WP-Safety

Bontact – Multichannel Live Contact Form Security & Risk Analysis

wordpress.org/plugins/bontact

snapengage ,contact us ,Zopim ,zendesk ,clickdesk ,olark Requires at least: 3.5 Tested up to: 4.7.1 Stable tag: 1.2.2 License: GPLv2 or later

10 active installs v1.2.2 PHP + WP + Updated Mar 2, 2017
admincontactcontact-formsupportwidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Bontact – Multichannel Live Contact Form Safe to Use in 2026?

Generally Safe

Score 85/100

Bontact – Multichannel Live Contact Form has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The 'bontact' plugin v1.2.2 presents a mixed security posture. On the positive side, there are no known CVEs in its history, suggesting a generally stable security track record. Furthermore, the plugin demonstrates good practices by exclusively using prepared statements for its SQL queries, avoiding a common vulnerability. It also incorporates some nonce and capability checks, which are essential for WordPress security.

Key Concerns

  • All output is unescaped
  • External HTTP requests without clear validation
  • Limited nonce checks
  • Limited capability checks
Vulnerabilities
None known

Bontact – Multichannel Live Contact Form Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Bontact – Multichannel Live Contact Form Release Timeline

v1.2.1
v1.2.0
v1.1.9
v1.1.8
v1.1.7
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.9
v1.0.8
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
Code Analysis
Analyzed Mar 17, 2026

Bontact – Multichannel Live Contact Form Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
0 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

0% escaped11 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
admin_init (classes\class-bont-settings.php:45)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Bontact – Multichannel Live Contact Form Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionplugins_loadedbontact.php:62
actionadmin_menuclasses\class-bont-admin-ui.php:21
actionadmin_print_scriptsclasses\class-bont-admin-ui.php:22
actionwp_footerclasses\class-bont-front-end.php:34
actionall_admin_noticesclasses\class-bont-settings.php:293
actionadmin_initclasses\class-bont-settings.php:382
actionadmin_menuclasses\class-bont-settings.php:383
Maintenance & Trust

Bontact – Multichannel Live Contact Form Maintenance & Trust

Maintenance Signals

WordPress version tested
Last updatedMar 2, 2017
PHP min version
Downloads11K

Community Trust

Rating82/100
Number of ratings14
Active installs10
Alternatives

Bontact – Multichannel Live Contact Form Alternatives

SiteOrigin Widgets Bundle

SiteOrigin Widgets Bundle

so-widgets-bundle

A
95

Essential elements for modern websites. Add buttons, sliders, heroes, maps, images, carousels, features, icons, more. Create dynamic pages easily.

400K 11 CVEs
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress

contact-form-plugin

A
92

The most powerful and user-friendly WordPress contact form plugin. Create beautiful contact forms, widgets and pages using shortcodes.

30K 10 CVEs
Void Contact Form 7 Widget For Elementor Page Builder

Void Contact Form 7 Widget For Elementor Page Builder

cf7-widget-elementor

A
89

This WordPress Plugin Adds Contact Form 7 widget element to Elementor page builder for easy drag & drop the created contact forms with CF7 (contac …

20K 4 CVEs
Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons

Sticky Chat Widget – Floating Chat Icons, Contact Form, Call, Click to Chat, Email & Message Buttons

sticky-chat-widget

A
100

Social chat buttons with WhatsApp, Messenger, WeChat, Telegram, Instagram, TikTok, Zalo & more — plus SMS, Call button, Contact form, and 20+ icons.

10K 1 CVE
HT Form Widget for Elementor and WPForms

HT Form Widget for Elementor and WPForms

ht-wpform

A
92

HT Form Widget for Elementor and WPForms allows you to easily display WPForms forms using Elementor with full styling control.

3K No CVEs
Developer Profile

Bontact – Multichannel Live Contact Form Developer Profile

Bontact Multichannel Live Support

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Bontact – Multichannel Live Contact Form

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bontact/assets/css/admin-ui.min.css/wp-content/plugins/bontact/assets/css/bootstrap.min.css/wp-content/plugins/bontact/assets/css/login.css/wp-content/plugins/bontact/assets/js/jquery.validate.min.js
Script Paths
//widget.bontact.com/widgetscript/bontact.widget.js
Version Parameters
bontact/assets/css/admin-ui.min.css?ver=bontact/assets/css/bootstrap.min.css?ver=bontact/assets/css/login.css?ver=bontact/assets/js/jquery.validate.min.js?ver=

HTML / DOM Fingerprints

JS Globals
Bontact
FAQ

Frequently Asked Questions about Bontact – Multichannel Live Contact Form