DTX – Dynamic Text Extension for Contact Form 7

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 70% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ Hans-Gerd Gerhards

   1.2y ago

   With this great plugin, we were able to easily fulfil a customer’s request for an extension. Thanks a lot

   Read on wp.org ↗
2. ★★★★★ posed

   2.0y ago

   Essential plug-in. Keep up the good work!

   Read on wp.org ↗
3. ★★★★★ Move Me To

   2.3y ago

   Getting our leads promptly in front of the agents required our lead funnels to become dynamic. This plug-in was super easy to install and integrate into our Contact Form 7. What a life-saver. This topic was modified 2 years, 2 months ago by Move Me To.

   Read on wp.org ↗
4. ★★★★★ ariom06

   2.4y ago

   Great and usefull plugin, working just out of the box, thanks for your job!

   Read on wp.org ↗
5. ★★★★★ Jos Klever

   3.0y ago

   I don’t even use this plugin myself, but on behalf of my clients I had a question today (on a Saturday) and it was answered very fast and detailed by Tessa. Not only were my questions answered, they also pointed out some extra things to keep an eye on, that I didn’t even thought of yet and took my suggestion for improvement in consideration, so they are a perfect example for other support reps. 😃

   Read on wp.org ↗
6. ★★★★★ uaoh

   3.1y ago

   Great and useful plugin and great and fast support. After only a few days of reporting a bug, they fixed it and released an update!

   Read on wp.org ↗
7. ★★★★★ Peter

   3.1y ago

   Thank you so much for this great plugin, which opens up completely new possibilities for the CF7. Of course, you need to know how to use it, because everyone who used only visual form builders before, may not know what it is at first – just like in the whole CF7 – at first glance it is primitive compared to other plugins of this type, but that’s what it is about greatest strength: simplicity, lightness and the possibility of virtually unlimited expansion…

   Read on wp.org ↗
8. ★★★★★ daymobrew

   3.6y ago

   I have been using CF7 DTX since 2016 (my first post about DTX was using it for a refund request form and involved custom shortcodes). Chris of SevenSpark.com wrote a great plugin. In the very short time since AuRise Creative adopted the plugin a number of very interesting and useful enhancements have been added. This is bringing new life to this plugin (not that it was dying – the core functionality is timeless). Good luck!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 5.0.6 Release Date: 06/05/2026 Special thanks to Shane Hollis (@webkiwinz) for these security fixes! Security: Fixed stored XSS in admin scan results page; form titles and shortcode key names were echoed without HTML escaping. 5.0.6
2. — Version 5.0.5 Release Date: 02/17/2026 Fix: Fixed a type-o in nonce verification where it compared the value against 0 instead of 1, see support thread . 5.0.5
3. — Version 5.0.4 Release Date: 01/01/2026 Security: Addressed security vulnerability CVE-2025-13146 responsibly reported by NosleeP++ to Wordfence. Thank you NosleeP++! The JavaScript Fetch/AJAX request now includes nonce verification. 5.0.4
4. — Version 5.0.3 Fix: Moved settings translations to load as needed instead of immediately hoping to address the Function _load_textdomain_just_in_time was called incorrectly notice added in WordPress core version 6.7, see support thread 5.0.3
5. — Version 5.0.2 Security: Addressed security vulnerability responsibly reported by Rafie Muhammad to Patchstack. Older Releases Please see our additional changelog.txt file 5.0.2
6. — Version 5.0.7 Release Date: 08/03/2026 Update: the name of this plugin was changed from “Contact Form 7 – Dynamic Text Extension” to “DTX – Dynamic Text Extension for Contact Form 7” to comply with the plugin guideline #17 set by Word 5.0.7

8 disclosed vulnerabilities on record for this plugin, 2 still affect the current version.

1. Medium · 4.4 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
   2026-08-04 CVE-2026-5116 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.5 Patched in 5.0.6
2. Medium · 6.5 Contact Form 7 – Dynamic Text Extension <= 5.0.6 - Unauthenticated Arbitrary Shortcode Execution ↗
   2026-07-21 CVE-2025-13146 Improper Control of Generation of Code ('Code Injection') Affects <= 5.0.3 No patch available
3. Medium · 6.5 Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Unauthenticated Arbitrary Shortcode Execution ↗
   2025-09-26 CVE-2025-63068 Improper Control of Generation of Code ('Code Injection') Affects <= 5.0.5 No patch available
4. Medium · 4.3 Contact Form 7 Dynamic Text Extension <= 5.0.1 - Cross-Site Request Forgery ↗
   2024-12-19 CVE-2024-56218 Cross-Site Request Forgery (CSRF) Affects <= 5.0.1 Patched in 5.0.2
5. Medium · 4.3 Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode ↗
   2024-11-05 CVE-2024-10084 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.5 Patched in 4.5.1
6. Medium · 4.3 Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference ↗
   2024-01-10 CVE-2023-6630 Exposure of Private Personal Information to an Unauthorized Actor Affects <= 4.1.0 Patched in 4.2.0
7. Medium · 6.4 Contact Form 7 Dynamic Text Extension <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-01-19 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.3 Patched in 3.0.0
8. Medium · 6.1 Contact Form 7 Dynamic Text Extension < 2.0.3 - Reflected Cross-Site Scripting ↗
   2019-07-24 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.0.3 Patched in 2.0.3

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 19 languages, 4 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Database Addon for Contact Form 7 – CFDB7 600K+ installs · 5.0★ · 1 shared tag A
• Redirection for Contact Form 7 200K+ installs · 4.7★ · 1 shared tag A
• ReCaptcha v2 for Contact Form 7 200K+ installs · 4.8★ · 1 shared tag A
• Conditional Fields for Contact Form 7 100K+ installs · 4.7★ · 1 shared tag A
• LukasApps CAPTCHA tools for Contact Form 7 100K+ installs · 4.1★ · 1 shared tag B
• Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) 80K+ installs · 4.5★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for DTX – Dynamic Text Extension for Contact Form 7 into a readme, a review or a deck. It updates itself.

DTX – Dynamic Text Extension for Contact Form 7: 100K+ active installs, 4.7★ (99 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/contact-form-7-dynamic-text-extension