Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 63% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

Recent releases and news for this plugin

1. — Version 1.2.9 Fix: General security and stability improvements 1.2.9
2. — Version 1.2.8 Fix: Date format incorrect in CSV/Excel export — now uses WordPress date format setting Fix: CF7 Conditional Fields plugin groups not captured by Tablesome Fix: CF7 and Elementor file uploads duplicated to media library 1.2.8
3. — Version 1.2.7 Fix: Forminator signature field not captured in table (showing “Array” instead of URL) Fix: General fixes 1.2.7
4. — Version 1.2.6 Feature: PDF signature support for all form plugins (WPForms, Forminator, Gravity Forms, Fluent Forms, CF7, Elementor) Feature: Base64 signature data URL conversion for Fluent Forms signature pad Fix: Notion integration 1.2.6
5. — Version 1.2.4 Fix: Security Fixes Fix: General fixes 1.2.4
6. — Version 1.2.3 Fix: Improved image quality in PDF generation by resolving to full-size originals instead of thumbnails Enhancement: Configurable image and signature width settings in PDF action Enhancement: Aspect ratio preservation fo 1.2.3

16 disclosed vulnerabilities on record for this plugin, 1 still affects the current version.

1. High · 7.5 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.9 - Unauthenticated SQL Injection ↗
   2026-08-11 CVE-2026-66659 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.2.9 No patch available
2. Medium · 5.3 Tablesome <= 1.1.30 - Missing Authorization ↗
   2026-07-07 CVE-2026-14924 Missing Authorization Affects <= 1.1.30 Patched in 1.1.31
3. Medium · 6.1 Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter ↗
   2026-04-30 CVE-2024-13362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.1.13 Patched in 1.1.17
4. Medium · 6.5 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.2.3 - Authenticated (Subscriber+) SQL Injection ↗
   2026-02-24 CVE-2026-27373 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 1.2.3 Patched in 1.2.4
5. High · 8.8 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 0.5.4 - 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure and Privilege Escalation ↗
   2026-02-18 CVE-2025-12845 Missing Authorization Affects 0.5.4 - 1.2.1 Patched in 1.2.2
6. Medium · 4.3 Tablesome <= 1.2.8 - Missing Authorization ↗
   2026-01-26 CVE-2026-24524 Missing Authorization Affects <= 1.2.8 Patched in 1.2.9
7. Medium · 6.5 Tablesome <= 1.1.35.1 - Authenticated (Subscriber+) Information Exposure ↗
   2025-12-22 CVE-2025-68516 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.1.35.1 Patched in 1.1.35.2
8. Medium · 4.3 Tablesome <= 1.1.35.1 - Missing Authorization ↗
   2025-12-22 CVE-2025-68517 Missing Authorization Affects <= 1.1.35.1 Patched in 1.1.35.2
9. Medium · 4.3 Tablesome <= 1.1.34 - Missing Authorization ↗
   2025-12-05 CVE-2025-66526 Missing Authorization Affects <= 1.1.34 Patched in 1.1.35.1
10. Critical · 9.8 Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent <= 1.1.32 - Unauthenticated Arbitrary File Upload ↗
    2025-10-31 CVE-2025-11499 Unrestricted Upload of File with Dangerous Type Affects <= 1.1.32 Patched in 1.3.33
11. Medium · 5.3 Table & Contact Form 7 Database – Tablesome <= 1.0.33 - Unauthenticated Sensitive Information Exposure ↗
    2024-07-04 CVE-2024-37498 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.0.33 Patched in 1.0.34
12. Medium · 4.3 Table & Contact Form 7 Database – Tablesome <= 1.0.25 - Cross-Site Request Forgery ↗
    2024-04-10 CVE-2024-31388 Cross-Site Request Forgery (CSRF) Affects <= 1.0.25 Patched in 1.0.26
13. Medium · 6.1 Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting ↗
    2024-03-16 CVE-2024-29110 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.27 Patched in 1.0.28
14. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
    2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.14 Patched in 1.0.15
15. Medium · 6.1 Tablesome <= 1.0.8 - Reflected Cross-Site Scripting ↗
    2023-04-19 CVE-2023-1890 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.0.9 Patched in 1.0.9
16. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 0.6.7 Patched in 0.6.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-03-14 9K+ → 8K+ down after 667 days in tier
2. 2024-05-16 8K+ → 9K+ up after 20 days in tier
3. 2024-04-26 9K+ → 8K+ down after 31 days in tier
4. 2024-03-26 8K+ → 9K+ up after 108 days in tier
5. 2023-12-09 7K+ → 8K+ up after 104 days in tier
6. 2023-08-27 6K+ → 7K+ up after 1 days in tier
7. 2023-08-26 7K+ → 6K+ down after 8 days in tier
8. 2023-08-18 6K+ → 7K+ up after 87 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Redirection for Contact Form 7 200K+ installs · 4.7★ · 2 shared tags A
• Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR) 80K+ installs · 4.5★ · 2 shared tags A
• Contact Form 7 – Success Page Redirects 10K+ installs · 4.1★ · 2 shared tags D
• WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin 4M+ installs · 4.8★ · 1 shared tag A
• All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) 2M+ installs · 4.7★ · 1 shared tag A
• Redirection 2M+ installs · 4.4★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent into a readme, a review or a deck. It updates itself.

Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent: 8K+ active installs, 4.8★ (89 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/tablesome