PopupReply for Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/contact-form-7-response-colorbox-popup

Show Contact Form 7 response messages in a clean, accessible popup modal.

100 active installs v2.0.0 PHP 7.4+ WP 6.0+ Updated May 19, 2026
cf7-popupcontact-form-7contact-form-modalform-popupsuccess-message-popup
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PopupReply for Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 100/100

PopupReply for Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The plugin "contact-form-7-response-colorbox-popup" v1.0 exhibits a strong overall security posture based on the provided static analysis and vulnerability history. The absence of any identified dangerous functions, SQL queries executed without prepared statements, file operations, or external HTTP requests is a positive indicator. Furthermore, the zero-count for known CVEs and the lack of recorded common vulnerability types suggest a well-maintained and secure codebase to date. However, a significant concern arises from the complete lack of output escaping. With one total output and 0% properly escaped, this presents a direct risk of cross-site scripting (XSS) vulnerabilities if any user-supplied data is directly rendered on the page without proper sanitization. While the attack surface appears minimal with no AJAX handlers, REST API routes, shortcodes, or cron events, the unchecked output is a critical vulnerability that needs immediate attention. The plugin's strengths lie in its secure handling of database operations and its clean vulnerability history, but the unescaped output is a glaring weakness that could be easily exploited.

Key Concerns

  • Output not properly escaped
Vulnerabilities
None known

PopupReply for Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

PopupReply for Contact Form 7 Release Timeline

v2.0.0Current
v1.0
Code Analysis
Analyzed Mar 16, 2026

PopupReply for Contact Form 7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped1 total outputs
Attack Surface

PopupReply for Contact Form 7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 1
actionwp_footercolorboxcf7response.php:67
Maintenance & Trust

PopupReply for Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedMay 19, 2026
PHP min version7.4
Downloads21K

Community Trust

Rating60/100
Number of ratings8
Active installs100
Developer Profile

PopupReply for Contact Form 7 Developer Profile

dudaster

5 plugins · 104K total installs

79
trust score
Avg Security Score
100/100
Avg Patch Time
249 days
View full developer profile
Detection Fingerprints

How We Detect PopupReply for Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/contact-form-7-response-colorbox-popup/colorboxcf7response.php

HTML / DOM Fingerprints

CSS Classes
alertsuccescboxLoadedContent
Shortcode Output
<script> jQuery(".wpcf7-submit").click(function(event) { jQuery( document ).ajaxComplete(function() { myclass=jQuery(".wpcf7-response-output").hasClass("wpcf7-validation-errors") ? "alert" : "succes"; //alert (myclass); jQuery.colorbox({ className: myclass, opacity:"0.05", width:"350px", height:"200px", html:jQuery(".wpcf7-response-output").html() }); jQuery(".wpcf7-response-output").css( "display", "none" ); }); }); </script> <style> .alert, .succes { font-size: 20px; font-weight: bold; line-height: 1.3em; } .alert #cboxLoadedContent, .succes #cboxLoadedContent{ display: table-cell; vertical-align: middle; text-align: center; } .alert{ color: red; } .succes{ color: green; } </style>
FAQ

Frequently Asked Questions about PopupReply for Contact Form 7