Skip to content
PluginCanary

CF7 Apps

CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.)
by Saad Iqbal · 300,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: released 6 days ago, tested with WordPress 7.1, no open vulnerabilities.

95/ 100 Canary Score

Based on 4 of 5 areas

Capped at 95: not enough support or review data for a full score.

Sub-scores for CF7 Apps
Ownership100
Maintenance100
Security95
Support80
ReputationNo data

How the score works

Quick answers

Is CF7 Apps still maintained?
Yes. Last release 29 Oct 2026, 20 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns CF7 Apps, and has it changed hands?
No change recorded. Main committer wpexpertsio since Jun 2024. 4 Nov 2026 · SVN log
Was CF7 Apps removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is CF7 Apps safe?
1 known vulnerability, fixed (latest in 3.8.0). Not on the exploited list. 1 Oct 2026 · Wordfence Intelligence
Is the latest CF7 Apps update safe to install?
No ownership change before 3.9.0. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

History: 1 past vulnerability, patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
DaoByDesign28 Jun 2011 to 20 Nov 2019, 71 commits
nocean20 May 2020 to 28 Jun 2024, 40 commits
wpexpertsio28 Jun 2024 to 29 Oct 2026, 86 commits

3 committers recorded. No ownership changes recorded since 2011.

Maintenance

Last release
6 days ago
Releases, 24 months
20
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for CF7 Apps
Q1 20240
Q2 20241
Q3 20243
Q4 20242
Q1 20250
Q2 20250
Q3 20255
Q4 20254
Q1 20262
Q2 20263
Q3 20263
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.8.

Last 90 days vs lifetime average rating for CF7 Apps
Last 90 daysNo reviews
Lifetime3.8
Average rating per quarter
Average rating per quarter for CF7 Apps
Q1 20243.0
Q2 20245.0
Q3 20245.0
Q1 20251.0
Q3 20251.3
Q4 20253.4
Q1 20265.0
Q2 20264.3

Average rating rose from 3.0 to 4.3 between Q1 2024 and Q2 2026.

Rating distribution
5 star90
4 star2
3 star2
2 star6
1 star35
Latest low reviews

Security record

1 vulnerability in 24 months, patched (latest fixed in 3.8.0).

Show 1 patched vulnerability
PublishedIssueCVSSAffectedFixed inDays to patch
1 Oct 2026CF7 Apps - Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 <= 3.7.2 - Unauthenticated Information Exposure5.3<= 3.7.23.8.0Before disclosure

Changelog mentions of security fixes: 3.9.0 (vulnerability).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

80% of 5 support threads resolved in the last 2 months.

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for CF7 Apps
4 May 20264,701
11 May 2026115,775
18 May 202636,597
25 May 202619,393
1 Jun 202615,307
8 Jun 2026130,688
15 Jun 202623,659
22 Jun 202617,023
29 Jun 202615,085
6 Jul 202617,561
13 Jul 202611,799
20 Jul 202613,128
27 Jul 2026109,480
3 Aug 2026137,702
10 Aug 202631,487
17 Aug 202621,679
24 Aug 202616,609
31 Aug 202614,613
7 Sep 202611,102
14 Sep 202610,625
21 Sep 202611,479
28 Sep 2026122,423
5 Oct 202635,751
12 Oct 202618,634
19 Oct 202625,245
26 Oct 2026120,337
2 Nov 20269,604

Weekly downloads over the last 4 weeks are 5% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Telephone field for Elementor FormsScore 100 · 4,000+PDF Forms Filler for CF7Score 100 · 3,000+FormsDBScore 98 · 20,000+

Facts

Version3.9.0
AuthorSaad Iqbal
Added28 Jun 2011
Last updated29 Oct 2026
Active installs300,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.4
CategorySupport & Help Desk > Help Desk & Ticketing Systems
Tagscaptcha, honeypot, anti-spam, CF7 Database, spam protection

Other plugins by this author: Post SMTP - Complete Email Delivery and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App, Password Protected, Advanced File Manager - Ultimate File Manager for WordPress And Document Library Solution, All In One Login, Social Preview and Open Graph Tags, Gutena Forms - Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder, WC Hide Shipping Methods, New User Approve, Email Templates Customizer and Designer for WordPress and WooCommerce, Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program - myCred, Gutena Tabs, License Manager for WooCommerce

Questions

Is CF7 Apps still maintained?

Yes. Last release 29 Oct 2026, 20 releases in the last 24 months.

Who owns CF7 Apps, and has it changed hands?

No change recorded. Main committer wpexpertsio since Jun 2024.

Was CF7 Apps removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is CF7 Apps safe?

1 known vulnerability, fixed (latest in 3.8.0). Not on the exploited list.

Is the latest CF7 Apps update safe to install?

No ownership change before 3.9.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue