Skip to content
PluginCanary
Limited data: this plugin has under 1,000 active installs and less than 12 weeks of history with us, so we show signals but no status band yet.

PeproDev CF7 Database

by Pepro Dev. Group · 100+ active installs · Checked 4 Nov 2026
Limited data2 Criticals1 Warning

Limited data: PeproDev CF7 Database has under 1,000 active installs and less than 12 weeks of history, so we do not rate it yet.

39/ 100 Canary Score

Capped at 39: a vulnerability has no patch.

Sub-scores for PeproDev CF7 Database
Ownership100
Maintenance0
Security35
SupportNo data
ReputationNo data

How the score works

Quick answers

Is PeproDev CF7 Database still maintained?
No. Last release 6 Oct 2024, over 2 years ago. 6 Oct 2024 · wordpress.org
Who owns PeproDev CF7 Database, and has it changed hands?
No change recorded. 4 Nov 2026 · SVN log
Was PeproDev CF7 Database removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is PeproDev CF7 Database safe?
No. 1 known vulnerability has no fix in the current version. 2 Apr 2025 · Wordfence Intelligence
Is the latest PeproDev CF7 Database update safe to install?
Not enough data. No release date on record for the current version. Release history

Active signals

Facts we detected, with links to the source.

  • CriticalMNT-1No release in 25 months (last release 6 Oct 2024). Plan a replacement if the plugin is important to your site.6 Oct 2025Evidence
  • CriticalSEC-2Vulnerability published 2 Apr 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.16 Apr 2025Evidence
  • WarningMNT-2Tested up to WordPress 6.6.11, 5 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master17 Jul 2020 to 17 Jul 2020, 1 commits
peprodev18 Jul 2020 to 1 Apr 2022, 22 commits
blackswanlab31 Jul 2023 to 31 Jul 2023, 1 commits
amirhpcom2 May 2024 to 6 Oct 2024, 2 commits

4 committers recorded. No ownership change since 2020.

Maintenance

Last release
2 years ago
Releases, 24 months
0
Tested up to
6.6 vs 7.1
Requires PHP
5.6 supported 8.2+

Last release 6 Oct 2024. Tested up to 6.6, 5 major versions behind WordPress 7.1. Release history builds as we see new versions.

Reputation

Last 90 days: no reviews. Lifetime: 5.0.

Rating distribution
5 star5
4 star0
3 star0
2 star0
1 star0

Security record

1 vulnerability in 24 months (3 on record), 1 with no fix in the current version.

PublishedIssueCVSSAffectedFixed inDays to patch
2 Apr 2025PeproDev CF7 Database <= 2.0.0 - Unauthenticated Stored Cross-Site Scripting6.1<= 2.0.0No fixn/a
Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
16 Apr 2024PeproDev CF7 Database <= 1.8.0 - Cross-Site Request Forgery4.3<= 1.8.01.9.0n/a
5 Sep 2023PeproDev CF7 Database <= 1.7.0 - Unauthenticated Stored Cross-Site Scripting via form submission7.2<= 1.7.01.8.0n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

100+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.0.0
AuthorPepro Dev. Group
Added18 Jul 2020
Last updated6 Oct 2024
Active installs100+
Requires WordPress5.0
Tested up to6.6.11
Requires PHP5.6
Categorynot stated
Tagscf7 files, contact form 7 database, save contact form 7 uploads

Other plugins by this author: PeproDev Ultimate Invoice, PeproDev Receipt Uploader for WooCommerce, PeproDev Ultimate Profile Solutions, PeproDev Branches Map (Mapify), PeproDev CF7 SMS Notifier

Questions

Is PeproDev CF7 Database still maintained?

No. Last release 6 Oct 2024, over 2 years ago.

Who owns PeproDev CF7 Database, and has it changed hands?

No change recorded.

Was PeproDev CF7 Database removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is PeproDev CF7 Database safe?

No. 1 known vulnerability has no fix in the current version.

Is the latest PeproDev CF7 Database update safe to install?

Not enough data. No release date on record for the current version.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue