Redirection for Contact Form 7

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 71% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ scirceo

   2mo ago

   Works perfectly redirecting my membership form to the payment page. Thanks!

   Read on wp.org ↗
2. ★★★★★ michacassola

   2mo ago

   Annoying self-ad for reviews has a bad malfunction! You cannot get rid of it and get redirected to some blank pages or 404 page. If a simple banner cannot be handled right I suggest not using this.

   Read on wp.org ↗
3. ★★★★★ haiyaswanth

   3mo ago

   For redirection it is working good but when redirecting it should bring the existing functionality of displaying success message or failure message then only user will know whether it is successful or not

   Read on wp.org ↗
4. ★★★★★ Modeway Development

   4mo ago

   Плагин отличный, пользуюсь бесплатной версией, обычный редирект после отправки форм настроил быстро и работает без отказно. Советую плагин кому этот функционал нужен. Спасибо разработчику!

   Read on wp.org ↗
5. ★★★★★ wiresplus

   5mo ago

   It does what it says on the tin!

   Read on wp.org ↗
6. ★★★★★ ebikepassion

   5mo ago

   Easy, working and free: what else you want? 😀

   Read on wp.org ↗
7. ★★★★★ omniafausta

   6mo ago

   Thanks, I don’t know why this is not integrated in CF7 anyway! So thanks for making this! This topic was modified 5 months ago by omniafausta.

   Read on wp.org ↗
8. ★★★★★ highlandpondman

   7mo ago

   Easily installed and works great with my site. Thanks.

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-05-12 Version 3.2.10 Fixed fatal error occuring when using conditional logic module Fixed default dropdown selection Update dependencies 3.2.10
2. 2026-02-10 Version 3.2.9 Enhanced security 3.2.9
3. 2025-12-19 Version 3.2.8 Enhanced security 3.2.8
4. 2025-10-15 Version 3.2.7 Updated dependencies Enhanced security 3.2.7
5. 2025-09-11 Version 3.2.6 Updated dependencies 3.2.6
6. 2025-08-07 Version 3.2.5 Enhanced security 3.2.5

17 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Redirection for Contact Form 7 <= 3.2.8 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-05-13 CVE-2026-23970 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.8 Patched in 3.2.9
2. High · 8.1 Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload ↗
   2025-12-20 CVE-2025-14800 Unrestricted Upload of File with Dangerous Type Affects <= 3.2.7 Patched in 3.2.8
3. Medium · 6.4 Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode ↗
   2025-10-17 CVE-2025-9562 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.6 Patched in 3.2.7
4. High · 8.8 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion ↗
   2025-08-19 CVE-2025-8141 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.2.4 Patched in 3.2.5
5. High · 7.5 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization ↗
   2025-08-19 CVE-2025-8289 Deserialization of Untrusted Data Affects <= 3.2.4 Patched in 3.2.5
6. High · 8.8 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection ↗
   2025-08-19 CVE-2025-8145 Deserialization of Untrusted Data Affects <= 3.2.4 Patched in 3.2.5
7. Medium · 5.3 Redirection for Contact Form 7 <= 2.9.2 - Missing Authorization ↗
   2023-10-03 CVE-2023-39920 Missing Authorization Affects <= 2.9.2 Patched in 3.0.0
8. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 2.3.7 - 2.8.0 Patched in 2.9.0
9. High · 7.2 Redirection for Contact Form 7 <= 2.7.0 - Authenticated(Editor+) Privilege Escalation ↗
   2023-02-06 CVE-2023-23990 Incorrect Privilege Assignment Affects <= 2.7.0 Patched in 2.8.0
10. Medium · 5.3 Redirection for Contact Form 7 <= 2.4.0 - Missing Authorization ↗
    2022-09-29 CVE-2021-36913 Missing Authorization Affects <= 2.4.0 Patched in 2.7.0
11. Medium · 6.1 Redirection for Contact Form 7 <= 2.4.0 - Reflected Cross-Site Scripting ↗
    2022-03-07 CVE-2022-0250 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.0 Patched in 2.5.0
12. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
    2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.5.0 Patched in 2.5.0
13. Medium · 6.5 Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Plugin Installation ↗
    2021-04-20 CVE-2021-24279 Incorrect Authorization Affects < 2.3.4 Patched in 2.3.4
14. High · 7.5 Redirection for Contact Form 7 <= 2.3.3 - Unauthenticated Arbitrary Nonce Generation ↗
    2021-04-20 CVE-2021-24278 Incorrect Authorization Affects < 2.3.4 Patched in 2.3.4
15. High · 8.8 Redirection for Contact Form 7 <= 2.3.3 - Authenticated PHP Object Injection ↗
    2021-04-20 CVE-2021-24280 Deserialization of Untrusted Data Affects < 2.3.4 Patched in 2.3.4
16. Medium · 6.3 Redirection for Contact Form 7 <= 2.3.3 - Unprotected AJAX Actions ↗
    2021-04-20 CVE-2021-24282 Missing Authorization Affects < 2.3.4 Patched in 2.3.4
17. Medium · 4.3 Redirection for Contact Form 7 <= 2.3.3 - Authenticated Arbitrary Post Deletion ↗
    2021-04-20 CVE-2021-24281 Incorrect Authorization Affects < 2.3.4 Patched in 2.3.4

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 22 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-12-28 300K+ → 200K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Connect Contact Form 7 to Mailchimp, Brevo, MailerLite & Klaviyo 40K+ installs · 4.2★ · 2 shared tags A
• Contact Form 7 – Success Page Redirects 10K+ installs · 4.1★ · 2 shared tags D
• Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms 9K+ installs · 4.7★ · 2 shared tags A
• Contact Form to Any API 8K+ installs · 4.7★ · 2 shared tags A
• Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 8K+ installs · 4.7★ · 2 shared tags A
• Contact Form 7 Connector 5K+ installs · 4.1★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for Redirection for Contact Form 7 into a readme, a review or a deck. It updates itself.

Redirection for Contact Form 7: 200K+ active installs, 4.7★ (275 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/wpcf7-redirect