Skip to content
PluginCanary

Webheadcoder Multi-Step Forms for

Webheadcoder Multi-Step Forms for Contact Form 7
by webheadcoder · 50,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 9 Oct 2026, 9 releases in 24 months, no unpatched vulnerabilities.

96/ 100 Canary Score
Sub-scores for Webheadcoder Multi-Step Forms for
Ownership100
Maintenance100
Security90
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Webheadcoder Multi-Step Forms for still maintained?
Yes. Last release 9 Oct 2026, 9 releases in the last 24 months. 9 Oct 2026 · wordpress.org
Who owns Webheadcoder Multi-Step Forms for, and has it changed hands?
No change recorded. Main committer webheadllc since Apr 2013. 4 Nov 2026 · SVN log
Was Webheadcoder Multi-Step Forms for removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Webheadcoder Multi-Step Forms for safe?
4 known vulnerabilities, all fixed (latest in 4.7.1). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
Is the latest Webheadcoder Multi-Step Forms for update safe to install?
No ownership change before 4.7.1. No one-star spike after it. 9 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
webheadllc15 Apr 2013 to 9 Oct 2026, 193 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
26 days ago
Releases, 24 months
9
Tested up to
7.1 current
Requires PHP
7.3 supported 8.2+
Releases per quarter
Releases per quarter for Webheadcoder Multi-Step Forms for
Q1 20240
Q2 20241
Q3 20240
Q4 20241
Q1 20251
Q2 20250
Q3 20252
Q4 20251
Q1 20261
Q2 20260
Q3 20262
Q4 20261

Last release 9 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.2.

Average rating stayed at 5.0 between Q4 2024 and Q1 2025.

Rating distribution
5 star35
4 star4
3 star2
2 star1
1 star7
Latest low reviews

Security record

2 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 4.7.1).

Show 4 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Webheadcoder Multi-Step Forms for Contact Form 7 <= 4.7 - Reflected Cross-Site Scripting via 'l10n_print_after' Parameter6.1<= 4.74.7.1Patched before disclosure
30 Apr 2026Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1<= 4.4.14.4.2Patched before disclosure
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 4.1.914.1.911
25 Feb 2019Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update8.8< 3.0.93.0.91

Changelog mentions of security fixes: 4.7 (escaping); 4.7.1 (security, vulnerability, XSS).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Webheadcoder Multi-Step Forms for
4 May 2026590
11 May 20261,115
18 May 20261,281
25 May 20261,356
1 Jun 20261,059
8 Jun 20261,064
15 Jun 20261,016
22 Jun 2026961
29 Jun 2026942
6 Jul 202616,279
13 Jul 20263,040
20 Jul 20263,254
27 Jul 20262,683
3 Aug 20262,033
10 Aug 20261,221
17 Aug 202617,506
24 Aug 20263,141
31 Aug 20262,608
7 Sep 20261,794
14 Sep 20261,858
21 Sep 20261,693
28 Sep 20261,827
5 Oct 202614,809
12 Oct 20263,990
19 Oct 20267,419
26 Oct 20265,223
2 Nov 2026688

Weekly downloads over the last 4 weeks are 16% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image CAPTCHA for Contact Form 7 andScore 100 · 70,000+Gravity Forms CLI Add-OnScore 100 · 20,000+Fluent PDF GeneratorScore 100 · 20,000+CF7 MateScore 100 · 20,000+Smart Grid-Layout Design for ContactScore 100 · 10,000+

Facts

Version4.7.1
Authorwebheadcoder
Added15 Apr 2013
Last updated9 Oct 2026
Active installs50,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.3
CategoryForms & Data Collection > Contact Forms
Tagscontact form 7, multistep form, multi page form, form persistence

Other plugins by this author: Clear Cache for Me, WP-Cron Status Checker, WH Tweaks, WP Log Action, No JS Social Sharing

Questions

Is Webheadcoder Multi-Step Forms for still maintained?

Yes. Last release 9 Oct 2026, 9 releases in the last 24 months.

Who owns Webheadcoder Multi-Step Forms for, and has it changed hands?

No change recorded. Main committer webheadllc since Apr 2013.

Was Webheadcoder Multi-Step Forms for removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Webheadcoder Multi-Step Forms for safe?

4 known vulnerabilities, all fixed (latest in 4.7.1). Not on the exploited list.

Is the latest Webheadcoder Multi-Step Forms for update safe to install?

No ownership change before 4.7.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue