Skip to content
PluginCanary

Vsourz Form Entries for Contact Form 7

Fewer than 10 active installs · Checked 3 Nov 2026
Avoid2 Criticals2 Warnings

Avoid: Vsourz Form Entries for Contact Form 7 is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for Vsourz Form Entries for Contact Form 7
Ownership100
Maintenance10
Security10
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 9 Sep 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Sep 2026Evidence
  • CriticalSEC-2Vulnerability published 7 Oct 2024 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.21 Oct 2024Evidence
  • WarningSEC-1Vulnerability published 22 Sep 2026, fixed in 2.1.2. Update to version 2.1.2 or later.22 Sep 2026Evidence
  • WarningCLS-1Closed on wordpress.org on 2 Sep 2026, reason: licensing or trademark issue. Replace this plugin. It no longer receives updates from wordpress.org.2 Sep 2026Evidence
  • InfoSEC-36 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
not recorded
Releases, 24 months
0
Tested up to
not stated vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Sep 2026Advanced Contact form 7 DB <= 2.1.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure via 'acf7db' Shortcode6.5<= 2.1.12.1.2n/a
9 Sep 2026Advanced Contact form 7 DB <= 2.1.3 - Missing Authorization to Authenticated (Custom+) Unauthorized Data Import via 'import_cf7_id'4.3<= 2.1.3No fixn/a
30 Jun 2026Advanced Contact form 7 DB <= 2.0.9 - Missing Authorization4.3<= 2.0.92.1.0n/a
8 Apr 2026Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion5.4<= 2.0.92.1.0n/a
8 Apr 2026Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export4.3<= 2.0.92.1.0n/a
7 Apr 2025Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)3.7<= 2.0.82.0.9n/a
7 Oct 2024PHPSpreadsheet Library < 2.3.0 - XXE Injection7.5<= 2.0.5No fixn/a
10 Jun 2024Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure5.3<= 2.0.22.0.3n/a
10 Jun 2024Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure5.3<= 2.0.22.0.3n/a
21 Apr 2022Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting6.1<= 1.8.71.8.8n/a
22 Feb 2022Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion8.8< 1.8.71.8.7n/a
22 Sep 2020Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection9.8<= 1.6.21.7.0n/a
11 Apr 2019Advanced Contact form 7 DB <= 1.6.0 - SQL Injection8.5< 1.6.11.6.1n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

Fewer than 10 active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsFewer than 10
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryForms & Data Collection > Contact Forms
Tagsnot stated

Questions

Is Vsourz Form Entries for Contact Form 7 still maintained?

No. Vsourz Form Entries for Contact Form 7 was closed on wordpress.org on 2 Sep 2026 (licensing or trademark issue) and gets no updates there.

Is Vsourz Form Entries for Contact Form 7 safe?

Vsourz Form Entries for Contact Form 7 has 2 published vulnerabilities with no patched version. Its Canary status is Avoid.

Who owns Vsourz Form Entries for Contact Form 7?

The wordpress.org author is not listed. We have recorded no ownership change.

What can I use instead of Vsourz Form Entries for Contact Form 7?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue