Skip to content
PluginCanary

Redirection for Contact Form 7

by Themeisle · 200,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 19 Oct 2026, fixed in 3.2.12.

81/ 100 Canary Score
Sub-scores for Redirection for Contact Form 7
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 3.2.12. Update to version 3.2.12 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 3 Sep 2026, fixed in 3.2.11. Update to version 3.2.11 or later.3 Sep 2026Evidence
  • InfoSEC-38 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
yuvalsabar12 Aug 2017 to 3 Mar 2021, 148 commits
querysolutions18 Sep 2017 to 29 Dec 2023, 69 commits
themeisle4 Jun 2024 to 15 Oct 2026, 41 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
20 days ago
Releases, 24 months
17
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Redirection for Contact Form 7
Q1 20240
Q2 20244
Q3 20241
Q4 20241
Q1 20251
Q2 20254
Q3 20253
Q4 20252
Q1 20261
Q2 20261
Q3 20263
Q4 20261

Last release 15 Oct 2026. Tested with WordPress 7.1 (current).

Support

67% of 3 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026Redirection for Contact Form 7 2.2.7 - 3.2.11 - Unauthenticated Stored Cross-Site Scripting7.22.2.7 to 3.2.113.2.120
3 Sep 2026Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution6.52.2.7 to 3.2.103.2.110
13 May 2026Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.2.83.2.90
20 Dec 2025Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload8.1<= 3.2.73.2.80
17 Oct 2025Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode6.4<= 3.2.63.2.70
19 Aug 2025Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion8.8<= 3.2.43.2.50
19 Aug 2025Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization7.5<= 3.2.43.2.50
19 Aug 2025Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection8.8<= 3.2.43.2.50
3 Oct 2023Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization5.3<= 2.9.23.0.00
18 Jul 2023Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get6.12.3.7 to 2.8.02.9.00
6 Feb 2023Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation7.2<= 2.7.02.8.00
29 Sep 2022Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization5.3<= 2.4.02.7.00
7 Mar 2022Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting6.1<= 2.4.02.5.0n/a
4 Mar 2022Freemius SDK <= 2.4.2 - Missing Authorization Checks6.3< 2.5.02.5.0n/a
20 Apr 2021Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation6.5< 2.3.42.3.40
20 Apr 2021Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation7.5< 2.3.42.3.40
20 Apr 2021Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection8.8< 2.3.42.3.40
20 Apr 2021Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions6.3< 2.3.42.3.40
20 Apr 2021Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion4.3< 2.3.42.3.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Redirection for Contact Form 7
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20264.0

Average rating fell from 5.0 to 4.0 between Q1 2025 and Q2 2026.

Rating distribution
5 star247
4 star8
3 star2
2 star2
1 star16
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Redirection for Contact Form 7
4 May 20262,459
11 May 202682,567
18 May 202631,552
25 May 202613,045
1 Jun 202610,226
8 Jun 20268,438
15 Jun 20267,068
22 Jun 20266,336
29 Jun 20265,923
6 Jul 20265,986
13 Jul 20265,463
20 Jul 20266,436
27 Jul 20265,740
3 Aug 20265,211
10 Aug 20264,538
17 Aug 20264,676
24 Aug 20264,944
31 Aug 202675,808
7 Sep 202686,966
14 Sep 202627,547
21 Sep 202616,934
28 Sep 202679,642
5 Oct 202632,072
12 Oct 202673,852
19 Oct 202629,337
26 Oct 202629,642
2 Nov 20262,458

Weekly downloads over the last 4 weeks are 37% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

گرویتی فرم فارسی | Persian Gravity FormsScore 92 · 20,000+Database Addon For WPForms ( wpforms entries ) - WPFormsDBScore 92 · 20,000+Database Addon for Contact Form 7 - CFDB7Score 91 · 600,000+CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.)Score 91 · 300,000+Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)Score 91 · 70,000+

Facts

Version3.2.14
AuthorThemeisle
Added12 Aug 2017
Last updated15 Oct 2026
Active installs200,000+
Requires WordPress5.1
Tested up to7.1.4
Requires PHPnot stated
CategoryForms & Data Collection > Form Builders & Creators
Tagswebhook, redirect, mailchimp, cf7 redirect, contact form 7

Other plugins by this author: LightStart - Maintenance Mode, Coming Soon and Landing Page Builder, Otter Blocks - Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, Robin Image Optimizer - Unlimited Image Optimization, WebP & AVIF, Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More, Menu Icons by Themeisle - Add Icons to Navigation Menus, Disable Admin Notices - Hide Dashboard Notifications, Starter Sites & Templates by Neve, Titan Anti-spam & Security - Brute Force Protection, 2FA & Spam Filter, Woody Code Snippets - Insert PHP, CSS, JS, and Header/Footer Scripts, Cyrlitera - Transliteration of Links and File Names, Remove Category URL - Remove ‘category’ base from category permalinks, Auto Featured Image (Auto Post Thumbnail)

Questions

Is Redirection for Contact Form 7 still maintained?

Redirection for Contact Form 7 was last updated on 15 Oct 2026. Its Canary status is Healthy.

Is Redirection for Contact Form 7 safe?

Redirection for Contact Form 7 has no open unpatched vulnerabilities on record. 8 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Redirection for Contact Form 7?

The wordpress.org author is Themeisle. Recent committers: themeisle, querysolutions, yuvalsabar, plugin-master. We have recorded no ownership change.

What can I use instead of Redirection for Contact Form 7?

Plugins in the same category with a higher Canary Score: گرویتی فرم فارسی | Persian Gravity Forms, Database Addon For WPForms ( wpforms entries ) - WPFormsDB, Database Addon for Contact Form 7 - CFDB7, CF7 Apps - Addons for Contact Form 7 (Honeypot, Database, Redirection, Webhook, etc.), Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR).

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue