Block domain email addresses for Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/block-domain-email-addresses-for-contact-form-7

Blocks spammers sending contact forms using an email address from the domain of the WordPress installation in Contact Form 7.

60 active installs v1.0.1 PHP 7.1+ WP 4.0.1+ Updated Sep 23, 2023
block-emailcontactcontact-formemailform
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Block domain email addresses for Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 85/100

Block domain email addresses for Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The static analysis of "block-domain-email-addresses-for-contact-form-7" v1.0.1 reveals a strong security posture. The plugin exhibits no identifiable attack surface through AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, the code signals demonstrate excellent security practices, with no dangerous functions, all SQL queries utilizing prepared statements, and all output being properly escaped. The absence of file operations and external HTTP requests further bolsters its security. Taint analysis also shows no identified unsanitized paths, indicating a clean flow of data within the plugin.

The plugin's vulnerability history is equally impressive, with zero known CVEs, either patched or unpatched. This lack of historical vulnerabilities, across all severity levels and common vulnerability types, suggests a well-developed and securely coded plugin. The absence of past issues also implies consistent security attention from the developers.

In conclusion, this plugin presents an exceptionally low-risk profile. The comprehensive static analysis shows no evident security flaws, and its clean vulnerability history further reinforces this assessment. The developers have demonstrated a commitment to secure coding practices, making this plugin a highly secure option.

Vulnerabilities
None known

Block domain email addresses for Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Block domain email addresses for Contact Form 7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
1 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped1 total outputs
Attack Surface

Block domain email addresses for Contact Form 7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
actionplugins_loadedblock-domain-email-addresses-for-contact-form-7.php:21
filterwpcf7_validate_emailblock-domain-email-addresses-for-contact-form-7.php:46
filterwpcf7_validate_email*block-domain-email-addresses-for-contact-form-7.php:47
Maintenance & Trust

Block domain email addresses for Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8
Last updatedSep 23, 2023
PHP min version7.1
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs60
Developer Profile

Block domain email addresses for Contact Form 7 Developer Profile

apasionados

28 plugins · 61K total installs

75
trust score
Avg Security Score
94/100
Avg Patch Time
326 days
View full developer profile
Detection Fingerprints

How We Detect Block domain email addresses for Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
<!-- Please use an email address that isn't hosted on this domain. -->
FAQ

Frequently Asked Questions about Block domain email addresses for Contact Form 7