Skip to content
PluginCanary

Spam Protect for Contact Form 7

by NYSL · 10,000+ active installs · Checked 4 Nov 2026
Watch1 Warning

Watch: tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.

77/ 100 Canary Score
Sub-scores for Spam Protect for Contact Form 7
Ownership100
Maintenance50
Security85
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Spam Protect for Contact Form 7 still maintained?
Yes. Last release 6 Feb 2026, 5 releases in the last 24 months. 6 Feb 2026 · wordpress.org
Who owns Spam Protect for Contact Form 7, and has it changed hands?
No change recorded. Main committer nysl since Apr 2020. 4 Nov 2026 · SVN log
Was Spam Protect for Contact Form 7 removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Spam Protect for Contact Form 7 safe?
2 known vulnerabilities, all fixed (latest in 1.2.10). Not on the exploited list. 20 Mar 2026 · Wordfence Intelligence
Is the latest Spam Protect for Contact Form 7 update safe to install?
No ownership change before 1.2.10. No one-star spike after it. 6 Feb 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master31 Mar 2020 to 31 Mar 2020, 1 commits
nysl1 Apr 2020 to 6 Feb 2026, 40 commits

2 committers recorded. No ownership change since 2020.

Maintenance

Last release
9 months ago
Releases, 24 months
5
Tested up to
6.8 vs 7.1
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for Spam Protect for Contact Form 7
Q1 20240
Q2 20240
Q3 20241
Q4 20240
Q1 20250
Q2 20251
Q3 20253
Q4 20250
Q1 20261
Q2 20260
Q3 20260
Q4 20260

Last release 6 Feb 2026. Tested up to 6.8, 3 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 4.1.

Average rating per quarter for Spam Protect for Contact Form 7
Q1 20245.0
Q2 20245.0
Q3 20245.0
Q3 20251.0

Average rating fell from 5.0 to 1.0 between Q1 2024 and Q3 2025.

Rating distribution
5 star9
4 star0
3 star0
2 star1
1 star2
Latest low reviews

Security record

2 vulnerabilities in 24 months, all patched (latest fixed in 1.2.10).

Show 2 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
20 Mar 2026Spam Protect for Contact Form 7 <= 1.2.9 - Authenticated (Editor+) Arbitrary File Deletion6.5<= 1.2.91.2.10Patched before disclosure
12 Mar 2026Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution7.2< 1.2.101.2.10Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Spam Protect for Contact Form 7
4 May 202690
11 May 2026241
18 May 2026235
25 May 2026236
1 Jun 2026267
8 Jun 2026233
15 Jun 2026242
22 Jun 2026188
29 Jun 2026203
6 Jul 2026252
13 Jul 2026167
20 Jul 2026229
27 Jul 2026243
3 Aug 2026238
10 Aug 2026192
17 Aug 2026192
24 Aug 2026204
31 Aug 2026197
7 Sep 2026191
14 Sep 2026226
21 Sep 2026244
28 Sep 2026310
5 Oct 2026245
12 Oct 2026238
19 Oct 2026442
26 Oct 2026364
2 Nov 202673

Weekly downloads over the last 4 weeks are 22% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Really Simple CAPTCHAScore 100 · 300,000+Invisible reCaptchaScore 100 · 70,000+Simple Login CaptchaScore 100 · 10,000+Friendly Captcha for WordPressScore 100 · 10,000+CAPTCHA 4WPScore 98 · 100,000+

Facts

Version1.2.10
AuthorNYSL
Added1 Apr 2020
Last updated6 Feb 2026
Active installs10,000+
Requires WordPress5.2
Tested up to6.8.12
Requires PHP5.4
CategorySupport & Help Desk > FAQ Management
Tagsanti-spam plugin, Form spam prevention, contact form 7 security, Website form protection, WordPress form security

Questions

Is Spam Protect for Contact Form 7 still maintained?

Yes. Last release 6 Feb 2026, 5 releases in the last 24 months.

Who owns Spam Protect for Contact Form 7, and has it changed hands?

No change recorded. Main committer nysl since Apr 2020.

Was Spam Protect for Contact Form 7 removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Spam Protect for Contact Form 7 safe?

2 known vulnerabilities, all fixed (latest in 1.2.10). Not on the exploited list.

Is the latest Spam Protect for Contact Form 7 update safe to install?

No ownership change before 1.2.10. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue