Skip to content
PluginCanary

Business Essentials for Contact Form 7

by Scott Paterson · 7,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 30 Sep 2026, fixed in 1.2.2.

86/ 100 Canary Score
Sub-scores for Business Essentials for Contact Form 7
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 1.2.2. Update to version 1.2.2 or later.30 Sep 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master24 Feb 2019 to 24 Feb 2019, 1 commits
scottpaterson24 Feb 2019 to 26 Sep 2026, 30 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
39 days ago
Releases, 24 months
7
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter for Business Essentials for Contact Form 7
Q1 20240
Q2 20240
Q3 20242
Q4 20241
Q1 20251
Q2 20252
Q3 20250
Q4 20250
Q1 20262
Q2 20260
Q3 20261
Q4 20260

Last release 26 Sep 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Sep 2026Business Essentials for Contact Form 7 <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting via 'gateway' Form Field7.2<= 1.2.11.2.20
14 Jan 2025Contact Form 7 Redirect & Thank You Page <= 1.0.7 - Reflected Cross-Site Scripting6.1<= 1.0.71.0.80
11 Nov 2024Contact Form 7 Redirect & Thank You Page <= 1.0.6 - Reflected Cross-Site Scripting6.1<= 1.0.61.0.70
15 Mar 2023Contact Form 7 Redirect & Thank You Page <= 1.0.3 - Cross-Site Request Forgery via cf7rl_admin_table4.3<= 1.0.31.0.46

Source: Wordfence Intelligence.

Reputation

Lifetime rating 3.3 from 10 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star5
4 star1
3 star0
2 star0
1 star4

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Business Essentials for Contact Form 7
4 May 202699
11 May 2026166
18 May 2026195
25 May 2026193
1 Jun 2026147
8 Jun 2026160
15 Jun 2026141
22 Jun 2026140
29 Jun 2026124
6 Jul 2026138
13 Jul 2026135
20 Jul 2026167
27 Jul 2026168
3 Aug 2026178
10 Aug 2026173
17 Aug 2026227
24 Aug 2026164
31 Aug 2026165
7 Sep 2026158
14 Sep 2026188
21 Sep 20261,887
28 Sep 20261,135
5 Oct 2026967
12 Oct 2026471
19 Oct 2026558
26 Oct 2026464
2 Nov 202661

Weekly downloads over the last 4 weeks are 20% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

گرویتی فرم فارسی | Persian Gravity FormsScore 92 · 20,000+Database Addon For WPForms ( wpforms entries ) - WPFormsDBScore 92 · 20,000+Database Addon for Contact Form 7 - CFDB7Score 91 · 600,000+CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.)Score 91 · 300,000+Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)Score 91 · 70,000+

Facts

Version1.2.2
AuthorScott Paterson
Added24 Feb 2019
Last updated26 Sep 2026
Active installs7,000+
Requires WordPress3.0
Tested up to7.1.4
Requires PHP5.6
CategoryForms & Data Collection > Contact Forms
Tagsdatabase, payments, recaptcha, appointments, contact form 7

Other plugins by this author: Accept Donations with PayPal & Stripe, Easy PayPal & Stripe Buy Now Button, Contact Form 7 - PayPal & Stripe Add-on, Accept PayPal & Stripe with Subscriptions for WooCommerce, Before After Image, Easy PayPal Shopping Cart, Easy PayPal Events & Tickets, Subscriptions & Memberships for PayPal, Time Clock - A WordPress Employee & Volunteer Time Clock Plugin, PayPal Digital Downloads, Checkout Field Editor / Checkout Manager for WooCommerce, Easy Stripe - Tips, Payments, and Donations

Questions

Is Business Essentials for Contact Form 7 still maintained?

Business Essentials for Contact Form 7 was last updated on 26 Sep 2026. Its Canary status is Healthy.

Is Business Essentials for Contact Form 7 safe?

Business Essentials for Contact Form 7 has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Business Essentials for Contact Form 7?

The wordpress.org author is Scott Paterson. Recent committers: scottpaterson, plugin-master. We have recorded no ownership change.

What can I use instead of Business Essentials for Contact Form 7?

Plugins in the same category with a higher Canary Score: گرویتی فرم فارسی | Persian Gravity Forms, Database Addon For WPForms ( wpforms entries ) - WPFormsDB, Database Addon for Contact Form 7 - CFDB7, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR).

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue