Skip to content
PluginCanary

Contact Form Email

by codepeople · 8,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 22 releases in 24 months, no unpatched vulnerabilities.

89/ 100 Canary Score
Sub-scores for Contact Form Email
Ownership100
Maintenance100
Security70
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Contact Form Email still maintained?
Yes. Last release 30 Oct 2026, 22 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns Contact Form Email, and has it changed hands?
No change recorded. Main committer codepeople since Apr 2013. 3 Nov 2026 · SVN log
Was Contact Form Email removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Contact Form Email safe?
18 known vulnerabilities, all fixed (latest in 1.3.69). Not on the exploited list. 20 Oct 2026 · Wordfence Intelligence
Is the latest Contact Form Email update safe to install?
No ownership change before 1.3.71. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
codepeople11 Apr 2013 to 30 Oct 2026, 541 commits

1 committer recorded. No ownership change since 2013.

Maintenance

Last release
5 days ago
Releases, 24 months
22
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Contact Form Email
Q1 20243
Q2 20241
Q3 20241
Q4 20242
Q1 20253
Q2 20252
Q3 20252
Q4 20253
Q1 20264
Q2 20262
Q3 20261
Q4 20263

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.3.

Rating distribution
5 star75
4 star12
3 star1
2 star3
1 star11

Security record

5 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 1.3.69).

Show 18 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 Oct 2026Contact Form Email <= 1.3.68 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.3.681.3.69Patched before disclosure
23 Mar 2026Contact Form Email <= 1.3.63 - Missing Authorization4.3<= 1.3.631.3.64Patched before disclosure
1 Dec 2025Contact Form Email <= 1.3.60 - Unauthenticated Insecure Direct Object Reference5.3<= 1.3.601.3.6120
15 Nov 2025Contact Form Email <= 1.3.58 - Missing Authorization4.3<= 1.3.581.3.59Patched before disclosure
24 Jan 2025Contact Form Email <= 1.3.52 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.3.521.3.53Patched before disclosure
5 Apr 2024Contact Form Email <= 1.3.44 - Unauthenticated Sensitive Information Exposure5.3<= 1.3.441.3.45Patched before disclosure
23 Nov 2023Contact Form Email <= 1.3.41 - Captcha Bypass5.3<= 1.3.411.3.42Patched before disclosure
14 Nov 2023Contact Form Email <= 1.3.43 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.3.431.3.44Patched before disclosure
16 May 2023Contact Form Email <= 1.3.37 - Unauthenticated Stored Cross-Site Scripting7.2<= 1.3.371.3.38Patched before disclosure
21 Mar 2023Contact Form Email <= 1.3.31 - Cross-Site Request Forgery to Feedback Submission4.3<= 1.3.311.3.32Patched before disclosure
16 Mar 2023Contact Form Email <= 1.3.31 - Missing Authorization to Feedback Submission4.3<= 1.3.311.3.32Patched before disclosure
11 Nov 2021Contact Form Email <= 1.3.24 - Authenticated (Admin+) Stored Cross-Site Scripting4.8<= 1.3.241.3.25Patched before disclosure
12 Aug 2019Contact Form Email <= 1.2.65 - Cross-Site Request Forgery8.8<= 1.2.651.2.66625
12 Aug 2019Contact Form Email <= 1.2.65 - Cross-Site Scripting6.1<= 1.2.651.2.66625
5 Feb 2019Contact Form Email <= 1.2.65 - Reflected Cross-Site Scripting6.1< 1.2.661.2.66813
24 Jul 2016Contact Form Email < 1.1.48 - Reflected Cross-Site Scripting7.1< 1.1.481.1.48259
13 May 2015Contact Form Email <= 1.3.11 - Cross-Site Request Forgery to Cross-Site Scripting8.8< 1.3.121.3.121883
22 Nov 2014Contact Form Email < 1.0.1 - Cross-Site Scripting7.2< 1.0.11.0.1548

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Contact Form Email
4 May 2026284
11 May 2026593
18 May 20264,101
25 May 2026611
1 Jun 2026410
8 Jun 2026386
15 Jun 2026342
22 Jun 2026324
29 Jun 2026312
6 Jul 2026317
13 Jul 2026319
20 Jul 2026329
27 Jul 2026311
3 Aug 2026311
10 Aug 2026296
17 Aug 20264,112
24 Aug 2026632
31 Aug 2026604
7 Sep 2026418
14 Sep 2026445
21 Sep 2026442
28 Sep 2026429
5 Oct 2026380
12 Oct 2026385
19 Oct 20264,436
26 Oct 20267,383
2 Nov 2026223

Weekly downloads over the last 4 weeks are 188% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Zoho FormsScore 100 · 10,000+RTMFormScore 98 · 30,000+WPZOOM FormsScore 98 · 10,000+FormLayerScore 96 · 100,000+

Facts

Version1.3.71
Authorcodepeople
Added11 Apr 2013
Last updated30 Oct 2026
Active installs8,000+
Requires WordPress3.0.5
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
TagsAI, email, contact, contact form, contact form database

Other plugins by this author: Calculated Fields Form - AI Form Builder for WordPress - Contact, Payment, Quote, Quiz & More, Loading Page with Loading Screen, Appointment Hour Booking - Booking Calendar, Search in Place, CodePeople Post Map for Google Maps, CP Media Player - Audio Player and Video Player, Appointment Booking Calendar, Music Player for WooCommerce, WP Time Slots Booking Form, CP Blocks, CP Multi View Events Calendar, CP Contact Form with PayPal

Questions

Is Contact Form Email still maintained?

Yes. Last release 30 Oct 2026, 22 releases in the last 24 months.

Who owns Contact Form Email, and has it changed hands?

No change recorded. Main committer codepeople since Apr 2013.

Was Contact Form Email removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Contact Form Email safe?

18 known vulnerabilities, all fixed (latest in 1.3.69). Not on the exploited list.

Is the latest Contact Form Email update safe to install?

No ownership change before 1.3.71. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue