Releases202
Frequency1 month 3 days
Last Release
Downloads418M

Contact Form 7 is a plugin designed to be a practical tool for all WordPress users who embrace the philosophy of free and open source software. It employs sophisticatedly modularized architecture and its original Schema-Woven Validation technology.

Docs and support

You can find docs, FAQ and more detailed information about Contact Form 7 on contactform7.com. When you cannot find the answer to your question on the FAQ or in any of the documentation, check the support forum on WordPress.org. If you cannot locate any topics that pertain to your particular issue, post a new topic for it.

Contact Form 7 needs your support

It is hard to continue to maintain this plugin without support from users like you. There are several ways for you to contribute to the project: testing, coding, translating it into your local languages, helping other users, financial donations, etc, etc. We equally welcome you regardless of the way you contribute.

Privacy notices

With the default configuration, this plugin, in itself, does not:

  • track users by stealth;
  • write any user personal data to the database;
  • send any data to external servers;
  • use cookies.

If you activate certain features in this plugin, the contact form submitter’s personal data, including their IP address, may be sent to the service provider. Thus, confirming the provider’s privacy policy is recommended. These features include:

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
< 5.3.210 CRITICAL10 HIGH

The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.

< 5.0.47.5 HIGH

The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type.

<= 3.7.1, = 3.6, = 3.75 MEDIUM

Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection mechanism and submit arbitrary form data by omitting the _wpcf7_captcha_challenge_captcha-719 parameter.