CF7 to Webhook

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 48% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Recent releases and news for this plugin

1. — Version 5.1.0 Fixed XSS vulnerabilities in admin panel output (body preview and form input helpers). Added capability check ( wpcf7_edit_contact_form ) on webhook settings save. Added server-side HTTP method whitelist (GET, POST, PUT, 5.1.0
2. — Version 5.0.1 Security patch release. Added SSRF protection: outbound webhook requests now use wp_safe_remote_request() , blocking requests to private, loopback, and link-local addresses (CVE-2026-11395). 5.0.1
3. — Version 5.0.0 New feature: Added support for mail tags in headers (props to @anthonypenner). Headers can now be replaced by all data sent to webhook. Special mail tags are automatically available in headers without explicit configurat 5.0.0
4. — Version 4.0.2 Improved notification (headers and method added). 4.0.2
5. — Version 4.0.1 Fixes ‘ctz_post_request_result’ action not triggering on errors. Added ‘ctz_post_request_ignore_errors’ filter to ignore error handle. 4.0.1
6. — Version 4.0.0 New feature: TEMPLATES. New feature: advanced custom body. New feature: error notification and status check. New feature: send file content as base64 (props to @ozanerturk). Settings UI renewed. New template: Slack Integ 4.0.0

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 CF7 to Webhook <= 5.0.0 - Unauthenticated Server-Side Request Forgery via CF7 Field Placeholder in Webhook URL Host ↗
   2026-06-17 CVE-2026-11395 Server-Side Request Forgery (SSRF) Affects <= 5.0.0 Patched in 5.0.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 10 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-01-30 20K+ → 30K+ up after 9 days in tier
2. 2025-01-21 30K+ → 20K+ down after 35 days in tier
3. 2024-12-17 20K+ → 30K+ up after 17 days in tier
4. 2024-11-30 30K+ → 20K+ down after 73 days in tier
5. 2024-09-18 20K+ → 30K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Zapier for WordPress 50K+ installs · 2.5★ · 2 shared tags D
• Void Contact Form 7 Widget For Elementor Page Builder 10K+ installs · 4.8★ · 2 shared tags A
• Contact Form 7 – Success Page Redirects 10K+ installs · 4.1★ · 2 shared tags D
• Contact Form to Any API 8K+ installs · 4.7★ · 2 shared tags A
• Zoho Flow – No-Code Workflow Automation 5K+ installs · 4.5★ · 2 shared tags A
• F Forms: 3rd-Party Integration 5K+ installs · 4.6★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for CF7 to Webhook into a readme, a review or a deck. It updates itself.

CF7 to Webhook: 30K+ active installs, 5.0★ (51 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/cf7-to-zapier