Bontact – Multichannel Live Contact Form Security & Risk Analysis

wordpress.org/plugins/bontact

snapengage ,contact us ,Zopim ,zendesk ,clickdesk ,olark Requires at least: 3.5 Tested up to: 4.7.1 Stable tag: 1.2.2 License: GPLv2 or later

10 active installs v1.2.2 PHP + WP + Updated Mar 2, 2017
admincontactcontact-formsupportwidget
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Bontact – Multichannel Live Contact Form Safe to Use in 2026?

Generally Safe

Score 85/100

Bontact – Multichannel Live Contact Form has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The 'bontact' plugin v1.2.2 presents a mixed security posture. On the positive side, there are no known CVEs in its history, suggesting a generally stable security track record. Furthermore, the plugin demonstrates good practices by exclusively using prepared statements for its SQL queries, avoiding a common vulnerability. It also incorporates some nonce and capability checks, which are essential for WordPress security.

Key Concerns

  • All output is unescaped
  • External HTTP requests without clear validation
  • Limited nonce checks
  • Limited capability checks
Vulnerabilities
None known

Bontact – Multichannel Live Contact Form Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Bontact – Multichannel Live Contact Form Release Timeline

v1.2.1
v1.2.0
v1.1.9
v1.1.8
v1.1.7
v1.1.6
v1.1.5
v1.1.4
v1.1.3
v1.1.2
v1.1.1
v1.1.0
v1.0.9
v1.0.8
v1.0.7
v1.0.6
v1.0.5
v1.0.4
v1.0.3
v1.0.2
Code Analysis
Analyzed Mar 17, 2026

Bontact – Multichannel Live Contact Form Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
11
0 escaped
Nonce Checks
2
Capability Checks
1
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

0% escaped11 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
admin_init (classes\class-bont-settings.php:45)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Bontact – Multichannel Live Contact Form Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionplugins_loadedbontact.php:62
actionadmin_menuclasses\class-bont-admin-ui.php:21
actionadmin_print_scriptsclasses\class-bont-admin-ui.php:22
actionwp_footerclasses\class-bont-front-end.php:34
actionall_admin_noticesclasses\class-bont-settings.php:293
actionadmin_initclasses\class-bont-settings.php:382
actionadmin_menuclasses\class-bont-settings.php:383
Maintenance & Trust

Bontact – Multichannel Live Contact Form Maintenance & Trust

Maintenance Signals

WordPress version tested
Last updatedMar 2, 2017
PHP min version
Downloads11K

Community Trust

Rating82/100
Number of ratings14
Active installs10
Developer Profile

Bontact – Multichannel Live Contact Form Developer Profile

Bontact Multichannel Live Support

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Bontact – Multichannel Live Contact Form

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bontact/assets/css/admin-ui.min.css/wp-content/plugins/bontact/assets/css/bootstrap.min.css/wp-content/plugins/bontact/assets/css/login.css/wp-content/plugins/bontact/assets/js/jquery.validate.min.js
Script Paths
//widget.bontact.com/widgetscript/bontact.widget.js
Version Parameters
bontact/assets/css/admin-ui.min.css?ver=bontact/assets/css/bootstrap.min.css?ver=bontact/assets/css/login.css?ver=bontact/assets/js/jquery.validate.min.js?ver=

HTML / DOM Fingerprints

JS Globals
Bontact
FAQ

Frequently Asked Questions about Bontact – Multichannel Live Contact Form