Contact Form 7: Zoho Leads integration Security & Risk Analysis

wordpress.org/plugins/cf7-zoho-leads

Zoho Leads integration for Contact Form 7 forms.

40 active installs v0.0.5 PHP + WP 3.2+ Updated Mar 2, 2017
cf7contact-form-7crmzohozoho-crm
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Contact Form 7: Zoho Leads integration Safe to Use in 2026?

Generally Safe

Score 85/100

Contact Form 7: Zoho Leads integration has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The 'cf7-zoho-leads' plugin version 0.0.5 exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and the presence of nonce and capability checks are positive indicators. Furthermore, the zero recorded CVEs and the clean taint analysis suggest no obvious critical vulnerabilities.

Key Concerns

  • Unescaped output found
Vulnerabilities
None known

Contact Form 7: Zoho Leads integration Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Contact Form 7: Zoho Leads integration Release Timeline

v0.0.5Current
v0.0.4
v0.0.3
v0.0.2
v0.0.1
Code Analysis
Analyzed Apr 16, 2026

Contact Form 7: Zoho Leads integration Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
1 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

50% escaped2 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
cf7zl_options_page (admin-menu.php:18)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Contact Form 7: Zoho Leads integration Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[cf7lead] cf7-zoho-leads.php:152
WordPress Hooks 5
actionadmin_noticesadmin-menu.php:121
actionadmin_menuadmin-menu.php:125
filterwpcf7_form_hidden_fieldscf7-zoho-leads.php:140
actionwp_enqueue_scriptscf7-zoho-leads.php:151
actionwpcf7_before_send_mailcf7-zoho-leads.php:153
Maintenance & Trust

Contact Form 7: Zoho Leads integration Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.33
Last updatedMar 2, 2017
PHP min version
Downloads6K

Community Trust

Rating46/100
Number of ratings6
Active installs40
Developer Profile

Contact Form 7: Zoho Leads integration Developer Profile

jcornutt

3 plugins · 90 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Contact Form 7: Zoho Leads integration

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cf7-zoho-leads/libs/logger.php/wp-content/plugins/cf7-zoho-leads/admin-menu.php/wp-content/plugins/cf7-zoho-leads/libs/zoho-crm-api.php

HTML / DOM Fingerprints

Data Attributes
cf7zl_submitcf7zl_user_fields
Shortcode Output
[cf7lead
FAQ

Frequently Asked Questions about Contact Form 7: Zoho Leads integration