Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress
Avoid: vulnerability published 5 Oct 2026 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 85 |
| Security | 20 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| bestwebsoft | 24 Oct 2013 to 27 Jul 2026, 69 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 3
- Tested up to
- 7.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 27 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 5 Oct 2026 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.6 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.7.6 | No fix | n/a |
| 8 Sep 2026 | Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter | 7.2 | <= 1.7.5 | 1.7.6 | 0 |
| 5 Jun 2024 | Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress <= 1.7.2 - Authenticated (Author+) SQL Injection | 9.9 | <= 1.7.2 | 1.7.3 | 0 |
| 23 Jun 2023 | Contact Form to DB by BestWebSoft <= 1.7.1 - Authenticated (Administrator+) SQL Injection via 's' | 7.2 | <= 1.7.1 | 1.7.2 | 0 |
| 17 Apr 2023 | Contact Form to DB by BestWebSoft <= 1.7.0 - Authenticated (Contributor+) SQL Injection via cntctfrmtdb_department | 8.8 | <= 1.7.0 | 1.7.1 | 0 |
| 14 Apr 2023 | Contact Form to DB <= 1.7.0 - Multiple Cross-Site Scripting | 6.1 | <= 1.7.0 | 1.7.1 | 0 |
| 12 Apr 2017 | Contact Form to DB <= 1.5.6 - Multiple Cross-Site Scripting | 6.1 | <= 1.5.6 | 1.5.7 | 2 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.2 from 12 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 9 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 2 |
| 1 star | 1 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 15 |
|---|---|
| 11 May 2026 | 38 |
| 18 May 2026 | 27 |
| 25 May 2026 | 40 |
| 1 Jun 2026 | 38 |
| 8 Jun 2026 | 36 |
| 15 Jun 2026 | 22 |
| 22 Jun 2026 | 24 |
| 29 Jun 2026 | 27 |
| 6 Jul 2026 | 38 |
| 13 Jul 2026 | 651 |
| 20 Jul 2026 | 161 |
| 27 Jul 2026 | 705 |
| 3 Aug 2026 | 195 |
| 10 Aug 2026 | 113 |
| 17 Aug 2026 | 105 |
| 24 Aug 2026 | 90 |
| 31 Aug 2026 | 81 |
| 7 Sep 2026 | 108 |
| 14 Sep 2026 | 127 |
| 21 Sep 2026 | 106 |
| 28 Sep 2026 | 170 |
| 5 Oct 2026 | 151 |
| 12 Oct 2026 | 121 |
| 19 Oct 2026 | 178 |
| 26 Oct 2026 | 172 |
| 2 Nov 2026 | 58 |
Weekly downloads over the last 4 weeks are 1% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.7.6 |
|---|---|
| Author | bestweblayout |
| Added | 24 Oct 2013 |
| Last updated | 27 Jul 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 5.6 |
| Tested up to | 7.0.8 |
| Requires PHP | not stated |
| Category | Forms & Data Collection > Form Builders & Creators |
| Tags | cf add on, contact button, browse messages, contact form add on, contact form parameters |
Other plugins by this author: BestWebSoft's Like & Share - Posts, Pages and Widget Social Extension plugin for WordPress, Analytics by BestWebSoft - Google Analytics Dashboard and Statistic Plugin for WordPress, SMTP by BestWebSoft, Visitors Online by BestWebSoft, BestWebSoft's Twitter, Subscriber by BestWebSoft, Relevant - Related, Featured, Latest, and Popular Posts by BestWebSoft, Portfolio by BestWebSoft - Work and Projects Presentation Plugin for WordPress, BestWebSoft’s Pinterest, Slider by BestWebSoft, Custom Admin Page by BestWebSoft - Configurable WordPress Dashboard Pages Plugin, Contact Form Multi by BestWebSoft - Multiple Forms Plugin for Single WordPress Website
Questions
Is Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress still maintained?
Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress was last updated on 27 Jul 2026. Its Canary status is Avoid.
Is Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress safe?
Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress?
The wordpress.org author is bestweblayout. Recent committers: bestwebsoft, plugin-master. We have recorded no ownership change.
What can I use instead of Contact Form to DB by BestWebSoft - Messages Database Plugin For WordPress?
Plugins in the same category with a higher Canary Score: گرویتی فرم فارسی | Persian Gravity Forms, Database Addon For WPForms ( wpforms entries ) - WPFormsDB, Database Addon for Contact Form 7 - CFDB7, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR).