Database Addon for Contact Form 7 – CFDB7

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

Reviewers keep praising CFDB7 for being simple and reliable, with just one recent request for spam filtering and a list or PDF view of entries.

1. ★★★★★ aucoop

   4mo ago

   Extremely useful!

   Read on wp.org ↗
2. ★★★★★ mentallake

   7mo ago

   This plugin is easy to use and functions well.

   Read on wp.org ↗
3. ★★★★★ Alex_Kiosa

   9mo ago

   Flexible сonfiguration:  Excellent documentation: Completely free

   Read on wp.org ↗
4. ★★★★★ mustafa74

   9mo ago

   Very helpful

   Read on wp.org ↗
5. ★★★★★ Elizacoach

   9mo ago

   It’s been a long time and Contact Form 7 has been a tried and true plugin with all the nostalgic feels of simple, effective plugins that don’t f around. A pleasure, and thank you for helping this small business person make loads of great websites for other small businesses and non profits too. Gracias.

   Read on wp.org ↗
6. ★★★★★ artigianodigitale

   9mo ago

   Good Job!

   Read on wp.org ↗
7. ★★★★★ itemvirtual

   9mo ago

   FUnciona bien

   Read on wp.org ↗
8. ★★★★★ asesoriateleco

   10mo ago

   Funciona muy bien, hace lo que necesito

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.3.6 New hooks added 1.3.6
2. — Version 1.3.3 Security improvements 1.3.3
3. — Version 1.3.2 Added esc_html 1.3.2
4. — Version 1.3.1 Changed the text 1.3.1
5. — Version 1.3.0 Hooks are modified 1.3.0
6. — Version 1.2.10 Fixed csv header issues 1.2.10

7 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.1 Contact Form 7 Database Addon <= 1.3.1 - Unauthenticated Stored Cross-Site Scripting via tmpD Parameter ↗
   2025-07-03 CVE-2025-6740 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.1 Patched in 1.3.2
2. Medium · 5.3 Contact Form 7 Database Addon – CFDB7 <= 1.2.6.8 - Unauthenticated Sensitive Information Exposure ↗
   2024-04-26 CVE-2024-3870 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.2.6.8 Patched in 1.2.7
3. High · 7.2 Contact Form 7 Database Addon <= 1.2.6.3 - CSV Injection ↗
   2022-10-27 CVE-2022-3634 Improper Neutralization of Formula Elements in a CSV File Affects <= 1.2.6.3 Patched in 1.2.6.5
4. Medium · 6.5 Contact Form 7 Database Addon – CFDB7 plugin <= 1.2.5.9 - Cross-Site Request Forgery ↗
   2021-11-12 CVE-2021-36886 Cross-Site Request Forgery (CSRF) Affects <= 1.2.5.9 Patched in 1.2.6.1
5. Medium · 6.1 Contact Form 7 Database Addon – CFDB7 <= 1.2.6.1 - Unauthenticated Stored Cross-Site Scripting ↗
   2021-11-12 CVE-2021-36885 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.2.6.1 Patched in 1.2.6.2
6. High · 8.8 Contact Form 7 Database Addon <= 1.2.5.4 - CSV Injection ↗
   2021-01-25 CVE-2021-24144 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Affects < 1.2.5.6 Patched in 1.2.5.6
7. High · 8.8 Contact Form 7 Database Addon <= 1.2.5.3 - SQL Injection ↗
   2021-01-19 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 1.2.5.4 Patched in 1.2.5.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 34 languages, 5 at 90% or more

Plus 10 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-02-06 500K+ → 600K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Date Picker For Contact Form 7 4K+ installs · 3.9★ · 3 shared tags B
• Database for CF7 2K+ installs · 4.1★ · 3 shared tags C
• WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Database 600+ installs · 4.1★ · 3 shared tags A
• DM Contact Form 7 DB 300+ installs · 3.6★ · 3 shared tags B
• Advanced Contact form 7 DB 70K+ installs · 4.4★ · 2 shared tags A
• GSheetConnector – CF7 Google Sheets Connector & Save CF7 Entries to Database 40K+ installs · 4.4★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Database Addon for Contact Form 7 – CFDB7 into a readme, a review or a deck. It updates itself.

Database Addon for Contact Form 7 – CFDB7: 600K+ active installs, 5.0★ (1,874 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/contact-form-cfdb7