Address autocomplete Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/address-autocomplete-contact-form-7

Contact form 7 address autocomplete feature. We are using google maps api. https://maps.googleapis.com/maps/api

400 active installs v1.1.2 PHP 5.2.4+ WP 4.4+ Updated Aug 19, 2019
addressaddress-autocompletecontact-form-7contact-form-7-addongoogle-place-api
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Address autocomplete Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 85/100

Address autocomplete Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The plugin "address-autocomplete-contact-form-7" v1.1.2 exhibits a strong security posture based on the provided static analysis. The absence of identified dangerous functions, raw SQL queries, file operations, and external HTTP requests is a significant positive indicator. Furthermore, the code demonstrates good practices by properly escaping a high percentage of its outputs and employing capability checks, contributing to a reduced attack surface. The taint analysis revealing no flows with unsanitized paths further bolsters confidence in its security.

The vulnerability history is also exceptionally clean, with no recorded CVEs, suggesting a history of secure development or effective security patching if any issues were discovered internally. While the attack surface is currently zero, it's important to note that this could change with future updates. The complete lack of nonce checks and the presence of unprotected entry points (even if currently zero) are minor areas for continued vigilance. Overall, this plugin appears to be well-secured, with no immediate critical or high risks identified by the static analysis.

Key Concerns

  • No nonce checks found
  • No unprotected entry points found, but absence noted
Vulnerabilities
None known

Address autocomplete Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Address autocomplete Contact Form 7 Release Timeline

v1.1.2Current
Code Analysis
Analyzed Mar 16, 2026

Address autocomplete Contact Form 7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
38 escaped
Nonce Checks
0
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped43 total outputs
Attack Surface

Address autocomplete Contact Form 7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 13
actionwpcf7_initWMAMC-cf7-address-autocomplete.php:75
actionadmin_menuWMAMC-cf7-address-autocomplete.php:80
actionadmin_initWMAMC-cf7-address-autocomplete.php:85
actionadmin_initWMAMC-cf7-address-autocomplete.php:88
actionwpcf7_admin_initWMAMC-cf7-address-autocomplete.php:92
actionwpcf7_initWMAMC-cf7-address-autocomplete.php:97
filterwpcf7_validate_address_geo_autocompleteWMAMC-cf7-address-autocomplete.php:102
filterwpcf7_validate_address_geo_autocomplete*WMAMC-cf7-address-autocomplete.php:103
filterwpcf7_messagesWMAMC-cf7-address-autocomplete.php:108
actionwp_footerWMAMC-cf7-address-autocomplete.php:112
actionadmin_initWMAMC-cf7-address-autocomplete.php:115
actionwp_enqueue_scriptsWMAMC-cf7-address-autocomplete.php:120
actionadmin_noticesWMAMC-cf7-address-autocomplete.php:185
Maintenance & Trust

Address autocomplete Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested5.2.24
Last updatedAug 19, 2019
PHP min version5.2.4
Downloads12K

Community Trust

Rating84/100
Number of ratings6
Active installs400
Developer Profile

Address autocomplete Contact Form 7 Developer Profile

webman technologies

5 plugins · 420 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Address autocomplete Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/address-autocomplete-contact-form-7/js/gmap_script.js/wp-content/plugins/address-autocomplete-contact-form-7/js/address_autocomplete.js/wp-content/plugins/address-autocomplete-contact-form-7/css/gmap_style.css
Script Paths
/wp-content/plugins/address-autocomplete-contact-form-7/js/gmap_script.js/wp-content/plugins/address-autocomplete-contact-form-7/js/address_autocomplete.js
Version Parameters
address-autocomplete-contact-form-7/js/gmap_script.js?ver=address-autocomplete-contact-form-7/js/address_autocomplete.js?ver=address-autocomplete-contact-form-7/css/gmap_style.css?ver=

HTML / DOM Fingerprints

CSS Classes
gmap_style
HTML Comments
Address autocomplete Contact Form 7 is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.Address autocomplete Contact Form 7 is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.You should have received a copy of the GNU General Public License along with this program. If not, see <https://www.gnu.org/licenses/> Copyright (C) 2018 Webman Technologies+22 more
Data Attributes
data-autocomplete-countrydata-autocomplete-postal-codedata-autocomplete-statedata-autocomplete-citydata-autocomplete-street-numberdata-autocomplete-route
JS Globals
WMAMC_cf7_address_autocompletemap_search
Shortcode Output
[address_geo_autocomplete]
FAQ

Frequently Asked Questions about Address autocomplete Contact Form 7