Spam Protect for Contact Form 7

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 90% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ HudsonValleyWebDesign

   1.0y ago

   This plugin breaks the WordPress backend. It broke several of my other plugins and was deleted from my site. It is completely useless and the developer’s response in support was that it was not designed to work with other plugins I am using.

   Read on wp.org ↗
2. ★★★★★ webmaster1234

   2.0y ago

   zzzz This topic was modified 1 year, 10 months ago by webmaster1234. This topic was modified 1 year, 10 months ago by webmaster1234.

   Read on wp.org ↗
3. ★★★★★ Artan

   2.2y ago

   Thanks very much for this useful plugin! I am using it to block on domain level so that spammers don´t use the “from” mail input to insert our own domain. This makes it easy. It´s just a plugin to the point without bling bling. Easy to understand and use and it blends perfectly in to the default user interface of CF7 in back end but also in front end for the error message! The only thing: Would be great if the background color in back end would have the same color like the other tabs of CF7. This dark gray seems bit to dark. But think this is personal reference. Really nice, thanks a lot for this!

   Read on wp.org ↗
4. ★★★★★ Tarjeet Singh

   2.5y ago

   Thank you very much for such an amaxing plugin. Don’t let this plugin die! Thank you very much.

   Read on wp.org ↗
5. ★★★★★ con

   3.6y ago

   The manual blocking works great for me. Thanks a lot.

   Read on wp.org ↗
6. ★★★★★ divy39993

   3.7y ago

   It doesn’t work, when you put a word or a phrase to block for input fields, it’s still submits the form regardless, it works for word and email id. But it doesn’t work for more than one word, like phrase (e.g. ‘spam word’) – it will submit form even if this phrase is listed among to block This topic was modified 3 years, 6 months ago by divy39993. This topic was modified 3 years, 6 months ago by divy39993.

   Read on wp.org ↗
7. ★★★★★ pixelbiz

   4.2y ago

   We finally stopped Eric. And many other spammers/bots as well. Thank you.

   Read on wp.org ↗
8. ★★★★★ martymcleod

   4.6y ago

   Unfortunately, it’s not working. I’ve attempted to add a few test case keywords to block (comma separated) and the contact form still sends the email successfully and provides a success message (instead of the rejection message). Checked the installation & use instructions but I couldn’t find anything I’m overlooking anywhere. I’m pretty certain something’s going on with the plugin but sadly I can’t recommend it. It’s a shame, as I’d love to use it as well as send a contribution to the author! I’ll be happy to change my review score if something changes. Thanks. This topic was modified 4 years, 5 months ago by martymcleod.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.2.10 Removed permanently the JS implementation Removed analyzed log request feature Fixed log file extension to always be (.log) 1.2.10
2. — Version 1.2.9 Unknown conflict with WooComerce, removed latest features from plugin temporary until further investigation. 1.2.9
3. — Version 1.2.8 Minor bug fix, php warning in enqueue_scripts function Readme file adjustments. 1.2.8
4. — Version 1.2.7 Minor fixes after CF7 Ver: 6.1 (latest major update) Tested successfully with WordPress 6.8.2 1.2.7
5. — Version 1.2.6 Tested successfully with WordPress 6.8 1.2.6
6. — Version 1.2.5 svn file structure fixes 1.2.5

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 Spam Protect for Contact Form 7 <= 1.2.9 - Authenticated (Editor+) Arbitrary File Deletion ↗
   2026-03-20 CVE-2026-32496 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 1.2.9 Patched in 1.2.10
2. High · 7.2 Spam Protect for Contact Form 7 < 1.2.10 - Authenticated (Editor+) Remote Code Execution ↗
   2026-03-12 CVE-2026-1540 Improper Control of Generation of Code ('Code Injection') Affects < 1.2.10 Patched in 1.2.10

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 7 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-10-26 9K+ → 10K+ up after 85 days in tier
2. 2023-08-02 8K+ → 9K+ up after 76 days in tier
3. 2023-05-18 7K+ → 8K+ up after 86 days in tier
4. 2023-02-21 6K+ → 7K+ up after 86 days in tier
5. 2022-11-27 5K+ → 6K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Akismet Anti-spam: Spam Protection 5M+ installs · 4.7★ A
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ A
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ A
• Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] 1M+ installs · 4.7★ A
• Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ A

Embed this report card

Drop a live Pulse card for Spam Protect for Contact Form 7 into a readme, a review or a deck. It updates itself.

Spam Protect for Contact Form 7: 10K+ active installs, 4.1★ (12 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-contact-form-7-spam-blocker