Skip to content
PluginCanary

Database Addon for Contact Form 7 - CFDB7

by Arshid · 600,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 13 Oct 2026, fixed in 1.4.2.

91/ 100 Canary Score
Sub-scores for Database Addon for Contact Form 7 - CFDB7
Ownership100
Maintenance100
Security90
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 1.4.2. Update to version 1.4.2 or later.13 Oct 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
arshidkv1222 Mar 2017 to 9 Oct 2026, 168 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
25 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter for Database Addon for Contact Form 7 - CFDB7
Q1 20240
Q2 20240
Q3 20241
Q4 20243
Q1 20251
Q2 20252
Q3 20251
Q4 20251
Q1 20261
Q2 20261
Q3 20261
Q4 20262

Last release 9 Oct 2026. Tested with WordPress 7.1 (current).

Support

50% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
13 Oct 2026Database Addon for Contact Form 7 <= 1.4.1 - Unauthenticated Limited File Deletion via Injected 'attackcfdb7_file' Submission Field5.3<= 1.4.11.4.20
3 Jul 2025Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter6.1<= 1.3.11.3.20
26 Apr 2024Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure5.3<= 1.2.6.81.2.789
27 Oct 2022Contact Form 7 Database Addon <= 1.2.6.3 - CSV Injection7.2<= 1.2.6.31.2.6.5n/a
12 Nov 2021Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting6.1<= 1.2.6.11.2.6.277
12 Nov 2021Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery6.5<= 1.2.5.91.2.6.1n/a
25 Jan 2021Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection8.8< 1.2.5.61.2.5.6n/a
19 Jan 2021Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection8.8< 1.2.5.41.2.5.43

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Database Addon for Contact Form 7 - CFDB7
Q2 20255.0
Q3 20255.0
Q4 20254.9
Q1 20265.0
Q2 20265.0
Q3 20265.0

Average rating stayed at 5.0 between Q2 2025 and Q3 2026.

Rating distribution
5 star1829
4 star39
3 star2
2 star3
1 star2

Momentum

600,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Database Addon for Contact Form 7 - CFDB7
4 May 202626,566
11 May 202637,062
18 May 202651,895
25 May 202622,679
1 Jun 202619,336
8 Jun 202616,633
15 Jun 202614,242
22 Jun 202612,907
29 Jun 202613,086
6 Jul 202612,744
13 Jul 202612,361
20 Jul 202614,284
27 Jul 2026135,659
3 Aug 202679,024
10 Aug 202628,673
17 Aug 202624,101
24 Aug 202626,444
31 Aug 202620,744
7 Sep 202615,481
14 Sep 202614,789
21 Sep 202615,485
28 Sep 202614,406
5 Oct 2026273,556
12 Oct 202658,528
19 Oct 202643,265
26 Oct 202652,466
2 Nov 20264,991

Weekly downloads over the last 4 weeks are 1% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Database Addon For WPForms ( wpforms entries ) - WPFormsDBScore 92 · 20,000+گرویتی فرم فارسی | Persian Gravity FormsScore 92 · 20,000+

Facts

Version1.4.2
AuthorArshid
Added18 Mar 2017
Last updated9 Oct 2026
Active installs600,000+
Requires WordPress4.8
Tested up to7.1.4
Requires PHP7.0
CategoryForms & Data Collection > Form Builders & Creators
Tagscf7, wpcf7, CF7 Database, contact form 7, contact form 7 db

Other plugins by this author: WP Limit Login Attempts, WP SMTP Mailer - SMTP7, Quick View For WooCommerce, AMP Contact FORM 7 - AMPCF7, HTML Contact Form, Auth Space - Custom Login, Registration & Password Reset Pages

Questions

Is Database Addon for Contact Form 7 - CFDB7 still maintained?

Database Addon for Contact Form 7 - CFDB7 was last updated on 9 Oct 2026. Its Canary status is Healthy.

Is Database Addon for Contact Form 7 - CFDB7 safe?

Database Addon for Contact Form 7 - CFDB7 has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Database Addon for Contact Form 7 - CFDB7?

The wordpress.org author is Arshid. Recent committers: arshidkv12, plugin-master. We have recorded no ownership change.

What can I use instead of Database Addon for Contact Form 7 - CFDB7?

Plugins in the same category with a higher Canary Score: Database Addon For WPForms ( wpforms entries ) - WPFormsDB, گرویتی فرم فارسی | Persian Gravity Forms.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue