Skip to content
PluginCanary

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

by HT Plugins · 5,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 9 Oct 2026, fixed in 3.4.6.

84/ 100 Canary Score
Sub-scores for Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
Ownership100
Maintenance100
Security70
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 3.4.6. Update to version 3.4.6 or later.9 Oct 2026Evidence
  • InfoSEC-34 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master13 May 2021 to 13 May 2021, 1 commits
htplugins19 May 2021 to 4 Oct 2026, 128 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
31 days ago
Releases, 24 months
25
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
Q1 20244
Q2 20244
Q3 20244
Q4 20244
Q1 20255
Q2 20253
Q3 20255
Q4 20253
Q1 20263
Q2 20260
Q3 20262
Q4 20261

Last release 4 Oct 2026. Tested with WordPress 7.1 (current).

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload9.8<= 3.4.53.4.60
23 Jan 2026Extensions For CF7 <= 3.4.0 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 3.4.03.4.10
21 Jul 2025Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.2.8 - Unauthenticated Arbitrary File Deletion Triggered via Admin Form Submission Deletion8.1<= 3.2.83.2.90
24 Jan 2025Extensions For CF7 <= 3.2.0 - Authenticated (Admin+) Sever-Side Request Forgery3.8<= 3.2.03.2.10
15 Mar 2024Extensions For CF7 <= 3.0.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.0.63.0.70
20 Jan 2023Extensions For CF7 <= 2.0.8 - Cross-Site Request Forgery4.3<= 2.0.82.0.90

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.9 from 8 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star7
4 star1
3 star0
2 star0
1 star0

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
4 May 2026111
11 May 2026258
18 May 2026205
25 May 2026198
1 Jun 2026172
8 Jun 2026170
15 Jun 2026158
22 Jun 2026123
29 Jun 2026123
6 Jul 2026160
13 Jul 2026157
20 Jul 2026144
27 Jul 2026178
3 Aug 2026183
10 Aug 2026143
17 Aug 2026177
24 Aug 20263,332
31 Aug 20261,222
7 Sep 2026370
14 Sep 2026480
21 Sep 2026386
28 Sep 20261,459
5 Oct 20261,807
12 Oct 2026624
19 Oct 2026562
26 Oct 2026479
2 Nov 202666

Weekly downloads over the last 4 weeks are 13% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

گرویتی فرم فارسی | Persian Gravity FormsScore 92 · 20,000+Database Addon For WPForms ( wpforms entries ) - WPFormsDBScore 92 · 20,000+Database Addon for Contact Form 7 - CFDB7Score 91 · 600,000+CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.)Score 91 · 300,000+Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)Score 91 · 70,000+

Facts

Version3.4.6
AuthorHT Plugins
Added19 May 2021
Last updated4 Oct 2026
Active installs5,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagscf7, redirection, contact form 7, contact form db

Other plugins by this author: HT Slider For Elementor, HT Contact Form - Drag & Drop Form Builder for WordPress, Insert Headers and Footers Code - HT Script, HT Easy GA4 - Google Analytics WordPress Plugin, Really Simple Google Tag Manager (GTM), Whols - Wholesale Prices and B2B Store Solution for WooCommerce, HT Form Widget for Elementor and WPForms, WishSuite - Wishlist for WooCommerce, HT Mega - Absolute Addons for WPBakery Page Builder, HT Newsletter for Elementor, Ever Compare - Products Compare Plugin for WooCommerce, JustTables - WooCommerce Product Table

Questions

Is Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) still maintained?

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) was last updated on 4 Oct 2026. Its Canary status is Healthy.

Is Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) safe?

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) has no open unpatched vulnerabilities on record. 4 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)?

The wordpress.org author is HT Plugins. Recent committers: htplugins, plugin-master. We have recorded no ownership change.

What can I use instead of Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)?

Plugins in the same category with a higher Canary Score: گرویتی فرم فارسی | Persian Gravity Forms, Database Addon For WPForms ( wpforms entries ) - WPFormsDB, Database Addon for Contact Form 7 - CFDB7, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR).

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue