Skip to content
PluginCanary

CF7 to Webhook

by Mário Valney · 30,000+ active installs · Checked 4 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 5 Jun 2026, 7 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

87/ 100 Canary Score
Sub-scores for CF7 to Webhook
Ownership100
Maintenance75
Security90
SupportNo data
Reputation85

How the score works

Quick answers

Is CF7 to Webhook still maintained?
Yes. Last release 5 Jun 2026, 7 releases in the last 24 months. 5 Jun 2026 · wordpress.org
Who owns CF7 to Webhook, and has it changed hands?
No change recorded. Main committer mariovalney since Sep 2017. 4 Nov 2026 · SVN log
Was CF7 to Webhook removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is CF7 to Webhook safe?
1 known vulnerability, fixed (latest in 5.0.1). Not on the exploited list. 17 Jun 2026 · Wordfence Intelligence
Is the latest CF7 to Webhook update safe to install?
No ownership change before 5.1.0. No one-star spike after it. 5 Jun 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mariovalney21 Sep 2017 to 5 Jun 2026, 55 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
5 months ago
Releases, 24 months
7
Tested up to
6.9 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for CF7 to Webhook
Q1 20244
Q2 20240
Q3 20241
Q4 20243
Q1 20253
Q2 20250
Q3 20250
Q4 20250
Q1 20261
Q2 20262
Q3 20260
Q4 20260

Last release 5 Jun 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: 5.0 (2 reviews). Lifetime: 5.0.

Average rating per quarter for CF7 to Webhook
Q4 20235.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star53
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months, patched (latest fixed in 5.0.1).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
17 Jun 2026CF7 to Webhook <= 5.0.0 - Unauthenticated Server-Side Request Forgery via CF7 Field Placeholder in Webhook URL Host7.2<= 5.0.05.0.1Patched before disclosure

Changelog mentions of security fixes: 5.0.1 (security); 5.1.0 (vulnerability, XSS, authorization).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CF7 to Webhook
4 May 2026441
11 May 2026976
18 May 20261,042
25 May 20261,097
1 Jun 20268,461
8 Jun 20264,176
15 Jun 20264,043
22 Jun 20262,532
29 Jun 20261,639
6 Jul 20263,339
13 Jul 20261,185
20 Jul 20261,204
27 Jul 20261,095
3 Aug 20261,042
10 Aug 2026874
17 Aug 2026854
24 Aug 2026850
31 Aug 2026775
7 Sep 2026717
14 Sep 2026796
21 Sep 2026914
28 Sep 2026868
5 Oct 2026810
12 Oct 2026929
19 Oct 20261,150
26 Oct 2026980
2 Nov 2026172

Weekly downloads over the last 4 weeks are 49% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image CAPTCHA for Contact Form 7 andScore 100 · 70,000+Gravity Forms CLI Add-OnScore 100 · 20,000+Fluent PDF GeneratorScore 100 · 20,000+CF7 MateScore 100 · 20,000+Smart Grid-Layout Design for ContactScore 100 · 10,000+

Facts

Version5.1.0
AuthorMário Valney
Added21 Sep 2017
Last updated5 Jun 2026
Active installs30,000+
Requires WordPress4.7
Tested up to6.9.11
Requires PHP7.4
CategoryCommunication & Messaging > Transactional Email
Tagscf7, zapier, webhook, integration, contact form

Other plugins by this author: OG Tags, HTML Template for CF7, Blocks for Products, Shipping Additional Days for WooCommerce, Pagador (Braspag) Checkout for WooCommerce, API Improver for WooCommerce

Questions

Is CF7 to Webhook still maintained?

Yes. Last release 5 Jun 2026, 7 releases in the last 24 months.

Who owns CF7 to Webhook, and has it changed hands?

No change recorded. Main committer mariovalney since Sep 2017.

Was CF7 to Webhook removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is CF7 to Webhook safe?

1 known vulnerability, fixed (latest in 5.0.1). Not on the exploited list.

Is the latest CF7 to Webhook update safe to install?

No ownership change before 5.1.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue