin

Cons

  • Overkill for simple forms
  • Add-ons cost $39–$89 each on top of license
  • Recurring XSS and injection vulnerabilities; needs prompt updates
  • Some long-term customers call business practices predatory

Sources & method

Analyzed 9/27/2026 - 14 sources - Multiple CVEs (XSS, HTML injection, payment flaw) — actively patched; keep the plugin updated.

official x2review x5security x4news x3
  • CVE-2026-85641 — cross-site scripting, XSS vulnerability in the Formidable Forms WordPress plugin, published Sep 17, 2026.
  • Unauthenticated stored XSS (before 2.05.03), Unauthenticated stored cross-site scripting, fixed in version 2.05.03.
  • HTML injection (through 6.7), HTML injection vulnerability affecting versions up to 6.7.
  • CVE-2024-11188, Vulnerability in the Formidable Forms plugin listed in NVD on Nov 23, 2024.
  • Payment verification flaw, A payment verification flaw in the plugin exposed security risks, per Jotform's analysis.

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 3/5. Freemium gates features; add-ons stack costs.
  • Ease of use: 4/5. Drag-and-drop; forms built in minutes.
  • Feature depth: 5/5. Calculators, payments, directories, 400+ templates.
  • Support quality. No direct evidence in sources.
  • Security posture: 2/5. Repeated XSS CVEs despite patches.
  • 4/5 Trustpilot 187 reviews
  • 4.5/5 WordPress.org rating 900+ reviews
  • 400,000+ Users per vendor
  • $0–$399/yr Pro pricing add-ons $39–$89 each

Pricing

Free

$0

  • Basic forms and entries
  • Limited advanced features

Pro tiers

$39.50–$399/year

  • Advanced fields, conditional logic, multi-step
  • Add-ons $39–$89 each
  • Top tier adds payments, directories, dashboards

Security

Multiple CVEs (XSS, HTML injection, payment flaw) — actively patched; keep the plugin updated.

  • CVE-2026-85641 — cross-site scriptingXSS vulnerability in the Formidable Forms WordPress plugin, published Sep 17, 2026.11
  • Unauthenticated stored XSS (before 2.05.03)Unauthenticated stored cross-site scripting, fixed in version 2.05.03.10
  • HTML injection (through 6.7)HTML injection vulnerability affecting versions up to 6.7.
  • CVE-2024-11188Vulnerability in the Formidable Forms plugin listed in NVD on Nov 23, 2024.12
  • Payment verification flawA payment verification flaw in the plugin exposed security risks, per Jotform's analysis.13

What users say

Users praise its power and flexibility for advanced forms but warn it's overkill for simple needs and gripe about licensing practices.

“Formidable is definitely the best if you need a bit more advanced control and custom functionality.”
WordPress.org support forums
“Formidable forms is the most sophisticated and customizable WordPress Form plugin I've ever used.”
SoftwareAdvice review
“I need a conversational form + conditional logic for my website, formidable forms seems pretty good.”
Reddit, r/Wordpress

Alternatives

Compare Formidable Forms with each alternative.

  • Contact Form 7

    Free and minimal; fine for plain contact forms.

  • WPForms

    Easier beginner option; fewer advanced features.

    Formidable Forms vs WPForms

  • Gravity Forms

    Premium rival praised for customer support.

Full analysis

Based on 20+ public sources: reviews, Reddit threads, security databases, and pricing guides.

Powerful WordPress forms for developers and agencies; overkill — and tier-trap pricing — for a basic contact form.

Methodology

Based on 20+ public sources: reviews, Reddit threads, security databases, and pricing guides.

Sources

  1. Formidable Forms - The Complete WordPress Forms Solutionformidableforms.com
    official
  2. Formidable Forms – WordPress Form Builder (plugin page)wordpress.org
    official
  3. Formidable Forms Reviews — Trustpilottrustpilot.com
    review
  4. Formidable Forms Review: Unmatched Power, Overkill for Somefatlabwebsupport.com
    review
  5. Formidable Forms Reviews — G2g2.com
    review
  6. Formidable Forms Software Reviews, Demo & Pricing — SoftwareAdvicesoftwareadvice.com
    review
  7. Formidable Forms Pricing 2026: Free Plan + Paid to $399/yearcontentmation.com
    news
  8. 10 Best WordPress Contact Form Plugins Compared (2026)monsterinsights.com
    news
  9. The 8 best WordPress form plugins — Zapierzapier.com
    news
  10. Formidable Forms < 2.05.03 - Unauthenticated Stored XSS — Wordfencewordfence.com
    security
  11. CVE-2026-85641: Formidable Forms WordPress XSS — SentinelOnesentinelone.com
    security
  12. CVE-2024-11188 — National Vulnerability Databasenvd.nist.gov
    security
  13. Formidable Forms payment vulnerability — Jotform blogjotform.com
    security
  14. Great Software, Predatory Business Practices — WordPress.org supportwordpress.org
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.