Skip to content
PluginCanary

Contact Form to Any API

by IT Path Solutions · 8,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 28 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Contact Form to Any API
Ownership100
Maintenance100
Security80
SupportNo data
Reputation60

How the score works

Quick answers

Is Contact Form to Any API still maintained?
Yes. Last release 28 Oct 2026, 13 releases in the last 24 months. 28 Oct 2026 · wordpress.org
Who owns Contact Form to Any API, and has it changed hands?
No change recorded. Main committer itpathsolutions since Jul 2022. 3 Nov 2026 · SVN log
Was Contact Form to Any API removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Contact Form to Any API safe?
7 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list. 6 Aug 2026 · Wordfence Intelligence
Is the latest Contact Form to Any API update safe to install?
No ownership change before 3.0.7. No one-star spike after it. 27 Jul 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Jul 2022 to 6 Jul 2022, 1 commits
itpathsolutions7 Jul 2022 to 28 Oct 2026, 66 commits

2 committers recorded. No ownership change since 2022.

Maintenance

Last release
7 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Contact Form to Any API
Q1 20243
Q2 20241
Q3 20245
Q4 20240
Q1 20252
Q2 20251
Q3 20252
Q4 20253
Q1 20261
Q2 20262
Q3 20262
Q4 20260

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star28
4 star0
3 star0
2 star0
1 star0

Security record

3 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 3.0.7).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
6 Aug 2026Contact Form to Any API <= 3.0.6 - Unauthenticated Sensitive File Disclosure5.3<= 3.0.63.0.7Patched before disclosure
28 Jul 2026Contact Form to Any API <= 3.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'cf7anyapi_form_field' Post Meta6.4<= 3.0.63.0.7Patched before disclosure
22 Apr 2026Contact Form to Any API <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.0.33.0.4Patched before disclosure
24 Sep 2024Contact Form to Any API <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting via Contact Form7.2<= 1.2.41.2.56
26 Mar 2024Contact Form to Any API <= 1.1.8 - Authenticated (Subscriber+) SQL Injection9.9<= 1.1.81.1.9Patched before disclosure
20 Nov 2023Contact Form to Any API <= 1.1.6 - Missing Authorization via delete_cf7_records()6.5<= 1.1.61.1.742
17 Jul 2023Contact Form to Any API <= 1.1.2 - Authenticated (Administrator+) SQL Injection via 'form_id'7.2<= 1.1.21.1.324

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Contact Form to Any API
4 May 2026184
11 May 2026343
18 May 2026457
25 May 20261,379
1 Jun 2026196
8 Jun 2026196
15 Jun 2026209
22 Jun 2026139
29 Jun 2026152
6 Jul 20264,005
13 Jul 2026473
20 Jul 20261,461
27 Jul 20264,293
3 Aug 2026648
10 Aug 2026426
17 Aug 20261,356
24 Aug 2026259
31 Aug 2026308
7 Sep 2026260
14 Sep 2026273
21 Sep 2026273
28 Sep 2026325
5 Oct 2026284
12 Oct 2026284
19 Oct 2026394
26 Oct 2026491
2 Nov 202665

Weekly downloads over the last 4 weeks are 56% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Image CAPTCHA for Contact Form 7 andScore 100 · 70,000+Gravity Forms CLI Add-OnScore 100 · 20,000+Fluent PDF GeneratorScore 100 · 20,000+CF7 MateScore 100 · 20,000+Void Contact Form 7 Widget For ElementorScore 100 · 10,000+

Facts

Version3.0.7
AuthorIT Path Solutions
Added7 Jul 2022
Last updated28 Oct 2026
Active installs8,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryDeveloper Tools & Customization > API & Webhook Integration
Tagscrm, webhook, rest-api, integration, contact form 7

Other plugins by this author: SCSS WP Editor, Gift Pack for WooCommerce, Connect WPForm to Any API, Product Image Editor with Canva for WooCommerce, AccessDoor - Smart Admin Login & Security, ErrorWatcher

Questions

Is Contact Form to Any API still maintained?

Yes. Last release 28 Oct 2026, 13 releases in the last 24 months.

Who owns Contact Form to Any API, and has it changed hands?

No change recorded. Main committer itpathsolutions since Jul 2022.

Was Contact Form to Any API removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Contact Form to Any API safe?

7 known vulnerabilities, all fixed (latest in 3.0.7). Not on the exploited list.

Is the latest Contact Form to Any API update safe to install?

No ownership change before 3.0.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue