Advanced Contact form 7 DB

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 41% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ zuzo

   2mo ago

   This plugin is exactly what I needed to safely store and manage all my Contact Form 7 leads directly inside the WordPress database. It works flawlessly out of the box, has a very clean interface, and ensures we never lose an important message again

   Read on wp.org ↗
2. ★★★★★ rimotevst

   1.5y ago

   I looove this plugin, it’s super but last day they did a update which bring critical errors on all my websites which used this lovely plugin … Be more carefull guys i had to deal up with 30+ mad clients without website till you release the new update with working plugin.

   Read on wp.org ↗
3. ★★★★★ grema

   1.5y ago

   PlugIn causes a fatal error in WordPress. All websites that I use with this plugin are offline. [18-Feb-2025 14:04:58] WARNING: [pool www] child 20 said into stderr: “NOTICE: PHP message: PHP Warning: require_once(/usr/share/webapps/wordpress/wp-content/plugins/advanced-cf7-db/freemius/includes/class-fs-garbage-collector.php): Failed to open stream: No such file or directory in /usr/share/webapps/wordpress/wp-content/plugins/advanced-cf7-db/freemius/require.php on line 22”[18-Feb-2025 14:04:58] WARNING: [pool www] child 20 said into stderr: “NOTICE: PHP message: PHP Fatal error: Uncaught Error: Failed opening required ‘/usr/share/webapps/wordpress/wp-content/plugins/advanced-cf7-db/freemius/includes/class-fs-garbage-collector.php’ (include_path=’.:’) in /usr/share/webapps/wordpress/wp-content/plugins/advanced-cf7-db/freemius/require.php:22”

   Read on wp.org ↗
4. ★★★★★ Rasel Khan

   1.9y ago

   Hi, I want to show table list from contact form without selected dropdown list, I want to pass specific form parameter in menu link, how can I do it? For example: I want put menu link this url contact-form-listing&cf7_id=196

   Read on wp.org ↗
5. ★★★★★ andrew1709

   3.0y ago

   You can shorten the plugin name in admin tab menu

   Read on wp.org ↗
6. ★★★★★ jcax2

   3.2y ago

   Can’t select even a form. Waste of time.

   Read on wp.org ↗
7. ★★★★★ Jayesh Chopda

   3.2y ago

   Fatal error: Array and string offset access syntax with curly braces is no longer supported in /home/users/no-limited/public_html/no-limited.pl/wp-content/plugins/advanced-cf7-db/admin/class/PHPExcel/Shared/String.php on line 529

   Read on wp.org ↗
8. ★★★★★ harrdeepverma

   3.6y ago

   No documentation provided, can’t use it at all. This topic was modified 3 years, 6 months ago by harrdeepverma.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1.3 Security: Fixed a potential CSV/Excel formula injection vulnerability. Exported values that could be interpreted as spreadsheet formulas (including those beginning with = , + , - , @ , leading tabs/newlines, or common fu 2.1.3
2. — Version 2.1.2 Security: Added capability checks to restrict unauthorized access to frontend views. Enhancement: Added integration with Advanced CF7 DB – User Access Manager plugin for improved user access control. Improvement: Applied 2.1.2
3. — Version 2.1.1 Data Storage Update: Data is now saved in the WordPress uploads directory instead of the plugin’s admin CSV directory, improving compatibility and organization. Form List Enhancement: The Import CSV form selection and Ad 2.1.1
4. — Version 2.1.0 Security Fix: Fixed Cross-Site Request Forgery (CSRF) vulnerability in form entry deletion (CVE-2026-0811) Security Fix: Added proper authorization checks for form submissions export functionality (CVE-2026-0814) Securit 2.1.0
5. — Version 2.0.9 We have upgraded with Security patches. 2.0.9
6. — Version 2.0.8 Minor Bug Fixing causing Website Crash. 2.0.8

11 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. Medium · 4.3 Advanced Contact form 7 DB <= 2.0.9 - Missing Authorization ↗
   2026-06-30 CVE-2026-57669 Missing Authorization Affects <= 2.0.9 Patched in 2.1.0
2. Medium · 5.4 Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion ↗
   2026-04-08 CVE-2026-0811 Cross-Site Request Forgery (CSRF) Affects <= 2.0.9 Patched in 2.1.0
3. Medium · 4.3 Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export ↗
   2026-04-08 CVE-2026-0814 Missing Authorization Affects <= 2.0.9 Patched in 2.1.0
4. Low · 3.7 Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel) ↗
   2025-04-07 CVE-2014-2054 Dependency on Vulnerable Third-Party Component Affects <= 2.0.8 Patched in 2.0.9
5. High · 7.5 PHPSpreadsheet Library < 2.3.0 - XXE Injection ↗
   2024-10-07 CVE-2024-45293 Improper Restriction of XML External Entity Reference Affects <= 2.0.5 No patch available
6. Medium · 5.3 Advanced Contact form 7 DB <= 2.0.2 - Missing Authorization to Unauthenticated Information Disclosure ↗
   2024-06-10 CVE-2024-4319 Missing Authorization Affects <= 2.0.2 Patched in 2.0.3
7. Medium · 5.3 Advanced Contact form 7 DB <= 2.0.2 - Sensitive Information Exposure ↗
   2024-06-10 CVE-2024-3723 Insecure Storage of Sensitive Information Affects <= 2.0.2 Patched in 2.0.3
8. Medium · 6.1 Advanced Contact form 7 DB <= 1.8.7 - Stored Cross-Site Scripting ↗
   2022-04-21 CVE-2022-29408 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.7 Patched in 1.8.8
9. High · 8.8 Advanced Contact form 7 DB <= 1.8.6 - Authenticated Arbitrary File Deletion ↗
   2022-02-22 CVE-2021-24905 Incorrect Authorization Affects < 1.8.7 Patched in 1.8.7
10. Critical · 9.8 Advanced Contact Form 7 DB <= 1.6.2 - SQL Injection ↗
    2020-09-22 CVE-2019-13571 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.6.2 Patched in 1.7.0
11. High · 8.5 Advanced Contact form 7 DB <= 1.6.0 - SQL Injection ↗
    2019-04-11 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.6.1 Patched in 1.6.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 21 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-07-22 80K+ → 70K+ down after 376 days in tier
2. 2024-07-11 90K+ → 80K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Database Addon for Contact Form 7 – CFDB7 600K+ installs · 5.0★ · 2 shared tags A
• Form Vibes – Save Contact Form 7 & Elementor Form Entries to Database 10K+ installs · 4.8★ · 2 shared tags A
• Business Essentials for Contact Form 7 8K+ installs · 3.6★ · 2 shared tags B
• Database for Contact Form 7 7K+ installs · 4.1★ · 2 shared tags B
• Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) 5K+ installs · 4.3★ · 2 shared tags A
• Database for CF7 2K+ installs · 4.1★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for Advanced Contact form 7 DB into a readme, a review or a deck. It updates itself.

Advanced Contact form 7 DB: 70K+ active installs, 4.5★ (44 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/advanced-cf7-db