Contact Form 7
Healthy: recent reviews average 2.8 stars vs 4 lifetime.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 95 |
| Support | 34 |
| Reputation | 45 |
Active signals
Facts we detected, with links to the source.
- WarningREP-1Recent reviews average 2.8 stars vs 4 lifetime. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| takayukister | 12 May 2012 to 29 Oct 2026, 2000 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 6 days ago
- Releases, 24 months
- 21
- Tested up to
- 7.1 current
- Requires PHP
- 8.3 supported 8.2+
| Q1 2024 | 5 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 2 |
| Q4 2024 | 3 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 2 |
| Q4 2025 | 2 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 2 |
| Q4 2026 | 6 |
Last release 29 Oct 2026. Tested with WordPress 7.1 (current).
Support
34% of 85 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 15 Apr 2025 | Contact Form 7 <= 6.0.5 - Order Replay Vulnerability | 5.3 | <= 6.0.5 | 6.0.6 | 0 |
| 5 Jun 2024 | Contact Form 7 <= 5.9.4 - Unauthenticated Open Redirect | 6.1 | <= 5.9.4 | 5.9.5 | 0 |
| 13 Mar 2024 | Contact Form 7 <= 5.9 - Reflected Cross-Site Scripting | 6.1 | <= 5.9 | 5.9.2 | 0 |
| 30 Nov 2023 | Contact Form 7 <= 5.8.3 - Authenticated (Editor+) Arbitrary File Upload | 6.6 | <= 5.8.3 | 5.8.4 | 0 |
| 17 Dec 2020 | Contact Form 7 <= 5.3.1 - Arbitrary File Upload via Bypass | 8.1 | < 5.3.2 | 5.3.2 | 0 |
| 4 Sep 2018 | Contact Form 7 <= 5.0.3 - Authorization Bypass | 6.3 | < 5.0.4 | 5.0.4 | 1 |
| 1 Aug 2014 | Contact Form 7 <= 3.5.2 - Arbitrary File Upload | 9.8 | <= 3.5.2 | 3.5.3 | 0 |
| 26 Feb 2014 | Contact Form 7 < 3.7.2 - CAPTCHA Bypass | 5.3 | < 3.7.2 | 3.7.2 | 1 |
Source: Wordfence Intelligence.
Reputation
| Q2 2026 | 4.3 |
|---|---|
| Q3 2026 | 4.6 |
| Q4 2026 | 2.1 |
Average rating fell from 4.3 to 2.1 between Q2 2026 and Q4 2026.
| 5 star | 1475 |
|---|---|
| 4 star | 156 |
| 3 star | 79 |
| 2 star | 68 |
| 1 star | 408 |
- Used to be the best · 1 star · 30 Oct 2026
- From Neglect to PHP 8.3 Whiplash: Contact Form 7 Has Lost My Trust · 1 star · 14 Oct 2026
- Broken sites after insisting on PHP 8.3 · 1 star · 10 Oct 2026
Momentum
10,000,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 114,556 |
|---|---|
| 11 May 2026 | 2,667,305 |
| 18 May 2026 | 939,694 |
| 25 May 2026 | 477,749 |
| 1 Jun 2026 | 375,233 |
| 8 Jun 2026 | 324,194 |
| 15 Jun 2026 | 296,652 |
| 22 Jun 2026 | 267,648 |
| 29 Jun 2026 | 256,730 |
| 6 Jul 2026 | 250,040 |
| 13 Jul 2026 | 247,591 |
| 20 Jul 2026 | 265,097 |
| 27 Jul 2026 | 244,776 |
| 3 Aug 2026 | 231,849 |
| 10 Aug 2026 | 202,876 |
| 17 Aug 2026 | 3,228,342 |
| 24 Aug 2026 | 527,465 |
| 31 Aug 2026 | 419,201 |
| 7 Sep 2026 | 325,536 |
| 14 Sep 2026 | 311,948 |
| 21 Sep 2026 | 306,880 |
| 28 Sep 2026 | 269,977 |
| 5 Oct 2026 | 2,818,667 |
| 12 Oct 2026 | 711,742 |
| 19 Oct 2026 | 1,624,042 |
| 26 Oct 2026 | 2,095,381 |
| 2 Nov 2026 | 111,014 |
Weekly downloads over the last 4 weeks are 54% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 6.2.4.1 |
|---|---|
| Author | Rock Lobster Inc. |
| Added | 2 Aug 2007 |
| Last updated | 29 Oct 2026 |
| Active installs | 10,000,000+ |
| Requires WordPress | 7.1 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.3 |
| Category | Forms & Data Collection > Contact Forms |
| Tags | contact form, schema-woven validation |
Other plugins by this author: Flamingo, Really Simple CAPTCHA, Bogo, Listo, Double Opt-In Helper
Questions
Is Contact Form 7 still maintained?
Contact Form 7 was last updated on 29 Oct 2026. Its Canary status is Healthy.
Is Contact Form 7 safe?
Contact Form 7 has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns Contact Form 7?
The wordpress.org author is Rock Lobster Inc.. Recent committers: takayukister. We have recorded no ownership change.
What can I use instead of Contact Form 7?
Plugins in the same category with a higher Canary Score: Online Forms - Customizable Payment, Contact, Quiz, Survey Form Builder - Jotform, Zoho Forms - Drag & Drop Form Builder for Websites - Contact Forms, Payment Forms, Order Forms & More, Contact Form Clean and Simple, Formzu WP, Woorise - Forms, Quizzes & Giveaways.