Does Captcha by Yandex for Contact Form 7 have any unpatched vulnerabilities?

No. All known vulnerabilities in Captcha by Yandex for Contact Form 7 have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Captcha by Yandex for Contact Form 7 compatible with WordPress 6.8.5?

According to WordPress.org data, Captcha by Yandex for Contact Form 7 1.2.7 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is Captcha by Yandex for Contact Form 7 compatible with PHP 7.4+?

Captcha by Yandex for Contact Form 7 requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Captcha by Yandex for Contact Form 7 updated?

Captcha by Yandex for Contact Form 7 was last updated on Jan 12, 2026. Frequent updates are generally a positive security signal.

What is Captcha by Yandex for Contact Form 7's security score?

Captcha by Yandex for Contact Form 7 has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Captcha by Yandex for Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/captcha-by-yandex-for-contact-form-7

Add antispam Yandex SmartCaptcha for your forms with Contact Form 7

2K active installs v1.2.7 PHP 7.4+ WP 5.0+ Updated Jan 12, 2026

captchacontact-form-7%d1%8f%d0%bd%d0%b4%d0%b5%d0%ba%d1%81-%d0%ba%d0%b0%d0%bf%d1%87%d0%b0yandexyandex-captcha

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Captcha by Yandex for Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 100/100

Captcha by Yandex for Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago

Risk Assessment

The plugin "captcha-by-yandex-for-contact-form-7" v1.2.7 exhibits a generally good security posture based on the static analysis provided. The absence of AJAX handlers, REST API routes, shortcodes, and cron events significantly limits its attack surface. The code also demonstrates strong practices regarding SQL queries, exclusively using prepared statements, and a high percentage of properly escaped output. Nonce checks are present, further reinforcing secure data handling.

Key Concerns

External HTTP requests detected
Unsanitized paths in taint flows
Some output not properly escaped
No capability checks for entry points

Vulnerabilities

None known

Captcha by Yandex for Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

Captcha by Yandex for Contact Form 7 Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

85 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

89% escaped95 total outputs

Data Flows

2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths

load (controller\class-cfyc-service.php:156)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Captcha by Yandex for Contact Form 7 Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 5

actionadmin_noticesbootstrap.php:110

actionwpcf7_initcontroller\class-cfyc-common.php:48

filterwpcf7_spamcontroller\class-cfyc-common.php:49

actionwpcf7_initcontroller\class-cfyc-common.php:58

actionwpcf7_admin_initcontroller\class-cfyc-common.php:62

Maintenance & Trust

Captcha by Yandex for Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedJan 12, 2026

PHP min version7.4

Downloads8K

Community Trust

Rating90/100

Number of ratings4

Active installs2K

Alternatives

Captcha by Yandex for Contact Form 7 Alternatives

ReCaptcha v2 for Contact Form 7

wpcf7-recaptcha

100

Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1

200K No CVEs

Contact Form 7 Captcha

contact-form-7-simple-recaptcha

Protect your Contact Form 7 forms with Google reCAPTCHA V2, Google reCAPTCHA V3, hCAPTCHA, or Cloudflare Turnstile.

100K 2 CVEs

Invisible reCaptcha for WordPress

invisible-recaptcha

Invisible reCaptcha for WordPress plugin helps you to protect your sites against bad spam bots using the new Invisible reCaptcha by Google.

90K No CVEs

Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)

contact-form-7-image-captcha

100

Adds an Image CAPTCHA to Contact Form 7 and WPForms, GDPR ready, perfect WPForms or Contact Form 7 Spam Protection Image CAPTCHA, adds a honeypot

80K No CVEs

$DS CF7 Math Captcha$

DS CF7 Math Captcha

ds-cf7-math-captcha

"DS CF7 Math Captcha" is a math captcha with refresh captcha functionality to prevent unwanted spam for your contact form 7 plugin.

30K 1 CVE

Developer Profile

Captcha by Yandex for Contact Form 7 Developer Profile

stasionok

4 plugins · 5K total installs

trust score

Avg Security Score

96/100

Avg Patch Time

183 days

View full developer profile

Detection Fingerprints

How We Detect Captcha by Yandex for Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/captcha-by-yandex-for-contact-form-7/css/admin.css/wp-content/plugins/captcha-by-yandex-for-contact-form-7/css/frontend.css/wp-content/plugins/captcha-by-yandex-for-contact-form-7/js/admin.js/wp-content/plugins/captcha-by-yandex-for-contact-form-7/js/frontend.js

Script Paths

https://smartcaptcha.cloud.yandex.ru/captcha.js?render=onload&onload=cfycOnloadFunction

Version Parameters

captcha-by-yandex-for-contact-form-7/css/admin.css?ver=captcha-by-yandex-for-contact-form-7/css/frontend.css?ver=captcha-by-yandex-for-contact-form-7/js/admin.js?ver=captcha-by-yandex-for-contact-form-7/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes

cfyc-captcha-containersmart-captcha

Data Attributes

data-sitekey

JS Globals

cfycCaptchaReadyEventcfycCaptchaLoadedcfycOnloadFunctioncfycLoad

Shortcode Output

<div class="smart-captcha cfyc-captcha-container"

FAQ