Contact Form X
Limited data: Contact Form X has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Contact Form X still maintained?
- Yes. Last release 1 Nov 2026, 8 releases in the last 24 months. 1 Nov 2026 · wordpress.org
- Who owns Contact Form X, and has it changed hands?
- Changed. New committer specialk made a first commit on 1 Nov 2026. 1 Nov 2026 · SVN log
- Was Contact Form X removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Contact Form X safe?
- 1 known vulnerability, fixed (latest in 2.4.1). Not on the exploited list. 25 Feb 2022 · Wordfence Intelligence
- Is the latest Contact Form X update safe to install?
- Caution. Ownership change before 3.1: new committer specialk made a first commit on 1 Nov 2026. No one-star spike after it. 1 Nov 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| specialk | 8 Jun 2018 to 1 Nov 2026, 44 commits |
|---|
New committer specialk made a first commit on 1 Nov 2026.
Maintenance
- Last release
- 3 days ago
- Releases, 24 months
- 8
- Tested up to
- 7.2 current
- Requires PHP
- 5.6.20 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 2 |
| Q1 2025 | 2 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 2 |
| Q2 2026 | 1 |
| Q3 2026 | 1 |
| Q4 2026 | 1 |
Last release 1 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 5.0.
| 5 star | 32 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 0 |
Security record
1 vulnerability on record, patched (latest fixed in 2.4.1).
Show 1 patched vulnerability
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Feb 2022 | Contact Form X <= 2.4 - Reflected Cross-Site Scripting | 6.1 | <= 2.4 | 2.4.1 | n/a |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
300+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 3.1 |
|---|---|
| Author | Jeff Starr |
| Added | 8 Jun 2018 |
| Last updated | 1 Nov 2026 |
| Active installs | 300+ |
| Requires WordPress | 4.7 |
| Tested up to | 7.2 |
| Requires PHP | 5.6.20 |
| Category | not stated |
| Tags | ajax, email, contact, feedback, contact form |
Other plugins by this author: Disable Gutenberg, GA Google Analytics - Connect Google Analytics to WordPress, BBQ Firewall - Fast & Powerful Firewall Security, Disable WP REST API, Blackhole for Bad Bots, Head Meta Data, User Submitted Posts - Enable Users to Submit Posts from the Front End, Disable WP Sitemaps, Disable Media Sizes, Disable Lazy Load, Theme Switcha - Easily Switch Themes for Development and Testing, Simple Blog Stats
Questions
Is Contact Form X still maintained?
Yes. Last release 1 Nov 2026, 8 releases in the last 24 months.
Who owns Contact Form X, and has it changed hands?
Changed. New committer specialk made a first commit on 1 Nov 2026.
Was Contact Form X removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Contact Form X safe?
1 known vulnerability, fixed (latest in 2.4.1). Not on the exploited list.
Is the latest Contact Form X update safe to install?
Caution. Ownership change before 3.1: new committer specialk made a first commit on 1 Nov 2026. No one-star spike after it.