Skip to content
PluginCanary

Database for Contact Form 7, WPforms

Database for Contact Form 7, WPforms, Elementor forms
by CRM Perks · 60,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 6 Sep 2026, 15 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Database for Contact Form 7, WPforms
Ownership100
Maintenance100
Security60
SupportNo data
Reputation60

How the score works

Quick answers

Is Database for Contact Form 7, WPforms still maintained?
Yes. Last release 6 Sep 2026, 15 releases in the last 24 months. 6 Sep 2026 · wordpress.org
Who owns Database for Contact Form 7, WPforms, and has it changed hands?
No change recorded. Main committer CRMPerks since Aug 2018. 4 Nov 2026 · SVN log
Was Database for Contact Form 7, WPforms removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Database for Contact Form 7, WPforms safe?
20 known vulnerabilities, all fixed (latest in 1.5.5). Not on the exploited list. 27 Jul 2026 · Wordfence Intelligence
Is the latest Database for Contact Form 7, WPforms update safe to install?
No ownership change before 1.5.5. No one-star spike after it. 20 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
CRMPerks18 Aug 2018 to 15 Dec 2025, 51 commits
asif8761 Apr 2019 to 6 Sep 2026, 26 commits

2 committers recorded. No ownership change since 2018.

Maintenance

Last release
59 days ago
Releases, 24 months
15
Tested up to
7.1 current
Requires PHP
5.3 supported 8.2+
Releases per quarter
Releases per quarter for Database for Contact Form 7, WPforms
Q1 20240
Q2 20241
Q3 20241
Q4 20240
Q1 20250
Q2 20251
Q3 20254
Q4 20250
Q1 20265
Q2 20263
Q3 20262
Q4 20260

Last release 6 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating per quarter for Database for Contact Form 7, WPforms
Q4 20234.0
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q3 20265.0

Average rating rose from 4.0 to 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star115
4 star2
3 star1
2 star3
1 star3
Latest low reviews

Security record

10 vulnerabilities in 24 months (20 on record), all patched (latest fixed in 1.5.5).

Show 20 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Jul 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.4 - Authenticated (Authenticated+) SQL Injection6.5<= 1.5.41.5.5Patched before disclosure
10 Jul 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.5.21.5.3Patched before disclosure
7 Jul 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.2 - Reflected Cross-Site Scripting6.1<= 1.5.21.5.3Patched before disclosure
1 Jul 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Copy/Upload via Elementor Pro Form Upload Field 'raw_value'6.5<= 1.5.11.5.2Patched before disclosure
22 Jun 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated PHP Object Injection8.1<= 1.5.11.5.2Patched before disclosure
19 Jun 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.5.1 - Unauthenticated Arbitrary File Deletion via CF7 File Field POST Value8.1<= 1.5.11.5.2Patched before disclosure
31 Mar 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.4.9 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Shortcode4.3<= 1.4.91.5.0Patched before disclosure
4 Mar 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.4.7 - Unauthenticated PHP Object Injection via 'download_csv'9.8<= 1.4.71.4.81
27 Jan 2026Database for Contact Form 7, WPforms, Elementor forms <= 1.4.5 - Missing Authorization to Unauthenticated Form Data Exfiltration via CSV Export5.3<= 1.4.51.4.6Patched before disclosure
12 Aug 2025Database for Contact Form 7, WPforms, Elementor forms <= 1.4.3 - Unauthenticated PHP Object Injection to Arbitrary File Deletion9.8<= 1.4.31.4.4Patched before disclosure
22 Apr 2024Database for Contact Form 7, WPforms, Elementor forms <= 1.3.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.3.81.3.9n/a
6 Mar 2024Database for Contact Form 7, WPforms, Elementor forms <= 1.3.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 1.3.31.3.4n/a
30 Jan 2024Contact Form Entries <= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload7.2<= 1.3.21.3.3n/a
22 May 2023Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via vx-entries shortcode6.4<= 1.3.01.3.1n/a
22 May 2023Contact Form Entries <= 1.3.0 - Authenticated (Contributor+) SQL Injection via shortcode8.8<= 1.3.01.3.1n/a
21 Oct 2022Contact Form Entries <= 1.2.9 - CSV Injection7.2<= 1.2.91.3.0n/a
14 Nov 2021Contact Form Entries <= 1.2.3 - Reflected Cross-Site Scripting6.1<= 1.2.31.2.4n/a
26 Aug 2021CRM Perks - Various Plugins (Various Versions) - Reflected Cross-Site Scripting6.1<= 1.2.11.2.2n/a
24 Aug 2021Contact Form Entries - Contact Form 7, WPforms and more <= 1.2.0 - Reflected Cross-Site Scripting6.1<= 1.2.01.2.1n/a
5 Jan 2021Contact Form Entries <= 1.1.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.1.61.1.741

Changelog mentions of security fixes: 1.5.3 (XSS); 1.5.5 (SQL injection).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

60,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Database for Contact Form 7, WPforms
4 May 2026897
11 May 202613,573
18 May 202613,172
25 May 20263,985
1 Jun 20263,082
8 Jun 20262,500
15 Jun 202617,962
22 Jun 20267,853
29 Jun 202621,450
6 Jul 202625,435
13 Jul 20264,636
20 Jul 202621,406
27 Jul 20264,665
3 Aug 20266,296
10 Aug 20262,671
17 Aug 20263,545
24 Aug 20262,679
31 Aug 20262,193
7 Sep 20261,852
14 Sep 20261,758
21 Sep 20261,924
28 Sep 20261,691
5 Oct 20261,787
12 Oct 20261,623
19 Oct 20262,164
26 Oct 20262,004
2 Nov 2026295

Weekly downloads over the last 4 weeks are 76% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image CAPTCHA for Contact Form 7 andScore 100 · 70,000+CF7 MateScore 100 · 20,000+Smart Grid-Layout Design for ContactScore 100 · 10,000+Successful Redirection for Contact FormScore 100 · 10,000+Void Contact Form 7 Widget For ElementorScore 100 · 10,000+

Facts

Version1.5.5
AuthorCRM Perks
Added18 Aug 2018
Last updated6 Sep 2026
Active installs60,000+
Requires WordPress3.8
Tested up to7.1.4
Requires PHP5.3
CategoryForms & Data Collection > Form Builders & Creators
Tagscontact form 7, wpforms database, contact form entries, contact form 7 database, Elementor forms database

Other plugins by this author: Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms, Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms, Connector for Gravity Forms and Google Sheets, WP Zoho for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms - CRM, Bigin, Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin, Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms, CRM Perks Integration for Gravity Forms and Salesforce, Integration for WooCommerce and QuickBooks, Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms, CRM Perks Forms - WordPress Form Builder, Integration for Pipedrive and Contact Form 7, WPForms, Elementor, Ninja Forms, Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms

Questions

Is Database for Contact Form 7, WPforms still maintained?

Yes. Last release 6 Sep 2026, 15 releases in the last 24 months.

Who owns Database for Contact Form 7, WPforms, and has it changed hands?

No change recorded. Main committer CRMPerks since Aug 2018.

Was Database for Contact Form 7, WPforms removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Database for Contact Form 7, WPforms safe?

20 known vulnerabilities, all fixed (latest in 1.5.5). Not on the exploited list.

Is the latest Database for Contact Form 7, WPforms update safe to install?

No ownership change before 1.5.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue