WP-Safety

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Security & Risk Analysis

wordpress.org/plugins/fluentform

Get a fast contact form plugin. Create advanced forms using drag and drop form builder with all smart features.

600K active installs v6.1.20 PHP 7.4+ WP 6.4+ Updated Mar 4, 2026
contact-formcustom-formform-builderformswp-forms
82
B · Generally Safe
CVEs total27
Unpatched0
Last CVEFeb 9, 2026
Plugin page Download
Safety Verdict

Is Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Safe to Use in 2026?

Mostly Safe

Score 82/100

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder is generally safe to use. 27 past CVEs were resolved. Keep it updated.

27 known CVEsLast CVE: Feb 9, 2026Updated 1mo ago
Risk Assessment

The security posture of Fluent Forms v6.1.20 shows a mix of good practices and significant concerns. On the positive side, the plugin demonstrates a strong reliance on prepared statements for SQL queries (94%) and proper output escaping (93%), which are crucial for preventing common web vulnerabilities. The presence of capability checks (17) and nonces (8) in some areas also indicates an awareness of security principles. However, a substantial attack surface is exposed without proper authentication, with 16 out of 18 entry points lacking auth checks, primarily AJAX handlers. This creates a broad opportunity for attackers to interact with the plugin's functionalities.

While taint analysis did not reveal critical or high-severity vulnerabilities in the analyzed flows, the presence of one flow with unsanitized paths is a warning sign. The static analysis also identified the use of dangerous functions like `unserialize`, which can be a vector for deserialization vulnerabilities if not handled with extreme care and proper input validation. The plugin's vulnerability history is a significant concern, with a large number of known CVEs (27), including 1 critical and 6 high-severity past vulnerabilities. The common vulnerability types point to recurring issues such as XSS, code injection, and authorization problems, suggesting a pattern of insecure coding practices that have led to significant past breaches.

In conclusion, Fluent Forms v6.1.20 has implemented some core security best practices, particularly in its database interactions and output handling. However, the extensive unprotected attack surface, the presence of dangerous functions, and the concerning history of numerous and severe vulnerabilities indicate a need for urgent attention. While current analysis shows no unpatched CVEs, the historical pattern suggests a propensity for security weaknesses. Further in-depth auditing of the unprotected AJAX handlers and `unserialize` usage is strongly recommended.

Key Concerns

  • 16 unprotected AJAX handlers
  • Use of dangerous function: unserialize
  • 1 critical CVE in history
  • 6 high CVEs in history
  • Flow with unsanitized paths
  • Missing nonce checks (8 total, some likely on AJAX)
Vulnerabilities
27

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Security Vulnerabilities

CVEs by Year

1 CVE in 2021
2021
1 CVE in 2022
2022
3 CVEs in 2023
2023
15 CVEs in 2024
2024
4 CVEs in 2025
2025
3 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
1
High
6
Medium
20

27 total CVEs

CVE-2026-0996medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module

Feb 9, 2026 Patched in 6.1.15 (1d)
CVE-2025-69001medium · 6.5Improper Control of Generation of Code ('Code Injection')

FluentForm <= 6.1.11 - Unauthenticated Arbitrary Shortcode Execution

Jan 13, 2026 Patched in 6.1.12 (22d)
CVE-2025-13722medium · 5.3Missing Authorization

Fluent Forms <= 6.1.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Form Creation via AI Builder

Jan 6, 2026 Patched in 6.1.8 (1d)
CVE-2025-13748medium · 5.3Authorization Bypass Through User-Controlled Key

Fluent Forms <= 6.1.7 - Unauthenticated Insecure Direct Object Reference to Payment Status Tampering via submission_id

Dec 5, 2025 Patched in 6.1.8 (1d)
CVE-2025-9260medium · 6.5Deserialization of Untrusted Data

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 5.1.16 - 6.1.1 - Authenticated (Subscriber+) PHP Object Injection To Arbitrary File Read

Sep 2, 2025 Patched in 6.1.2 (3d)
CVE-2025-3615medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fluent Forms <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Apr 16, 2025 Patched in 6.0.3 (1d)
CVE-2024-13666medium · 5.3Improper Input Validation

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder <= 5.2.12 - IP-Spoofing

Mar 21, 2025 Patched in 6.0.0 (1d)
CVE-2024-10646high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting via Form Subject

Dec 13, 2024 Patched in 5.2.7 (1d)
CVE-2024-9651medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fluent Forms <= 5.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Nov 18, 2024 Patched in 5.2.1 (25d)
CVE-2024-9528medium · 4.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Form Manager+) Stored Cross-Site Scripting

Oct 4, 2024 Patched in 5.1.20 (1d)
CVE-2024-5053medium · 4.2Improper Authorization

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.18 - Missing Authorization to Authenticated (Subscriber+) Mailchimp Integration Modification

Aug 31, 2024 Patched in 5.1.19 (1d)
CVE-2024-6520medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

Jul 26, 2024 Patched in 5.1.20 (3d)
CVE-2024-6518medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

Jul 26, 2024 Patched in 5.1.20 (3d)
CVE-2024-6521medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Administrator+) Stored Cross-Site Scripting

Jul 26, 2024 Patched in 5.1.20 (3d)
CVE-2024-6703medium · 4.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.19 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Welcome Screen Fields

Jul 26, 2024 Patched in 5.1.20 (2d)
CVE-2024-4157high · 7.5Deserialization of Untrusted Data

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.15 - PHP Object Injection via extractDynamicValues

May 21, 2024 Patched in 5.1.16 (1d)
CVE-2024-2772medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.13 - Authenticated (Subscriber+) Stored Cross-Site Scripting

May 17, 2024 Patched in 5.1.14 (1d)
CVE-2024-2782high · 7.5Missing Authorization

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Setting Manipulation

May 17, 2024 Patched in 5.1.17 (1d)
CVE-2024-2771critical · 9.8Missing Authorization

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Missing Authorization to Settings Update and Limited Privilege Escalation

May 17, 2024 Patched in 5.1.17 (1d)
CVE-2024-4709medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder <= 5.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting

May 17, 2024 Patched in 5.1.17 (161d)
CVE-2023-6957medium · 4.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fluent Forms <= 5.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 5, 2024 Patched in 5.1.10 (147d)
CVE-2024-0618medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form title

Jan 18, 2024 Patched in 5.1.7 (194d)
CVE-2023-41952medium · 5.3Authorization Bypass Through User-Controlled Key

Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference

Sep 8, 2023 Patched in 5.0.9 (137d)
CVE-2023-24410high · 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection

Jul 12, 2023 Patched in 5.0.0 (195d)
CVE-2023-0546medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

FluentForms <= 4.3.24 - Authenticated(Contributor+) Stored Cross-Site Scripting

Mar 20, 2023 Patched in 4.3.25 (309d)
CVE-2022-3463high · 8.3Improper Neutralization of Formula Elements in a CSV File

Contact Form Plugin by FluentForm <= 4.3.12 - CSV Injection

Oct 17, 2022 Patched in 4.3.13 (463d)
CVE-2021-34620high · 8.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WP Fluent Forms < 3.6.67 - Stored Cross-Site Scripting

Jun 16, 2021 Patched in 3.6.67 (951d)
Code Analysis
Analyzed Mar 16, 2026

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Code Analysis

Dangerous Functions
2
Raw SQL Queries
9
142 prepared
Unescaped Output
86
1146 escaped
Nonce Checks
8
Capability Checks
17
File Operations
40
External Requests
15
Bundled Libraries
0

Dangerous Functions Found

unserializereturn @unserialize(trim($data), ['allowed_classes' => false]);app\Helpers\Helper.php:1389
unserialize$schedule = unserialize( $data->schedule ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.seapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_DBStore.php:398

SQL Query Safety

94% prepared151 total queries

Output Escaping

93% escaped1232 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

3 flows1 with unsanitized paths
display_table (app\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Abstract_ListTable.php:737)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
16 unprotected

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Attack Surface

Entry Points18
Unprotected16

AJAX Handlers 16

authwp_ajax_fluentform_select_group_ajax_dataapp\Hooks\Ajax.php:364
authwp_ajax_fluentform_ai_create_formapp\Modules\Ai\AiFormBuilder.php:24
authwp_ajax_fluentform_get_paymentsapp\Modules\Payments\Classes\PaymentEntries.php:19
authwp_ajax_fluentform-do_entry_bulk_actions_paymentapp\Modules\Payments\Classes\PaymentEntries.php:20
authwp_ajax_fluentform_get_all_payments_entries_filtersapp\Modules\Payments\Classes\PaymentEntries.php:21
authwp_ajax_fluentform_handle_payment_ajax_endpointapp\Modules\Payments\PaymentHandler.php:38
authwp_ajax_fluentform_sca_inline_confirm_paymentapp\Modules\Payments\PaymentMethods\Stripe\StripeInlineProcessor.php:30
noprivwp_ajax_fluentform_sca_inline_confirm_paymentapp\Modules\Payments\PaymentMethods\Stripe\StripeInlineProcessor.php:31
authwp_ajax_fluentform_sca_inline_confirm_payment_setup_intentsapp\Modules\Payments\PaymentMethods\Stripe\StripeInlineProcessor.php:36
noprivwp_ajax_fluentform_sca_inline_confirm_payment_setup_intentsapp\Modules\Payments\PaymentMethods\Stripe\StripeInlineProcessor.php:37
authwp_ajax_fluentform_user_payment_endpointsapp\Modules\Payments\TransactionShortcodes.php:20
authwp_ajax_fluentform_mailchimp_interest_groupsapp\Services\Integrations\MailChimp\MailChimpIntegration.php:33
authwp_ajax_fluentform-migrator-get-migrator-dataapp\Services\Migrator\Bootstrap.php:16
authwp_ajax_fluentform-migrator-get-forms-by-keyapp\Services\Migrator\Bootstrap.php:17
authwp_ajax_fluentform-migrator-import-formsapp\Services\Migrator\Bootstrap.php:18
authwp_ajax_fluentform-migrator-import-entriesapp\Services\Migrator\Bootstrap.php:19

Shortcodes 2

[fluentform_payments] app\Modules\Payments\TransactionShortcodes.php:18
[fluentform_payment_view] app\Modules\Payments\TransactionShortcodes.php:19
WordPress Hooks 248
actioninitapp\Hooks\actions.php:72
actionadmin_initapp\Hooks\actions.php:77
actionadmin_enqueue_scriptsapp\Hooks\actions.php:84
actionadmin_initapp\Hooks\actions.php:142
actionwp_print_scriptsapp\Hooks\actions.php:164
filterfluentform/editor_init_element_input_nameapp\Hooks\actions.php:223
filterfluentform/editor_init_element_gdpr_agreementapp\Hooks\actions.php:338
filterfluentform/editor_init_element_input_textapp\Hooks\actions.php:345
filterfluentform/editor_init_element_textareaapp\Hooks\actions.php:352
filterfluentform/editor_init_element_input_dateapp\Hooks\actions.php:359
filterfluentform/editor_init_element_containerapp\Hooks\actions.php:367
filterfluentform/editor_init_element_input_numberapp\Hooks\actions.php:397
filterfluentform/editor_init_element_input_maskapp\Hooks\actions.php:417
filterfluentform/editor_init_element_input_emailapp\Hooks\actions.php:424
filterfluentform/editor_init_element_input_textapp\Hooks\actions.php:441
filterfluentform/editor_init_element_recaptchaapp\Hooks\actions.php:476
filterfluentform/editor_init_element_hcaptchaapp\Hooks\actions.php:481
filterfluentform/editor_init_element_turnstileapp\Hooks\actions.php:486
filterfluentform/editor_init_element_addressapp\Hooks\actions.php:491
filterfluentform/editor_init_element_gdpr_agreementapp\Hooks\actions.php:545
filterfluentform/editor_init_element_terms_and_conditionapp\Hooks\actions.php:555
filterrocket_excluded_inline_js_contentapp\Hooks\actions.php:590
actionsave_postapp\Hooks\actions.php:600
actionwpapp\Hooks\actions.php:681
actionwp_enqueue_scriptsapp\Hooks\actions.php:686
actionfluentform/load_form_assetsapp\Hooks\actions.php:852
actionfluentform/log_dataapp\Hooks\actions.php:916
actionff_log_dataapp\Hooks\actions.php:925
actionwidgets_initapp\Hooks\actions.php:931
actionwpapp\Hooks\actions.php:935
filtercron_schedulesapp\Hooks\actions.php:960
actionfluentform_do_scheduled_tasksapp\Hooks\actions.php:969
actionfluentform_do_email_report_scheduled_tasksapp\Hooks\actions.php:970
actionfluentform/integration_action_resultapp\Hooks\actions.php:972
actionff_integration_action_resultapp\Hooks\actions.php:1003
actionfluentform/global_notify_completedapp\Hooks\actions.php:1028
actioninitapp\Hooks\actions.php:1057
actionenqueue_block_editor_assetsapp\Hooks\actions.php:1073
actioninitapp\Hooks\actions.php:1169
actionfluentform/before_updating_formapp\Hooks\actions.php:1176
actionenqueue_block_assetsapp\Hooks\actions.php:1184
filterfluentform/addons_extra_menuapp\Hooks\filters.php:16
filterfluentform/get_global_settings_valuesapp\Hooks\filters.php:23
actionfluentform/before_form_validationapp\Hooks\filters.php:61
filterfluentform/is_integration_enabled_wpfusionapp\Hooks\filters.php:423
filtercron_schedulesapp\Hooks\Handlers\ActivationHandler.php:195
filterfluentform/global_addonsapp\Http\Controllers\IntegrationManagerController.php:56
filterfluentform/global_settings_componentsapp\Http\Controllers\IntegrationManagerController.php:78
filterfluentform/global_notification_typesapp\Http\Controllers\IntegrationManagerController.php:87
filterfluentform/get_available_form_integrationsapp\Http\Controllers\IntegrationManagerController.php:89
filterfluentform/global_notification_active_typesapp\Http\Controllers\IntegrationManagerController.php:108
filterhttp_request_timeoutapp\Modules\Ai\FluentFormAIAPI.php:23
filterhttp_request_timeoutapp\Modules\Ai\FluentFormAIAPI.php:33
actionwp_enqueue_scriptsapp\Modules\Component\Component.php:463
filterfluentform/input_data_input_numberapp\Modules\Component\Component.php:1272
filterfluentform/input_data_custom_payment_componentapp\Modules\Component\Component.php:1273
filterfluentform/editor_componentsapp\Modules\Component\ComponentInitTrait.php:17
filterfluentform/editor_element_search_tagsapp\Modules\Component\ComponentInitTrait.php:20
filterfluentform/editor_element_settings_placementapp\Modules\Component\ComponentInitTrait.php:23
filterfluentform/editor_element_customization_settingsapp\Modules\Component\ComponentInitTrait.php:26
filterfluentform/insert_response_dataapp\Modules\Component\ComponentInitTrait.php:29
filterfluentform/form_input_typesapp\Modules\Component\ComponentInitTrait.php:32
actionfluentform/inserted_new_formapp\Modules\Form\DefaultStyleApplicator.php:12
actionwp_footerapp\Modules\Form\Settings\FormCssJs.php:164
filterfluentform/global_form_varsapp\Modules\Form\TokenBasedSpamProtection.php:20
actionfluentform/render_payment_entriesapp\Modules\Payments\Classes\PaymentEntries.php:18
filterfluentform/editor_init_element_custom_payment_componentapp\Modules\Payments\Components\CustomPaymentComponent.php:30
filterfluentform/editor_init_element_multi_payment_componentapp\Modules\Payments\Components\MultiPaymentComponent.php:31
filterfluentform/editor_init_element_payment_methodapp\Modules\Payments\Components\PaymentMethods.php:25
filterfluentform/editor_componentsapp\Modules\Payments\Components\PaymentSummaryComponent.php:33
filterfluentform/editor_element_settings_placementapp\Modules\Payments\Components\PaymentSummaryComponent.php:34
filterfluentform/editor_element_search_tagsapp\Modules\Payments\Components\PaymentSummaryComponent.php:35
filterfluentform/editor_element_customization_settingsapp\Modules\Payments\Components\PaymentSummaryComponent.php:38
filterfluentform/editor_init_element_payment_summary_componentapp\Modules\Payments\Components\PaymentSummaryComponent.php:46
filterfluentform/payment_configapp\Modules\Payments\Components\PaymentSummaryComponent.php:121
filterfluentform/editor_init_element_subscription_payment_componentapp\Modules\Payments\Components\Subscription.php:31
filterfluentform/white_listed_fieldsapp\Modules\Payments\Components\Subscription.php:43
filterfluentform/global_settings_componentsapp\Modules\Payments\PaymentHandler.php:34
filterfluentform/global_settings_component_settings_dataapp\Modules\Payments\PaymentHandler.php:36
filterfluentform/show_payment_entriesapp\Modules\Payments\PaymentHandler.php:44
filterfluentform/form_settings_menuapp\Modules\Payments\PaymentHandler.php:46
filterfluentform/editor_componentsapp\Modules\Payments\PaymentHandler.php:58
actionfluentform/before_insert_payment_formapp\Modules\Payments\PaymentHandler.php:77
filterfluentform/submission_order_dataapp\Modules\Payments\PaymentHandler.php:79
filterfluentform/entries_varsapp\Modules\Payments\PaymentHandler.php:83
filterfluentform/submission_labelsapp\Modules\Payments\PaymentHandler.php:93
filterfluentform/all_entry_labels_with_paymentapp\Modules\Payments\PaymentHandler.php:101
actionfluentform/rendering_payment_formapp\Modules\Payments\PaymentHandler.php:103
actionwpapp\Modules\Payments\PaymentHandler.php:219
actionwpapp\Modules\Payments\PaymentHandler.php:255
filterfluentform/editor_varsapp\Modules\Payments\PaymentHandler.php:270
filterfluentform/admin_i18napp\Modules\Payments\PaymentHandler.php:277
filterfluentform/payment_smartcodeapp\Modules\Payments\PaymentHandler.php:279
actionuser_registerapp\Modules\Payments\PaymentHandler.php:281
filterfluentform/validate_input_item_subscription_payment_componentapp\Modules\Payments\PaymentHandler.php:290
filterfluentform/validate_input_item_multi_payment_componentapp\Modules\Payments\PaymentHandler.php:297
filterfluentform/validate_input_item_payment_methodapp\Modules\Payments\PaymentHandler.php:304
filterfluentform/payment_methods_global_settingsapp\Modules\Payments\PaymentMethods\BasePaymentMethod.php:20
filterpre_get_document_titleapp\Modules\Payments\PaymentMethods\BaseProcessor.php:466
actionwp_enqueue_scriptsapp\Modules\Payments\PaymentMethods\BaseProcessor.php:471
filterfluentform/payment_method_contents_stripeapp\Modules\Payments\PaymentMethods\Stripe\Components\StripeInline.php:28
filterfluentform/form_classapp\Modules\Payments\PaymentMethods\Stripe\Components\StripeInline.php:37
filterfluentform/available_payment_methodsapp\Modules\Payments\PaymentMethods\Stripe\StripeHandler.php:44
actionfluentform/process_payment_stripeapp\Modules\Payments\PaymentMethods\Stripe\StripeHandler.php:54
actionfluentform/process_payment_stripe_inlineapp\Modules\Payments\PaymentMethods\Stripe\StripeInlineProcessor.php:25
actionfluentform/process_payment_stripe_hostedapp\Modules\Payments\PaymentMethods\Stripe\StripeProcessor.php:25
actionfluentform/payment_view_paymentapp\Modules\Payments\TransactionShortcodes.php:21
actionwp_enqueue_scriptsapp\Modules\Payments\TransactionShortcodes.php:130
filterpre_get_document_titleapp\Modules\Payments\TransactionShortcodes.php:143
filterfluentform/is_form_renderableapp\Modules\ProcessExteriorModule.php:29
filtertemplate_includeapp\Modules\ProcessExteriorModule.php:48
actionadmin_bar_menuapp\Modules\Registerer\AdminBar.php:15
filteradmin_footer_textapp\Modules\Registerer\Menu.php:241
filterupdate_footerapp\Modules\Registerer\Menu.php:245
filteruser_can_richeditapp\Modules\Registerer\Menu.php:338
filteruser_can_richeditapp\Modules\Registerer\Menu.php:905
filteruser_can_richeditapp\Modules\Registerer\Menu.php:1073
actionadmin_print_scriptsapp\Modules\Registerer\Menu.php:1204
actionfluentform/global_menuapp\Modules\Registerer\MigrationNotice.php:14
actionfluentform/global_menuapp\Modules\Registerer\ReviewQuery.php:14
actionelementor/widgets/registerapp\Modules\Widgets\ElementorWidget.php:14
actionplugins_loadedapp\Modules\Widgets\OxygenWidget.php:16
actionoxygen_add_plus_sectionsapp\Modules\Widgets\OxygenWidget.php:17
actionoxygen_add_plus_fluentform_section_contentapp\Modules\Widgets\OxygenWidget.php:18
actionfluentform/conversational_frame_footerapp\Services\FluentConversational\Classes\Converter\Converter.php:732
filterfluentform/conversational_editor_elementsapp\Services\FluentConversational\Classes\Elements\WelcomeScreen.php:19
actionwpapp\Services\FluentConversational\Classes\Form.php:22
filterfluentform/editor_componentsapp\Services\FluentConversational\Classes\Form.php:24
filterfluentform/form_admin_menuapp\Services\FluentConversational\Classes\Form.php:26
actionfluentform/form_application_view_conversational_designapp\Services\FluentConversational\Classes\Form.php:28
filterfluentform/editor_element_settings_placementapp\Services\FluentConversational\Classes\Form.php:30
filteruser_can_richeditapp\Services\FluentConversational\Classes\Form.php:65
actionfluentform/conversational_frame_footerapp\Services\FluentConversational\Classes\Form.php:415
actionfluentform/conversational_frame_headapp\Services\FluentConversational\Classes\Form.php:434
filterfluentform/editor_componentsapp\Services\FormBuilder\BaseFieldManager.php:26
filterfluentform/editor_element_settings_placementapp\Services\FormBuilder\BaseFieldManager.php:27
filterfluentform/editor_element_search_tagsapp\Services\FormBuilder\BaseFieldManager.php:28
filterfluentform/form_input_typesapp\Services\FormBuilder\BaseFieldManager.php:34
filterfluentform/editor_element_customization_settingsapp\Services\FormBuilder\BaseFieldManager.php:36
filterfluentform/supported_conditional_fieldsapp\Services\FormBuilder\BaseFieldManager.php:44
actionwp_footerapp\Services\FormBuilder\Components\DateTime.php:150
filterfluentform/form_classapp\Services\FormBuilder\Components\Recaptcha.php:68
filterfluentform/html_attributesapp\Services\FormBuilder\Components\Recaptcha.php:73
actionwp_footerapp\Services\FormBuilder\Components\Recaptcha.php:82
actionwp_footerapp\Services\FormBuilder\Components\SubmitButton.php:146
filterfluentform/form_classapp\Services\FormBuilder\Components\Text.php:87
filterfluentform/html_attributesapp\Services\FormBuilder\Components\Turnstile.php:39
actionwp_mail_failedapp\Services\FormBuilder\Notifications\EmailNotification.php:153
filterfluentform/notifying_async_email_notificationsapp\Services\FormBuilder\Notifications\EmailNotificationActions.php:22
filterfluentform/notifying_async_notificationsapp\Services\FormBuilder\Notifications\EmailNotificationActions.php:23
filterfluentform/global_notification_active_typesapp\Services\FormBuilder\Notifications\EmailNotificationActions.php:25
actionfluentform/integration_notify_notificationsapp\Services\FormBuilder\Notifications\EmailNotificationActions.php:30
actionfluentform/notify_on_form_submitapp\Services\FormBuilder\Notifications\EmailNotificationActions.php:32
filterfluentform/save_integration_value_mailchimpapp\Services\Integrations\MailChimp\MailChimpIntegration.php:35
filterfluentform/global_notification_active_typesapp\Services\Integrations\Slack\SlackNotificationActions.php:21
actionfluentform/integration_notify_slackapp\Services\Integrations\Slack\SlackNotificationActions.php:28
filterfluentform/get_meta_key_settings_responseapp\Services\Integrations\Slack\SlackNotificationActions.php:29
actionplugins_loadedapp\Services\Libraries\action-scheduler\action-scheduler.php:36
actionplugins_loadedapp\Services\Libraries\action-scheduler\action-scheduler.php:39
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:196
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:197
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:198
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:199
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:200
actioninitapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:202
actionaction_scheduler/migration_completeapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler.php:261
actionaction_scheduler_canceled_actionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:67
actionaction_scheduler_begin_executeapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:68
actionaction_scheduler_after_executeapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:69
actionaction_scheduler_failed_executionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:70
actionaction_scheduler_failed_actionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:71
actionaction_scheduler_unexpected_shutdownapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:72
actionaction_scheduler_reset_actionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:73
actionaction_scheduler_execution_ignoredapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:74
actionaction_scheduler_failed_fetch_actionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:75
actionaction_scheduler_failed_to_schedule_next_instanceapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:76
actionaction_scheduler_bulk_cancel_actionsapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:77
actionaction_scheduler_stored_actionapp\Services\Libraries\action-scheduler\classes\abstracts\ActionScheduler_Logger.php:84
actionwoocommerce_admin_status_content_action-schedulerapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:57
actionwoocommerce_system_status_reportapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:58
filterwoocommerce_admin_status_tabsapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:59
actionadmin_menuapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:62
actionadmin_noticesapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:63
actioncurrent_screenapp\Services\Libraries\action-scheduler\classes\ActionScheduler_AdminView.php:64
filteraction_scheduler_store_classapp\Services\Libraries\action-scheduler\classes\ActionScheduler_DataController.php:190
filteraction_scheduler_logger_classapp\Services\Libraries\action-scheduler\classes\ActionScheduler_DataController.php:191
actiondeactivate_pluginapp\Services\Libraries\action-scheduler\classes\ActionScheduler_DataController.php:192
actionaction_scheduler/progress_tickapp\Services\Libraries\action-scheduler\classes\ActionScheduler_DataController.php:197
actionshutdownapp\Services\Libraries\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:45
actionaction_scheduler_before_executeapp\Services\Libraries\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:46
actionaction_scheduler_after_executeapp\Services\Libraries\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:47
actionaction_scheduler_execution_ignoredapp\Services\Libraries\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:48
actionaction_scheduler_failed_executionapp\Services\Libraries\action-scheduler\classes\ActionScheduler_FatalErrorMonitor.php:49
actionaction_scheduler/created_tableapp\Services\Libraries\action-scheduler\classes\ActionScheduler_ListTable.php:554
filtercron_schedulesapp\Services\Libraries\action-scheduler\classes\ActionScheduler_QueueRunner.php:72
actionshutdownapp\Services\Libraries\action-scheduler\classes\ActionScheduler_QueueRunner.php:95
actionaction_scheduler_initapp\Services\Libraries\action-scheduler\classes\ActionScheduler_RecurringActionScheduler.php:28
actionpre_get_commentsapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:44
actionwp_count_commentsapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:45
actioncomment_feed_whereapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:46
actionload-tools_page_action-schedulerapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:49
actionload-woocommerce_page_wc-statusapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:50
actionadmin_noticesapp\Services\Libraries\action-scheduler\classes\ActionScheduler_WPCommentCleaner.php:109
actionaction_scheduler_deleted_actionapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_DBLogger.php:112
actionaction_scheduler/created_tableapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_HybridStore.php:75
filtercomments_clausesapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:129
actionaction_scheduler_before_process_queueapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:254
actionaction_scheduler_after_process_queueapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:255
actionpre_get_commentsapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:259
actionwp_count_commentsapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:260
actioncomment_feed_whereapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:261
actionwp_insert_commentapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:264
actionwp_set_comment_statusapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpCommentLogger.php:265
filterwp_insert_post_dataapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:82
filterpre_wp_unique_post_slugapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:83
filterpre_wp_unique_post_slugapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:519
filterwp_insert_post_dataapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:1007
filterpre_wp_unique_post_slugapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:1008
filteraction_scheduler_migration_dependencies_metapp\Services\Libraries\action-scheduler\classes\data-stores\ActionScheduler_wpPostStore.php:1095
actionadmin_noticesapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:176
filteraction_scheduler_store_classapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:190
filteraction_scheduler_logger_classapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:191
actioninitapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:192
actionwp_loadedapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:193
actionload-tools_page_action-schedulerapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:196
actionload-woocommerce_page_wc-statusapp\Services\Libraries\action-scheduler\classes\migration\Controller.php:197
actionaction_scheduler_before_schema_updateapp\Services\Libraries\action-scheduler\classes\schema\ActionScheduler_LoggerSchema.php:35
actionaction_scheduler_before_schema_updateapp\Services\Libraries\action-scheduler\classes\schema\ActionScheduler_StoreSchema.php:40
actionaction_scheduler_deleted_actionapp\Services\Libraries\action-scheduler\classes\WP_CLI\Action\Delete_Command.php:40
actionaction_scheduler_execution_ignoredapp\Services\Libraries\action-scheduler\classes\WP_CLI\Action\Run_Command.php:42
actionaction_scheduler_after_executeapp\Services\Libraries\action-scheduler\classes\WP_CLI\Action\Run_Command.php:43
actionaction_scheduler_failed_executionapp\Services\Libraries\action-scheduler\classes\WP_CLI\Action\Run_Command.php:44
actionaction_scheduler_failed_validationapp\Services\Libraries\action-scheduler\classes\WP_CLI\Action\Run_Command.php:45
actionaction_scheduler_before_executeapp\Services\Libraries\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:88
actionaction_scheduler_after_executeapp\Services\Libraries\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:89
actionaction_scheduler_failed_executionapp\Services\Libraries\action-scheduler\classes\WP_CLI\ActionScheduler_WPCLI_QueueRunner.php:90
actionaction_scheduler/migrate_action_dry_runapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:137
actionaction_scheduler/no_action_to_migrateapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:144
actionaction_scheduler/migrate_action_failedapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:151
actionaction_scheduler/migrate_action_incompleteapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:158
actionaction_scheduler/migrated_actionapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:167
actionaction_scheduler/migration_batch_startingapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:176
actionaction_scheduler/migration_batch_completeapp\Services\Libraries\action-scheduler\classes\WP_CLI\Migration_Command.php:183
actionplugins_loadedboot\app.php:11
actionadmin_initboot\app.php:14
actionwp_insert_siteboot\app.php:38
actionplugins_loadedboot\app.php:50
filterplugin_row_metaboot\app.php:82
Maintenance & Trust

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 4, 2026
PHP min version7.4
Downloads15.3M

Community Trust

Rating96/100
Number of ratings742
Active installs600K
Alternatives

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Alternatives

The Innovative Form Builder – IvyForms

The Innovative Form Builder – IvyForms

ivyforms

A
100

The most innovative WordPress Form Builder plugin. Build awesome contact, order, registration, custom forms, and more in minutes.

100 No CVEs
FormGlut — Contact, Newsletter & Multi-step Form Builder

FormGlut — Contact, Newsletter & Multi-step Form Builder

formglut

A
100

User friendly, Lightweight, Drag & Drop form builder to create your WordPress Forms

10 No CVEs
WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

WPForms – Easy Form Builder for WordPress – Contact Forms, Payment Forms, Surveys, & More

wpforms-lite

A
90

The best WordPress contact form plugin. Drag & Drop form builder to create beautiful contact forms, payment forms, & other custom forms.

6.0M 13 CVEs
SureForms – Contact Form, Payment Form & Other Custom Form Builder

SureForms – Contact Form, Payment Form & Other Custom Form Builder

sureforms

A
88

The most beginner-friendly, AI Form Builder for WordPress to create contact forms, payment forms & other custom forms with advanced features, with &hellip;

400K 15 CVEs
Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

everest-forms

B
84

The best WordPress form builder. Create contact forms, payment forms, conversational forms, custom forms, surveys, & quizzes using drag and drop.

100K 12 CVEs
Developer Profile

Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder Developer Profile

Shahjahan Jewel

17 plugins · 1.3M total installs

73
trust score
Avg Security Score
92/100
Avg Patch Time
113 days
View full developer profile
Detection Fingerprints

How We Detect Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fluentform/app/assets/css/fluentform-public.css/wp-content/plugins/fluentform/app/assets/css/fluentform-admin-forms.css/wp-content/plugins/fluentform/app/assets/js/fluentform-admin.js/wp-content/plugins/fluentform/app/assets/js/fluentform-public.js/wp-content/plugins/fluentform/resources/css/fluentform.css/wp-content/plugins/fluentform/resources/css/admin.css/wp-content/plugins/fluentform/resources/js/admin.js/wp-content/plugins/fluentform/resources/js/public.js
Script Paths
/wp-content/plugins/fluentform/app/assets/js/fluentform-public.js/wp-content/plugins/fluentform/resources/js/public.js
Version Parameters
fluentform/resources/css/fluentform.css?ver=fluentform/resources/js/public.js?ver=

HTML / DOM Fingerprints

CSS Classes
fluentform-formff-el-formff-form-actionsfluentform-frontend-form-containerfluentform-entry-formfluentform-admin-panelff-form-builder-wrapperfluentform-settings-page
HTML Comments
Fluent Forms FrontendFluent Forms Admin
Data Attributes
data-form-iddata-ff-actiondata-ff-noncedata-ff-componentdata-ff-field-iddata-ff-field-type
JS Globals
fluentFormIsProfluentFormFrontend
REST Endpoints
/wp-json/fluentform/v1/form/submit/wp-json/fluentform/v1/form/get/wp-json/fluentform/v1/entries/get/wp-json/fluentform/v1/settings/save
Shortcode Output
[fluentform id="[fluentform_editor id="[fluentform_entry_view id="
FAQ

Frequently Asked Questions about Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder