CF7 Mate
Healthy: maintained, last release 29 Oct 2026, 21 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is CF7 Mate still maintained?
- Yes. Last release 29 Oct 2026, 21 releases in the last 24 months. 29 Oct 2026 · wordpress.org
- Who owns CF7 Mate, and has it changed hands?
- No change recorded. Main committer badhonrocks since Oct 2023. 4 Nov 2026 · SVN log
- Was CF7 Mate removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is CF7 Mate safe?
- 2 known vulnerabilities, all fixed (latest in 1.3.3). Not on the exploited list. 18 Jul 2023 · Wordfence Intelligence
- Is the latest CF7 Mate update safe to install?
- No ownership change before 4.1.1. No one-star spike after it. 29 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 9 Feb 2019 to 9 Feb 2019, 1 commits |
|---|---|
| divipeople | 5 Mar 2019 to 23 Mar 2023, 61 commits |
| badhonrocks | 25 Oct 2023 to 29 Oct 2026, 46 commits |
3 committers recorded. No ownership change since 2019.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 21
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 3 |
| Q1 2025 | 0 |
| Q2 2025 | 4 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 4 |
| Q2 2026 | 6 |
| Q3 2026 | 0 |
| Q4 2026 | 3 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 3.9.
| Q4 2023 | 1.0 |
|---|---|
| Q2 2024 | 1.0 |
| Q4 2024 | 1.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
Average rating rose from 1.0 to 5.0 between Q4 2023 and Q2 2026.
| 5 star | 31 |
|---|---|
| 4 star | 2 |
| 3 star | 1 |
| 2 star | 1 |
| 1 star | 11 |
- Removed best feature · 1 star · 21 Oct 2024
- Took Away an Implemented Feature · 1 star · 3 Oct 2024
- Whatever you do, do NOT upgrade from version 1.2.6 · 1 star · 25 Apr 2024
Security record
2 vulnerabilities on record, all patched (latest fixed in 1.3.3).
Show 2 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | <= 1.3.2 | 1.3.3 | Patched before disclosure |
| 4 Mar 2022 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | < 1.3.0 | 1.3.0 | n/a |
Changelog mentions of security fixes: 3.0.8 (security, XSS, escaping); 4.1.1 (security).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 2 support threads resolved in the last 2 months.
Momentum
20,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 195 |
|---|---|
| 11 May 2026 | 519 |
| 18 May 2026 | 538 |
| 25 May 2026 | 17,367 |
| 1 Jun 2026 | 4,973 |
| 8 Jun 2026 | 8,999 |
| 15 Jun 2026 | 4,243 |
| 22 Jun 2026 | 1,434 |
| 29 Jun 2026 | 9,576 |
| 6 Jul 2026 | 2,771 |
| 13 Jul 2026 | 1,014 |
| 20 Jul 2026 | 1,115 |
| 27 Jul 2026 | 912 |
| 3 Aug 2026 | 822 |
| 10 Aug 2026 | 620 |
| 17 Aug 2026 | 677 |
| 24 Aug 2026 | 716 |
| 31 Aug 2026 | 685 |
| 7 Sep 2026 | 630 |
| 14 Sep 2026 | 712 |
| 21 Sep 2026 | 700 |
| 28 Sep 2026 | 601 |
| 5 Oct 2026 | 602 |
| 12 Oct 2026 | 542 |
| 19 Oct 2026 | 14,048 |
| 26 Oct 2026 | 13,366 |
| 2 Nov 2026 | 753 |
Weekly downloads over the last 4 weeks are 117% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 4.1.1 |
|---|---|
| Author | Fahim Reza |
| Added | 5 Mar 2019 |
| Last updated | 29 Oct 2026 |
| Active installs | 20,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Forms & Data Collection > Form Builders & Creators |
| Tags | contact form 7, Multi-Step Form, conditional fields, contact form 7 styler, contact form 7 database |
Other plugins by this author: Divi Torque Lite, Divi Carousel Lite - Make Carousels for Divi 5, Divi Masonry Gallery - Pro Gallery, Disable Comments - No Comments & No Spam, Saddle - AI Site Control (MCP), Nightly Dark Mode, Secure SVG Upload, Mailyard, Saddle Analytics
Questions
Is CF7 Mate still maintained?
Yes. Last release 29 Oct 2026, 21 releases in the last 24 months.
Who owns CF7 Mate, and has it changed hands?
No change recorded. Main committer badhonrocks since Oct 2023.
Was CF7 Mate removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is CF7 Mate safe?
2 known vulnerabilities, all fixed (latest in 1.3.3). Not on the exploited list.
Is the latest CF7 Mate update safe to install?
No ownership change before 4.1.1. No one-star spike after it.