Skip to content
PluginCanary

Message Filter for Contact Form 7

by Kofi Mokome · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 7 vulnerabilities published in the last 24 months.

81/ 100 Canary Score
Sub-scores for Message Filter for Contact Form 7
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
kofimokome30 Aug 2018 to 11 Sep 2026, 81 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
53 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter for Message Filter for Contact Form 7
Q1 20243
Q2 20241
Q3 20244
Q4 20242
Q1 20252
Q2 20252
Q3 20252
Q4 20251
Q1 20260
Q2 20261
Q3 20262
Q4 20260

Last release 11 Sep 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
27 Jul 2026Message Filter for Contact Form 7 <= 1.6.3.9 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.6.3.91.6.4.00
8 Jul 2026Message Filter for Contact Form 7 <= 1.6.3.8 - Reflected Cross-Site Scripting6.1<= 1.6.3.81.6.3.90
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 1.6.3.21.6.3.30
22 Apr 2025Message Filter for Contact Form 7 <= 1.6.3.2 - Authenticated (Administrator+) SQL Injection4.9<= 1.6.3.21.6.33n/a
6 Dec 2024Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) New Filter Creation4.3<= 1.6.31.6.3.10
5 Dec 2024Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Filter Updates/Deletions4.3<= 1.6.31.6.3.10
5 Dec 2024Message Filter for Contact Form 7 <= 1.6.3 - Missing Authorization4.3<= 1.6.31.6.3.11
1 Aug 2024Message Filter for Contact Form 7 <= 1.6.1.1 - Reflected Cross-Site Scripting6.1<= 1.6.1.11.6.20
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.1<= 1.4.21.4.30

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 13 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star12
4 star1
3 star0
2 star0
1 star0

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Message Filter for Contact Form 7
4 May 202654
11 May 202676
18 May 202655
25 May 202671
1 Jun 202649
8 Jun 202665
15 Jun 202651
22 Jun 2026766
29 Jun 2026216
6 Jul 2026298
13 Jul 2026700
20 Jul 2026338
27 Jul 2026242
3 Aug 2026327
10 Aug 2026121
17 Aug 2026166
24 Aug 2026165
31 Aug 202697
7 Sep 2026716
14 Sep 2026434
21 Sep 2026282
28 Sep 2026247
5 Oct 2026174
12 Oct 2026191
19 Oct 2026233
26 Oct 2026207
2 Nov 202632

Weekly downloads over the last 4 weeks are 30% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

hCaptcha for WPScore 94 · 70,000+ActiveLayer Anti-Spam: Spam Protection for Forms & CommentsScore 93 · 10,000+SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)Score 93 · 10,000+Akismet Anti-spam: Spam ProtectionScore 92 · 5,000,000+CryptXScore 92 · 10,000+

Facts

Version1.6.4.1
AuthorKofi Mokome
Added30 Aug 2018
Last updated11 Sep 2026
Active installs1,000+
Requires WordPress6.6
Tested up to7.1.4
Requires PHP8.0
CategoryForms & Data Collection > Contact Forms
Tagsspam, filter, WPForms, spam filter, contact form 7

Other plugins by this author: SMS Extension for Contact Form 7, Gifted Testimonials

Questions

Is Message Filter for Contact Form 7 still maintained?

Message Filter for Contact Form 7 was last updated on 11 Sep 2026. Its Canary status is Healthy.

Is Message Filter for Contact Form 7 safe?

Message Filter for Contact Form 7 has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Message Filter for Contact Form 7?

The wordpress.org author is Kofi Mokome. Recent committers: kofimokome, plugin-master. We have recorded no ownership change.

What can I use instead of Message Filter for Contact Form 7?

Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, CryptX.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue