shouldiuse.io

VERDICT

Should I use Gravity Forms?

Create custom forms on WordPress with Gravity Forms, the easiest-to-use, secure, and reliable WordPress form builder plugin for your website. - gravityforms.com

Depends. Buy it if you run WordPress and need serious forms — payments, multi-step logic, entries as data. Skip it for simple contact forms, non-WordPress sites, or installs you won't patch promptly.

Confidence

Medium. Based on 30+ public sources: community reviews, security advisories, vendor docs. Pricing figures are estimates, not confirmed from the page.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo direct support evidence found
  • Security posture

Pricing

Guess: ~$59/yr

Basic

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierNo
ProGuess: ~$159/yr
EliteGuess: ~$259/yr

Best for

  • WordPress sites needing complex, multi-step forms
  • Agencies building many client sites
  • Payment, donation, and intake workflows
  • Teams treating form entries as data

Not for

  • Non-WordPress sites — it's a WP plugin, full stop
  • Anyone wanting a free form builder
  • Simple contact-form-only sites (overkill)
  • Unattended WordPress installs nobody patches

Gotchas - check before you buy

high

Repeated CVEs across 2025–2026; unpatched installs are a real risk

high

July 2025 malware-incident notice; verify your install wasn't compromised

medium

No free tier; annual license needed, renewals to keep updates

medium

Key add-ons gated by license tier; check tier before buying

Pros and cons

Pros

  • Widely called the most powerful WordPress form builder
  • Large add-on ecosystem: payments, CRMs, Square integrations
  • Loyal users run it for years without switching
  • Used by universities like UNC

Cons

  • No free tier; annual license required
  • Reviewers hit walls: 'You cannot do that with Gravity Forms'
  • 25 disclosed vulnerabilities listed by Wordfence
  • Constant comparisons to cheaper WP rivals like WPForms

Sources & method

Analyzed 9/20/2026 - 12 sources - 25 disclosed vulnerabilities including a 9.8-CVSS issue and a 2025 vendor malware-incident notice; keep it patched or look elsewhere.

official x4review x5security x3
  • CVE-2025-12352 — arbitrary file upload, Attackers can upload arbitrary files, per vulnerability summary.
  • CVE-2026-12997 — path traversal, Path traversal vulnerability listed in SentinelOne's database.
  • Unauthenticated stored XSS (≤ 2.10.0), Stored cross-site scripting via single product field inside repeater.
  • 2025 malware compromise incident, Vendor published a notice telling users to check for compromised installs.

Key stats

  • Value for money: 3/5

    Rating

  • Guess: ~$59/yr

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Premium-only; cheaper rivals like Fluent Forms
  • Ease of use: 4/5. Users stay for years once set up
  • Feature depth: 5/5. Called the most powerful WordPress form builder
  • Support quality. No direct support evidence found
  • Security posture: 2/5. 25 disclosed vulns plus 2025 incident
  • 25 Disclosed vulnerabilities Wordfence listings for the plugin
  • 3 License tiers Basic, Pro, Elite
  • No Free tier Premium plugin, annual license
  • $5.1M Reported funding Per Crunchbase profile

Pricing

Basic

Guess: ~$59/yr

  • Entry license
  • Core form builder
  • Limited add-ons

Pro

Guess: ~$159/yr

  • Multi-site license
  • More add-ons (payments, CRM)

Elite

Guess: ~$259/yr

  • Unlimited sites
  • All add-ons
  • Priority support

Security

25 disclosed vulnerabilities including a 9.8-CVSS issue and a 2025 vendor malware-incident notice; keep it patched or look elsewhere.

  • CVE-2025-12352 — arbitrary file uploadAttackers can upload arbitrary files, per vulnerability summary.⁹
  • CVE-2026-12997 — path traversalPath traversal vulnerability listed in SentinelOne's database.
  • Unauthenticated stored XSS (≤ 2.10.0)Stored cross-site scripting via single product field inside repeater.
  • 2025 malware compromise incidentVendor published a notice telling users to check for compromised installs.10

What users say

Longtime users praise its power and stay for years, but threads keep asking whether it's still the right choice as cheaper rivals improve.

“Gravity Forms is just so badass”
Gravity Help forums
“Should I switch from Gravity Forms after 5 years?”
Reddit, r/Wordpress
“Is Gravity Forms Still a Good Choice?”
Reddit, r/Wordpress

Companies that use it

  • UNC School of Medicine
  • WP Accessibility Day
Full analysis

Based on 30+ public sources: community reviews, security advisories, vendor docs. Pricing figures are estimates, not confirmed from the page.

Powerful WordPress form builder with loyal fans — but paid-only, add-on gated, and a spotty security record. Overkill for simple forms.

Methodology

Based on 30+ public sources: community reviews, security advisories, vendor docs. Pricing figures are estimates, not confirmed from the page.

Sources

  1. Gravity Forms — official sitegravityforms.com
    official
  2. Gravity Forms pricinggravityforms.com
    official
  3. Gravity Forms license typesdocs.gravityforms.com
    official
  4. A Review of Gravity Forms 2024gravityforms.com
    official
  5. Is Gravity Forms Still a Good Choice? — Redditreddit.com
    review
  6. WPForms vs Gravity Forms — Redditreddit.com
    review
  7. Gravity Forms is just so badass — forumslegacy.forums.gravityhelp.com
    review
  8. Wordfence vulnerability listingswordfence.com
    security
  9. CVE-2025-12352 summaryzeropath.com
    security
  10. 2025 security incident noticegravityforms.com
    security
  11. How to use Gravity Forms — GravityKit guidegravitykit.com
    review
  12. WPForms vs Gravity Forms — Zapierzapier.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.