Ultra Addons for Contact Form 7

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ walaanour

   3mo ago

   Very nice. Thank You.

   Read on wp.org ↗
2. ★★★★★ eworldlinx

   3mo ago

   nice addons

   Read on wp.org ↗
3. ★★★★★ auverpreZ

   5mo ago

   Complete, very easy to use and easy to set up according to your real needs. You can fine-tune the settings precisely. I recommend without hesitation.

   Read on wp.org ↗
4. ★★★★★ crijken

   6mo ago

   Very easy and straight forward plugin with endless possibilities. Had a small issue (my own mistake), which was solved by support within 12 hours!

   Read on wp.org ↗
5. ★★★★★ bgrgroup

   6mo ago

   Work as expected. Very nice. Thank You.

   Read on wp.org ↗
6. ★★★★★ annielf

   6mo ago

   enkelt formulär till kontakt 7

   Read on wp.org ↗
7. ★★★★★ jedimarv

   7mo ago

   Very nice! Works great. Easy to use!

   Read on wp.org ↗
8. ★★★★★ hwmwebmaster

   7mo ago

   This plugin makes formatting Contact Form 7 forms so much easier. I highly recommend using it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.5.46 Improved: Security enhancements across the plugin. Improved: System stability has been improved. 3.5.46
2. — Version 3.5.45 Improved: Security enhancements across the plugin. Old Changelog can be found here . 3.5.45
3. — Version 1.0.0 Initial stable release 1.0.0
4. — Version 3.5.47 New Addon.: Webhook Integration Pro with Contact Form 7. Improved: System stability has been improved. Old Changelog can be found here . 3.5.47

16 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes ↗
   2026-08-06 CVE-2026-12801 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.43 Patched in 3.5.44
2. High · 7.2 Ultimate Addons for Contact Form 7 <= 3.5.45 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-27 CVE-2026-65439 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.45 Patched in 3.5.46
3. Medium · 6.4 Ultra Addons for Contact Form 7 <= 3.5.36 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-03-14 CVE-2026-32460 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.36 Patched in 3.5.37
4. Medium · 5.3 Ultimate Addons for Contact Form 7 <= 3.5.34 - Missing Authorization ↗
   2025-12-13 CVE-2026-24945 Missing Authorization Affects <= 3.5.34 Patched in 3.5.35
5. Medium · 4.3 Ultra Addons for Contact Form 7 <= 3.5.33 - Missing Authorization to Authenticated (Subscriber+) to Generate Form Submission PDF ↗
   2025-12-11 CVE-2025-14356 Authorization Bypass Through User-Controlled Key Affects <= 3.5.33 Patched in 3.5.34
6. Medium · 6.4 Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode ↗
   2025-06-30 CVE-2025-6756 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.5.21 Patched in 3.5.22
7. High · 7.2 Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module ↗
   2025-06-25 CVE-2025-6212 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 3.5.11 - 3.5.19 Patched in 3.5.20
8. High · 7.2 Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options' ↗
   2025-06-17 CVE-2025-6220 Unrestricted Upload of File with Dangerous Type Affects <= 3.5.12 Patched in 3.5.13
9. Medium · 6.1 Ultimate Addons for Contact Form 7 <= 3.2.0 - Reflected Cross-Site Scripting ↗
   2023-12-04 CVE-2023-49766 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.0 Patched in 3.2.1
10. Medium · 5.3 Ultimate Addons for Contact Form 7 <= 3.2.10 - Missing Authorization ↗
    2023-11-09 CVE-2023-47693 Missing Authorization Affects <= 3.2.10 Patched in 3.2.11
11. Medium · 6.1 Ultimate Addons for Contact Form 7 <= 3.1.0 - Reflected Cross-Site Scripting via 'page' ↗
    2023-08-28 CVE-2023-30493 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.0 Patched in 3.1.2
12. Medium · 6.1 Ultimate Addons for Contact Form 7 <= 3.1.28 - Reflected Cross-Site Scripting ↗
    2023-07-24 CVE-2023-2803 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.1.29 Patched in 3.1.29
13. Medium · 4.4 Ultimate Addons for Contact Form 7 <= 3.1.28 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-07-24 CVE-2023-2802 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.1.29 Patched in 3.1.29
14. High · 8.8 Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated(Subscriber+) SQL Injection ↗
    2023-06-08 CVE-2023-1615 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects 3.1.23 Patched in 3.1.24
15. Critical · 9.8 Ultimate Addons for Contact Form 7 <= 3.1.23 - Unauthenticated SQL Injection via form_id ↗
    2023-05-09 CVE-2022-47586 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.23 Patched in 3.1.24
16. High · 8.8 Ultimate Addons for Contact Form 7 <= 3.1.23 - Authenticated (Subscriber+) SQL Injection via id ↗
    2023-04-24 CVE-2023-30495 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.1.23 Patched in 3.1.24

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-02-27 50K+ → 60K+ up after 174 days in tier
2. 2024-09-06 40K+ → 50K+ up after 173 days in tier
3. 2024-03-17 30K+ → 40K+ up after 143 days in tier
4. 2023-10-26 20K+ → 30K+ up after 161 days in tier
5. 2023-05-18 10K+ → 20K+ up after 209 days in tier
6. 2022-10-21 9K+ → 10K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More 5M+ installs · 4.8★ · 4 shared tags A
• Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder 700K+ installs · 4.8★ · 4 shared tags A
• Formidable Forms – WordPress Form Builder for Contact Forms, Calculators, Quizzes & More 300K+ installs · 4.8★ · 4 shared tags A
• Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI 90K+ installs · 4.8★ · 4 shared tags A
• Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder 20K+ installs · 4.2★ · 4 shared tags A
• Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms 20K+ installs · 4.4★ · 4 shared tags A

Embed this report card

Drop a live Pulse card for Ultra Addons for Contact Form 7 into a readme, a review or a deck. It updates itself.

Ultra Addons for Contact Form 7: 60K+ active installs, 4.8★ (106 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/ultimate-addons-for-contact-form-7