Skip to content
PluginCanary

DTX

by sevenspark · 100,000+ active installs · Checked 5 Nov 2026
Avoid2 Criticals

Avoid: vulnerability published 9 Oct 2026 still has no fix after 14 days.

39/ 100Avoid
Canary Score

Based on 3 of 5 areas

Capped at 39: a vulnerability has no patch.

Sub-scores for DTX
Ownership100
Maintenance90
Security15
SupportNo data
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • CriticalSEC-2Vulnerability published 9 Oct 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.23 Oct 2026Evidence
  • CriticalSEC-2Vulnerability published 21 Jul 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.4 Aug 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 9 past vulnerabilities, 2 still unpatched in the current version. Patched issues are listed in the Security record, not here.

Quick answers

Is DTX still maintained?
Yes. Last release 4 Aug 2026, 8 releases in the last 24 months. 4 Aug 2026 · wordpress.org
Who owns DTX, and has it changed hands?
No change recorded. Main committer tessawatkinsllc since Jan 2023. 5 Nov 2026 · SVN log
Was DTX removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is DTX safe?
No. 2 known vulnerabilities have no fix in the current version. 9 Oct 2026 · Wordfence Intelligence
Is the latest DTX update safe to install?
No ownership change before 5.0.7. No one-star spike after it. 4 Aug 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sevenspark11 Oct 2010 to 9 Jan 2024, 55 commits
tessawatkinsllc17 Jan 2023 to 4 Aug 2026, 81 commits

2 committers recorded. No ownership changes recorded since 2010.

Maintenance

Last release
3 months ago
Releases, 24 months
8
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for DTX
Q1 20246
Q2 20243
Q3 20240
Q4 20245
Q1 20251
Q2 20250
Q3 20250
Q4 20250
Q1 20262
Q2 20261
Q3 20261
Q4 20260

Last release 4 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

Resolved, last 2 months
0%
Threads, last 2 months
2

Trend appears after 8 weekly snapshots.

Security record

6 vulnerabilities in 24 months (9 on record), 2 with no fix in the current version.

DateIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Unauthenticated Information Exposure5.3<= 5.0.7No fixn/a
21 Jul 2026Unauthenticated Arbitrary Shortcode Execution6.5<= 5.0.7No fixn/a
Show 7 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
4 Aug 2026Authenticated (Editor+) Stored Cross-Site Scripting4.4<= 5.0.55.0.6Before disclosure
26 Sep 2025Unauthenticated Arbitrary Shortcode Execution6.5<= 5.0.5Not affectedn/a
19 Dec 2024Cross-Site Request Forgery4.3<= 5.0.15.0.2Before disclosure
5 Nov 2024Information Disclosure via Shortcode4.3<= 4.54.5.1Before disclosure
10 Jan 2024Insecure Direct Object Reference4.3<= 4.1.04.2.0Same day
19 Jan 2023Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.0.33.0.0Before disclosure
24 Jul 2019Reflected Cross-Site Scripting6.1< 2.0.32.0.31

Changelog mentions of security fixes: 5.0.6 (security, vulnerability, XSS, CSRF, nonce, escaping); 5.0.7 (security, escaping, sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Last 90 days vs lifetime average rating for DTX
Last 90 daysNo reviews
Lifetime4.7
Average rating per quarter
Average rating per quarter for DTX
Q2 20245.0
Q3 20245.0
Q2 20255.0

Average rating stayed at 5.0 between Q2 2024 and Q2 2025.

Rating distribution
5 star87
4 star3
3 star4
2 star2
1 star3
Latest low reviews

Momentum

Active installs
100,000+
Downloads, last full week
3,813
Weekly downloads, last 26 complete weeks
Weekly downloads for DTX
4 May 2026719
11 May 20262,144
18 May 20262,028
25 May 20262,208
1 Jun 202622,543
8 Jun 20267,979
15 Jun 20264,828
22 Jun 20263,749
29 Jun 20263,710
6 Jul 20265,903
13 Jul 20262,737
20 Jul 20264,098
27 Jul 20263,853
3 Aug 202629,823
10 Aug 20265,869
17 Aug 20264,649
24 Aug 20264,603
31 Aug 20263,685
7 Sep 20263,128
14 Sep 20263,195
21 Sep 20262,957
28 Sep 20262,537
5 Oct 20262,736
12 Oct 20262,233
19 Oct 20263,509
26 Oct 20263,813

Weekly downloads over the last 4 weeks are 43% below the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

ReCaptcha v2 for Contact Form 7Score 95 · 200,000+LukasApps CAPTCHA tools for Contact FormScore 95 · 100,000+Image CAPTCHA for Contact Form 7 andScore 95 · 70,000+

Facts

Full name
DTX - Dynamic Text Extension for Contact Form 7
Version
5.0.7
Author
sevenspark
Added
11 Oct 2010
Last updated
4 Aug 2026
Active installs
100,000+
Requires WordPress
5.5
Tested up to
7.0.8
Requires PHP
7.4
Category
Forms & Data Collection > Form Builders & Creators
Tags
autofill, form field, prepopulate, dynamic form, contact form 7

Other plugins by this author: ShiftNav, Bellows Accordion Menu, Menu Swapper, Responsive Select Menu, Faster Appearance

Questions about DTX

Is DTX still maintained?

Yes. Last release 4 Aug 2026, 8 releases in the last 24 months.

Who owns DTX, and has it changed hands?

No change recorded. Main committer tessawatkinsllc since Jan 2023.

Was DTX removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is DTX safe?

No. 2 known vulnerabilities have no fix in the current version.

Is the latest DTX update safe to install?

No ownership change before 5.0.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue