WP-Safety

Contact Form 7 City Field Extension Security & Risk Analysis

wordpress.org/plugins/contact-form-7-city-field-extension

Just another plugin for Contact Form 7. A wonderful city field!

300 active installs v1.3 PHP + WP 4.0+ Updated Jun 7, 2017
contactcontact-formcontact-form-7feedbackform
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Contact Form 7 City Field Extension Safe to Use in 2026?

Generally Safe

Score 85/100

Contact Form 7 City Field Extension has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "contact-form-7-city-field-extension" plugin v1.3 exhibits a strong security posture based on the provided static analysis. The absence of any detected dangerous functions, raw SQL queries, file operations, or external HTTP requests is highly commendable. Furthermore, the high percentage of properly escaped output suggests good defensive programming practices for rendering user-facing data. The taint analysis also shows no concerning unsanitized flows, indicating a low risk of injection vulnerabilities stemming from user input.

Key Concerns

  • No nonce checks detected
  • No capability checks detected
Vulnerabilities
None known

Contact Form 7 City Field Extension Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Contact Form 7 City Field Extension Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
32 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

91% escaped35 total outputs
Attack Surface

Contact Form 7 City Field Extension Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionadmin_menucontact-form-7-city-field-extension.php:36
actionadmin_initcontact-form-7-city-field-extension.php:37
actionwp_enqueue_scriptscontact-form-7-city-field-extension.php:106
actionadmin_enqueue_scriptscontact-form-7-city-field-extension.php:111
actionwpcf7_initcontact-form-7-city-field-extension.php:118
filterwpcf7_validate_cityfield*contact-form-7-city-field-extension.php:119
actionplugins_loadedcontact-form-7-city-field-extension.php:122
actionwpcf7_admin_initcontact-form-7-city-field-extension.php:234
actionwpcf7_admin_noticescontact-form-7-city-field-extension.php:303
Maintenance & Trust

Contact Form 7 City Field Extension Maintenance & Trust

Maintenance Signals

WordPress version tested4.8.28
Last updatedJun 7, 2017
PHP min version
Downloads14K

Community Trust

Rating64/100
Number of ratings10
Active installs300
Alternatives

Contact Form 7 City Field Extension Alternatives

Contact Form 7 Countries

Contact Form 7 Countries

cf7-countries

A
85

Country drop-down menu for Contact Form 7.

400 No CVEs
woo-shortcode-popup

woo-shortcode-popup

woo-shortcode-popup

A
85

Creates a popup button on woocommerce shop page

10 No CVEs
Database Addon for Contact Form 7 – CFDB7

Database Addon for Contact Form 7 – CFDB7

contact-form-cfdb7

A
90

Save and manage Contact Form 7 messages. Never lose important data. It is a lightweight contact form 7 database plugin.

600K 7 CVEs
ReCaptcha v2 for Contact Form 7

ReCaptcha v2 for Contact Form 7

wpcf7-recaptcha

A
100

Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1

200K No CVEs
Redirection for Contact Form 7

Redirection for Contact Form 7

wpcf7-redirect

A
88

Redirect to any page or URL, execute scripts after submission, save data to the database, and unlock additional submission actions for Contact Form 7.

200K 14 CVEs
Developer Profile

Contact Form 7 City Field Extension Developer Profile

Pasquale Bucci

4 plugins · 610 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Contact Form 7 City Field Extension

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/contact-form-7-city-field-extension/css/pakystyle.css/wp-content/plugins/contact-form-7-city-field-extension/js/script.js
Script Paths
https://maps.googleapis.com/maps/api/js

HTML / DOM Fingerprints

CSS Classes
wpcf7cfe-cityfield
Data Attributes
id="autocomplete"
Shortcode Output
<span class="wpcf7-form-control-wrap cityfieldtext"><input type="text" id="autocomplete" name="cityfieldtext" size="40" aria-invalid="false" /></span>
FAQ

Frequently Asked Questions about Contact Form 7 City Field Extension