Headline
CVE-2019-9567: Forminator – Contact Form, Payment Form & Custom Form Builder
The “Forminator Contact Form, Poll & Quiz Builder” plugin before 1.6 for WordPress has XSS via a custom input field of a poll.
Not your typical form-making plugin. Forminator is the easy-to-use WordPress form builder plugin for every website and situation. It’s the easiest way to create any form – contact form, order form, payment form, email form, feedback widgets, interactive polls with real-time results, buzzfeed-style “no wrong answer” quizzes, service estimators, and registration forms with payment options including PayPal and Stripe.
It’s the magical WordPress form builder for, well, everyone!
Forminator’s drag and drop visual builder makes it easy to setup and add forms to your WordPress website. Collect information, make your content interactive and generate more conversions with Forminator.
Forminator Forms, Surveys, Quizzes, Polls, Calculations and More…
- Forms – Custom forms for all your needs with as many fields as you like.
- Polls – Interactive polls to collect users opinions, with lots of dynamic options and settings.
- Quizzes – Fun or challenging quizzes for your visitors to take and share on social media.
- Calculations – Collect information, generate leads, take orders, and engage visitors.
- Payments – Take payments, donations, down payments, sell merch with the included Stripe and PayPal integrations.
Learn The Ropes With These Hands-On Forminator Tutorials
- Creating the Perfect Contact Form with Forminator
- Create an Easy Payment Form (for free!) with Forminator
- How to Get the Most Out of Using Forminator
- How To Capture eSignatures Using Forminator
- How To Collect Emails and Generate Leads With a Forminator Quiz
Accept Payments With Stripe and PayPal
Start taking payments with Forminator. No Pro upgrade required! SCA compliant Stripe and PayPal come included. Just enter your publish keys to activate the Forminator payment module for both fixed and variable payments. Check out how it works in the video below:
Stripe Verified Partner
Forminator is also proud to be a Stripe Verified Partner. This partnership allows us to help you get the most out of our Stripe integration thanks to additional resources, e.g. the ability to escalate support questions, or request custom pricing reviews.
Calculations are a Lead Magnet
There are literally thousands of combinations for adding value to your site with Calculations:
- Registration forms with upgrade packages
- Sell a tee shirt with size, color, price, and tax variations
- Add a BMI and/or calorie intake calculator to your health and fitness blog
- Embed a loan calculator into your finance site
- Give a midwife a due date calculator
- Insta-quote or service estimator
- Put an ROI calculator on your agency site
- And on, and on, and on…
Drag and Drop Form Blocks
Forminator has a bunch of drag and drop blocks that make it easy to put forms together – name, email, phone number, text, file upload, website, date, time, number, HTML, pagination, radio boxes, GDPR-friendly opt-ins, payments, calculations, and hidden field.
Your Favorite Integrations Including +1000 Apps Already Added
Forminator comes stacked with crowd favorite third-party integrations – email services, CRM, storage, and project managers.
- HubSpot
- Campaign Monitor
- ActiveCampaign
- Google Sheets
- Webhooks (Zapier, Make, Tray, etc)
- Trello
- MailChimp
- AWeber
- Slack
Develop And Sell Your Own Extensions
Forminator is free and open to millions of WordPress users! Use the developer API and the included hooks and filters to build your own integrations or custom apps and sell them or give them away free here on WordPress.org.
Poll Your Visitors
Polls are a brilliant way to engage visitors. Forminator gives real-time feedback with live stats displayed in beautiful pie charts and graphs.
Your Own Facebook-Style Quizzes
Who hasn’t been roped into taking “IQ tests” and “figure out which Star Wars character you are” quizzes on Facebook? Now you can run all that traffic to your site. Create both knowledge and no wrong answer quizzes with Forminator.
Collect Leads With Your Quizzes
Looking to use your quizzes for more than just entertainment and a way to engage your audience? Forminator also allows you to collect participants’ details (e.g., name, email, etc.) by integrating a lead generation form in your quiz. See how it works below:
Gutenberg Block
Forminator’s got you, whether you’re a classic editor or Gutenberg early adapter. Say goodbye to shortcodes and quickly add forms to posts with the Forminator block for Gutenberg.
Email Routing and Pre-Populate
Make your site more efficient from visitor input to email response times. Use query strings to pre-fill your visitor information and deliver forms direct to specific teams with email routing, auto-response and conditions.
User Front End Post Submissions
Want to let your visitors share a post submission without needing access to the WordPress dashboard? With Forminator visitors can submit post ideas from the front end of your site so you can easily curate and publish their thoughts. Assign post to a default author, save to draft, publish immediately, etc.
Google reCAPTCHA
You don’t want your inbox flooded with a bunch of form spam. Google ReCAPTCHA is free with Forminator. Now you can stop the crazy bots without making it hard on your visitors. No more hard to read random phrases.
Collect, Track and GDPR Ready
Forminator stores and organizes submissions so you can sort, analyze and manage responses – of course, all while making it super easy to comply with the GDPR and other legal privacy policies.
Import Your Existing Contact Form 7 Data
Looking to move existing forms over from CF7? Forminator’s Import Wizard allows you to migrate all, or selected forms in a matter of clicks. You can also transfer data from a range of Contact Form 7 add-ons and settings.
Custom Login and Registration Forms
Create and embed custom login and registration forms for your sites (or multisites!). Take L&R forms to the next level: choose from a range of form fields, and customize settings, style, and behavior. Learn more in the video below:
Multi-file Upload Field
Along with enabling single file uploads, Forminator takes things up a notch by allowing users to upload multiple files. You can also choose to set specific file types, limit the number of files that can be uploaded, as well as the individual file size. The upload field’s drag and drop interface also makes it a breeze for users to upload files.
Group And Repeat Form Fields
The Field Group feature allows you to group any number of fields together in one form. You can also enable users to add as many additional field groups as needed when filling out your form. Great for repeatable data entry such as employment history, event attendees, lists, etc.
Advanced Date Field Restrictions
Perfect for appointment and hotel bookings – Forminator’s Date Picker Limits feature allows you to restrict the available dates shown on your date field calendar. For example, you might show future dates only, a selected number of dates from today, dates between a specific date range, specific days of the week, and more!
Add An E-Signature Form Field (Pro Only)*
Have an online application that requires a signature, or a contract you need your customers to sign? Forminator’s E-signature feature allows visitors to use their mouse, trackpad, or finger (on touch devices) to leave a signature upon submitting the form. Just insert the “E-Signature” field and voila!
Receive Subscriptions and Recurring Payments on Stripe (Pro Only)*
Create fully-customized subscription forms with Forminator Pro’s Stripe Subscription add-on. Allow your customers to choose plans/pricing, billing cycle, custom upsells, a free trial option, and of course, make secure card payments. Forminator also saves you time by instantly and automatically syncing all subscription form data straight to your Stripe account.
*Note: These features are only available with Forminator Pro. Get instant access to Forminator Pro – as well as all our other premium plugins, managed WP hosting, our site management platform: The Hub, and 24/7 expert support – all with a WPMU DEV membership.
What Do People Say About Forminator?
★★★★★
Amazing plugin, it really seems that only your imagination can limit its uses. Loads of features like taking payments, calendar, for free. Can’t believe everything I need is in there, it sparks creativity and makes it fun to work on a website. – araca
★★★★★
This plugin has an excellent, well-thought-out, well-designed UI and offers everything I was looking for (and I think I’ve tried every serious competitor). – tvsmvp
★★★★★
This plugin is the best free form builder by far! I have researched many but this is so easy to use… Try it. I am SURE you will LOVE IT. – johncarteroz
★★★★★
Great interface design, super easy to use and great functionality. I don’t normally write reviews, but I loved it so much, I just had to this time! – istavridi
Shameless Plug(ins)
Love Forminator! WPMU DEV has some other awesome free plugins you should checkout.
- Smush – Image Compression and Optimization
- Hummingbird – Page Speed Optimization
- Hustle – Pop-ups, Slide-ins and Email Opt-ins
- SmartCrawl – SEO Optimizer
- Defender – Security, Monitoring, and Hack Protection
About Us
WPMU DEV is a premium supplier of quality WordPress plugins, services and support. Join here:
https://wpmudev.com/
Don’t forget to stay up to date on everything WordPress from the Internet’s number one resource:
WPMU DEV Blog
Hey, one more thing… we hope you enjoy our free offerings as much as we’ve loved making them for you!
Contact and Credits
WPMU DEV