PLUGIN SECURITY
Is User Registration Using Contact Form 7 safe?
User Registration Using Contact Form 7 plugin provides the feature to register the user to the website.
What this plugin does
- Slug:
user-registration-using-contact-form-7 - Author: ZealousWeb
- 400+ active installs
- 84/100 rating (5 reviews on wordpress.org)
- 15294 all-time downloads
- On WordPress.org since 2020-10-16
contact form 7forgot passworduser loginUser Registration
Maintenance status
- Latest known version: 2.7
- Last updated: 2026-06-05 11:46am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 5.6+
- Max supported PHP (analyzed): <8.0
Known vulnerabilities
2 known CVEs on file for User Registration Using Contact Form 7. Reported between 2025 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-12825 | User Registration Using Contact Form 7 [user-registration-using-contact-form-7] < 2.6 | Missing Authorization | Medium 5.3 | < 2.6 | 2.6 | 2026-01-16 | ✓ fixed in latest |
| CVE-2025-32679 | User Registration Using Contact Form 7 [user-registration-using-contact-form-7] < 2.5 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 2.5 | 2.5 | 2025-04-09 | ✓ fixed in latest |
How to fix it
Keep User Registration Using Contact Form 7 updated — 2.7 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Database Addon for Contact Form 7 – CFDB7 — 600000+ active installs — 100/100 (1874) — max PHP 8.4
- Redirection for Contact Form 7 — 200000+ active installs — 94/100 (275) — max PHP 8.4
- ReCaptcha v2 for Contact Form 7 — 200000+ active installs — 100/100 (89) — max PHP 8.4
- Conditional Fields for Contact Form 7 — 100000+ active installs — 96/100 (166) — max PHP 8.4
- DTX – Dynamic Text Extension for Contact Form 7 — 100000+ active installs — 94/100 (99)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.