[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftthW2vgcHoO0yM3qhYxrv7zomRWQsst-8G4oOd9XdTc":3,"$f44yjzGxRFsqTQMieoYZnBE2hlABPdwMvsGdEIJfmqcI":210,"$ft5Zk3sNxSpooamaGcGren8WRTCvcjVvQ6dyyipl6BZo":215},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":39,"analysis":129,"fingerprints":189},"contact-form-to-wp-posts","Contact Form 7 To WordPress Post","0.2","Pierre Saïkali","https:\u002F\u002Fprofiles.wordpress.org\u002Fpskli\u002F","\u003Cp>This plugin is a Contact Form 7 addon. It lets you save each CF7 forms submissions into a WordPress “Messages” post.\u003Cbr \u002F>\nThis way, you’ll never lose a contact : if your SMTP server is down, the message will still be stored in your WordPress database.\u003C\u002Fp>\n","Extend Contact Form 7 and save form entries into WordPress posts.",50,4248,66,3,"2018-11-02T16:25:00.000Z","4.9.29","3.9","",[20,21,22,23,24],"cf7","contact-form-7","database-form","save-entries","submissions","http:\u002F\u002Fmosaika.fr","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontact-form-to-wp-posts.0.2.zip",85,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":35,"avg_security_score":27,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"pskli",80,30,84,"2026-05-20T09:24:47.909Z",[40,60,79,98,113],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":48,"downloaded":49,"rating":28,"num_ratings":28,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":57,"download_link":58,"security_score":59,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"leads-store-database-contact-form7","Leads Store Database Contact Form7","1.0.0","melonwebstudio","https:\u002F\u002Fprofiles.wordpress.org\u002Fmelonwebstudio\u002F","\u003Cp>Leads Store Database Contact Form7 is a simple yet powerful plugin that saves all your Contact Form 7 submissions to your WordPress database. Stop losing important leads from failed email deliveries or lost messages.\u003C\u002Fp>\n\u003Cp>This plugin provides a dedicated section in your WordPress admin dashboard to view and manage all your form submissions in one place.\u003C\u002Fp>\n\u003Cp>Key Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Saves Submissions:\u003C\u002Fstrong> Automatically saves all Contact Form 7 form submissions to the database.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Centralized Leads Management:\u003C\u002Fstrong> View all your leads in a clean, easy-to-use table within the WordPress admin area.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Filtering Options:\u003C\u002Fstrong> Filter leads by form name, date range, or a combination of both to quickly find what you need.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Export:\u003C\u002Fstrong> Export your filtered or all leads to a CSV file with a single click.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lead Details Popup:\u003C\u002Fstrong> Click on any lead to see a detailed view of the submission data in a convenient modal popup.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pagination:\u003C\u002Fstrong> Navigate through your leads easily with built-in pagination.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simple & Lightweight:\u003C\u002Fstrong> Designed to be lightweight and not slow down your website.\u003C\u002Fli>\n\u003C\u002Ful>\n","Store and manage Contact Form 7 submissions in your database with easy export to CSV.",20,200,"2026-01-09T19:39:00.000Z","6.9.4","6.2","7.4",[20,21,55,56,24],"database","save","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fleads-store-database-contact-form7","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fleads-store-database-contact-form7.1.0.0.zip",100,{"slug":61,"name":62,"version":63,"author":64,"author_profile":65,"description":66,"short_description":67,"active_installs":68,"downloaded":69,"rating":59,"num_ratings":70,"last_updated":71,"tested_up_to":51,"requires_at_least":72,"requires_php":53,"tags":73,"homepage":77,"download_link":78,"security_score":59,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"aroksds-alerts-for-cf7-to-telegram","AroksDS Submission Alerts for Contact Form 7 to Telegram","1.0.1","AroksDS","https:\u002F\u002Fprofiles.wordpress.org\u002Faroksds2026\u002F","\u003Cp>Email is not a reliable operational channel for lead intake. Even when Contact Form 7 reports “mail sent”, real-world delivery can fail: messages may land in spam, be blocked by SMTP\u002FDMARC rules, get throttled, or simply never reach the inbox in time. The result is the worst-case scenario: \u003Cstrong>a lead is submitted, but nobody sees it\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>AroksDS Submission Alerts for Contact Form 7 to Telegram\u003C\u002Fstrong> creates a second, independent delivery path: every successful form submission can generate an instant Telegram notification in a shared team space (group, private chat, or a forum topic). This gives you a practical “backup channel” so leads are not lost when email delivery is unreliable.\u003C\u002Fp>\n\u003Ch4>Why this plugin is useful\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Backup channel to email\u003C\u002Fstrong>: reduce lost leads caused by spam filtering or mail delivery issues.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shared visibility for managers\u003C\u002Fstrong>: send to a single Telegram group used by everyone who handles leads.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Faster response time (SLA)\u003C\u002Fstrong>: instant notifications help you respond while the user is still “hot”.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Less human error\u003C\u002Fstrong>: no need to manually check mailboxes or WordPress admin panels.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simple triage\u003C\u002Fstrong>: route different forms to different chats\u002Ftopics (sales vs support vs hiring).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Operational continuity\u003C\u002Fstrong>: even if your SMTP provider or mail settings break, Telegram alerts can still arrive.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy control\u003C\u002Fstrong>: choose what fields are included (Allowed\u002FExcluded fields) and keep templates minimal.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Troubleshooting\u003C\u002Fstrong>: built-in test tool + lightweight logs for quick diagnosis.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Key features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Success-only trigger\u003C\u002Fstrong>: sends only on Contact Form 7 \u003Ccode>wpcf7_mail_sent\u003C\u002Fcode> (this WordPress.org edition intentionally avoids any “before send” triggers).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Global defaults + per-form rules\u003C\u002Fstrong>: Form ID \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Chat ID \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> optional Message Thread ID \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Template \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Allowed\u002FExcluded fields.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Template placeholders\u003C\u002Fstrong>: \u003Ccode>{field-name}\u003C\u002Fcode>, \u003Ccode>{form_id}\u003C\u002Fcode>, \u003Ccode>{form_title}\u003C\u002Fcode>, \u003Ccode>{page_url}\u003C\u002Fcode>, \u003Ccode>{date}\u003C\u002Fcode>, \u003Ccode>{time}\u003C\u002Fcode>, \u003Ccode>{all_fields}\u003C\u002Fcode>.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Parse modes\u003C\u002Fstrong>: Plain, HTML, MarkdownV2 (placeholder values are escaped for safety).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Logs\u003C\u002Fstrong>: stores last 100 entries (errors always; successes only when Debug Logs are enabled).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Tools\u003C\u002Fstrong>: send a test message from wp-admin.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No tracking \u002F telemetry\u003C\u002Fstrong>: no external calls except Telegram Bot API.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What this plugin does NOT do (to avoid misunderstandings)\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>It sends \u003Cstrong>text messages only\u003C\u002Fstrong> via Telegram Bot API \u003Ccode>sendMessage\u003C\u002Fcode> (no attachments\u002Ffiles).\u003C\u002Fli>\n\u003Cli>It is not a CRM and does not store submissions as leads in WordPress.\u003C\u002Fli>\n\u003Cli>It does not replace email delivery — it \u003Cstrong>adds a duplicate channel\u003C\u002Fstrong> for operational safety.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>External services\u003C\u002Fh4>\n\u003Cp>This plugin connects to the Telegram Bot API to send messages.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Service: Telegram Bot API (sendMessage)\u003Cbr \u002F>\nhttps:\u002F\u002Fcore.telegram.org\u002Fbots\u002Fapi\u003C\u002Fli>\n\u003Cli>Terms of use:\u003Cbr \u002F>\nhttps:\u002F\u002Ftelegram.org\u002Ftos\u003C\u002Fli>\n\u003Cli>Privacy policy:\u003Cbr \u002F>\nhttps:\u002F\u002Ftelegram.org\u002Fprivacy\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>When: On successful Contact Form 7 submissions (\u003Ccode>wpcf7_mail_sent\u003C\u002Fcode>) and when you click “Send test message” in wp-admin.\u003Cbr \u002F>\nData sent: \u003Ccode>chat_id\u003C\u002Fcode>, message text (built from your template and filtered form fields), optional \u003Ccode>parse_mode\u003C\u002Fcode>, optional \u003Ccode>message_thread_id\u003C\u002Fcode>, \u003Ccode>disable_web_page_preview\u003C\u002Fcode>.\u003Cbr \u002F>\nPrivacy controls: limit what is sent by configuring Allowed\u002FExcluded fields and by editing the message template.\u003C\u002Fp>\n\u003Cp>Note: Telegram is a third-party service. Site owners are responsible for the data they send to Telegram. Avoid sending sensitive personal data unless necessary.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin may send form submission content (which can include personal data) to Telegram.\u003C\u002Fp>\n\u003Cp>Suggested text for your privacy policy:\u003Cbr \u002F>\n* We use a plugin that forwards Contact Form 7 submissions to Telegram (a third-party service) via the Telegram Bot API.\u003Cbr \u002F>\n* Data sent may include the message text built from form fields and metadata (e.g., page URL, date\u002Ftime), depending on our configuration.\u003Cbr \u002F>\n* We limit the data shared by selecting allowed\u002Fexcluded fields and by editing the message template.\u003Cbr \u002F>\n* Telegram processes data according to its own Terms and Privacy Policy:\u003Cbr \u002F>\n  https:\u002F\u002Ftelegram.org\u002Ftos\u003Cbr \u002F>\n  https:\u002F\u002Ftelegram.org\u002Fprivacy\u003C\u002Fp>\n","Stop losing leads: send Contact Form 7 submissions to a shared Telegram channel as a reliable backup to email.",10,232,1,"2026-02-28T18:22:00.000Z","6.0",[20,21,74,75,76],"form-submissions","notifications","telegram","https:\u002F\u002Farstor.pl\u002Fen\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Faroksds-alerts-for-cf7-to-telegram.1.0.1.zip",{"slug":80,"name":81,"version":63,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":68,"downloaded":86,"rating":28,"num_ratings":28,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":90,"tags":91,"homepage":18,"download_link":95,"security_score":96,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":97},"database-records-for-contact-form-7","Database Records for Contact Form 7","Dhaval Prajapati","https:\u002F\u002Fprofiles.wordpress.org\u002Fdhaval59\u002F","\u003Cp>Database Records for Contact Form 7 is a WordPress plugin that saves Contact Form 7 submissions directly into the WordPress database. The plugin also provides options to display the saved entries in the WordPress admin panel as well as on the frontend, making it easy to manage and review form submissions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Features:\n\u003Cul>\n\u003Cli>Saves Contact Form 7 submissions to the database.\u003C\u002Fli>\n\u003Cli>Displays form entries in the WordPress admin area.\u003C\u002Fli>\n\u003Cli>Option to display submissions on the frontend using Bootstrap for styling.\u003C\u002Fli>\n\u003Cli>Simple and intuitive UI with Bootstrap integration.\u003C\u002Fli>\n\u003Cli>Supports custom filtering and searching of submissions.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This plugin is perfect for users who need to store and review form submissions without relying on email notifications.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GPLv2 or later. See the LICENSE file for more details.\u003C\u002Fp>\n","Store and display Contact Form 7 submissions in the database. Manage entries in the admin or display them on the frontend with Bootstrap styling.",881,"2024-12-04T17:39:00.000Z","6.7.5","5.0","7.2",[20,21,92,93,94],"contact-form-database","contact-form-submissions","form-entries","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdatabase-records-for-contact-form-7.zip",92,"2026-04-06T09:54:40.288Z",{"slug":99,"name":100,"version":43,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":28,"downloaded":105,"rating":28,"num_ratings":28,"last_updated":106,"tested_up_to":51,"requires_at_least":72,"requires_php":107,"tags":108,"homepage":111,"download_link":112,"security_score":59,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"bcodecraft-submissions-cf7","BCodeCraft Submissions for Contact Form 7","BCodeCraft","https:\u002F\u002Fprofiles.wordpress.org\u002Fmrboydwp\u002F","\u003Cp>BCodeCraft Submissions for Contact Form 7 is a secure plugin that captures and stores all Contact Form 7 submissions in your WordPress database. Built with security-first principles, it provides a comprehensive solution for managing form entries.\u003C\u002Fp>\n\u003Cp>Never lose a lead again! Every Contact Form 7 submission is automatically saved and can be viewed, searched, filtered, and exported directly from your WordPress admin.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Secure Storage\u003C\u002Fstrong> – All form submissions stored securely with proper sanitization and validation\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fast & Intuitive Interface\u003C\u002Fstrong> – Clean, responsive admin interface that’s easy to use\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Metadata\u003C\u002Fstrong> – Capture IP address, user agent, page URL, submission time, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Export to CSV\u003C\u002Fstrong> – Export entries with Flamingo-compatible format for easy importing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Search & Filter\u003C\u002Fstrong> – Real-time search and filtering by form, date, content\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Bulk Actions\u003C\u002Fstrong> – Delete or export multiple entries at once\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Entry View\u003C\u002Fstrong> – View all submission data and metadata in a clean modal\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Retention Settings\u003C\u002Fstrong> – Configure automatic cleanup or keep entries forever\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Security First\u003C\u002Fstrong> – Built following WordPress security best practices\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CF7 Integration\u003C\u002Fstrong> – Seamless integration with Contact Form 7\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Perfect For:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Business owners who need to keep records of all form submissions\u003C\u002Fli>\n\u003Cli>Developers who want a reliable form data backup solution\u003C\u002Fli>\n\u003Cli>Marketing teams who need to export leads to external tools\u003C\u002Fli>\n\u003Cli>Anyone concerned about losing important form submissions\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you find this plugin useful, consider supporting its development:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fko-fi.com\u002Fboyduang\" rel=\"nofollow ugc\">Support on Ko-fi\u003C\u002Fa>\u003C\u002Fp>\n","Secure storage and management of Contact Form 7 submissions with advanced security features. Never lose a lead again!",145,"2026-01-26T04:00:00.000Z","8.0",[109,21,110,94,74],"cf7-database","contact-form-storage","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbcodecraft-submissions-for-contact-form-7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbcodecraft-submissions-cf7.1.0.0.zip",{"slug":114,"name":115,"version":116,"author":117,"author_profile":118,"description":119,"short_description":120,"active_installs":28,"downloaded":121,"rating":28,"num_ratings":28,"last_updated":122,"tested_up_to":51,"requires_at_least":72,"requires_php":53,"tags":123,"homepage":127,"download_link":128,"security_score":59,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":97},"bulbul-capture-exporter-for-contact-form-7","Submissions Capture & Exporter for Contact Form 7","1.0.6","bulbul389","https:\u002F\u002Fprofiles.wordpress.org\u002Fbulbul389\u002F","\u003Cp>Contact Form 7 Capture & Exporter automatically saves every Contact Form 7 submission into a custom WordPress database table — no more lost leads due to email issues!\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Core Features\u003C\u002Fstrong>\u003Cbr \u002F>\n– Automatically captures all Contact Form 7 form submissions\u003Cbr \u002F>\n– Stores raw field data, date\u002Ftime, IP address, and user agent\u003Cbr \u002F>\n– Beautiful admin dashboard with form cards (name, ID, submission count)\u003Cbr \u002F>\n– Click any form \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> opens a full-width modern modal with a clean table\u003Cbr \u002F>\n– Search, pagination, per-page selector, and instant refresh\u003Cbr \u002F>\n– Per-form settings: hide\u002Fshow fields + rename labels\u003Cbr \u002F>\n– Export visible columns only to CSV\u003Cbr \u002F>\n– Secure and lightweight\u003Cbr \u002F>\n– Fully WP.org guideline compliant\u003C\u002Fp>\n","Capture Contact Form 7 submissions to database. View, search, delete & export to CSV via modern admin modals.",229,"2026-01-05T08:23:00.000Z",[124,21,125,126,24],"cf7-addons","csv","export","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fbulbul-capture-exporter-for-contact-form-7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbulbul-capture-exporter-for-contact-form-7.1.0.6.zip",{"attackSurface":130,"codeSignals":176,"taintFlows":184,"riskAssessment":185,"analyzedAt":188},{"hooks":131,"ajaxHandlers":172,"restRoutes":173,"shortcodes":174,"cronEvents":175,"entryPointCount":28,"unprotectedCount":28},[132,138,142,145,150,154,157,161,165,169],{"type":133,"name":134,"callback":135,"file":136,"line":137},"action","plugins_loaded","init","cf7-to-wp.php",41,{"type":133,"name":135,"callback":139,"priority":28,"file":140,"line":141},"load_localization","includes\u002Fclass-cf7_to_wp.php",81,{"type":133,"name":135,"callback":143,"file":140,"line":144},"register_form_msg_post_type",89,{"type":146,"name":147,"callback":148,"file":140,"line":149},"filter","add_menu_classes","menu_msg_form_bubble",90,{"type":146,"name":151,"callback":152,"priority":68,"file":140,"line":153},"post_row_actions","action_row_for_msg_posts",91,{"type":133,"name":155,"callback":156,"file":140,"line":96},"admin_init","maybe_mark_form_message_as_read",{"type":146,"name":158,"callback":159,"file":140,"line":160},"wpcf7_editor_panels","add_cf7_panel",95,{"type":133,"name":162,"callback":163,"priority":11,"file":140,"line":164},"wpcf7_after_save","save_cf7_data",96,{"type":133,"name":166,"callback":167,"priority":11,"file":140,"line":168},"wpcf7_mail_sent","create_post_on_form_submission",97,{"type":133,"name":170,"callback":167,"priority":11,"file":140,"line":171},"wpcf7_mail_failed",98,[],[],[],[],{"dangerousFunctions":177,"sqlUsage":178,"outputEscaping":180,"fileOperations":28,"externalRequests":28,"nonceChecks":70,"capabilityChecks":28,"bundledLibraries":183},[],{"prepared":28,"raw":28,"locations":179},[],{"escaped":181,"rawEcho":28,"locations":182},14,[],[],[],{"summary":186,"deductions":187},"The \"contact-form-to-wp-posts\" plugin version 0.2 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified AJAX handlers, REST API routes, shortcodes, cron events, or file operations significantly limits the plugin's attack surface.  Furthermore, the code signals indicate a robust implementation with no dangerous functions, all SQL queries using prepared statements, and all output being properly escaped. The presence of nonce checks further bolsters its security by protecting against CSRF attacks.\n\nThe vulnerability history reinforces this positive assessment, with zero known CVEs and no recorded vulnerabilities of any severity. This suggests a history of secure development and maintenance, or that the plugin is relatively new and has not yet been targeted or discovered to have flaws. The taint analysis also shows no identified flows with unsanitized paths, indicating a lack of exploitable data injection vulnerabilities.\n\nOverall, this plugin appears to be well-secured and follows good WordPress development practices. The strengths lie in its minimal attack surface, diligent use of prepared statements and output escaping, and the inclusion of nonce checks. The primary weakness, if any can be inferred, is the complete absence of capability checks, which could be a concern if the plugin were to expand its functionality and handle sensitive operations. However, given the current scope and lack of identified entry points, this is a minor concern.",[],"2026-04-16T11:11:26.256Z",{"wat":190,"direct":199},{"assetPaths":191,"generatorPatterns":194,"scriptPaths":195,"versionParams":196},[192,193],"\u002Fwp-content\u002Fplugins\u002Fcontact-form-to-wp-posts\u002Fassets\u002Fcss\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Fcontact-form-to-wp-posts\u002Fassets\u002Fjs\u002Fscript.js",[],[193],[197,198],"contact-form-to-wp-posts\u002Fassets\u002Fcss\u002Fstyle.css?ver=","contact-form-to-wp-posts\u002Fassets\u002Fjs\u002Fscript.js?ver=",{"cssClasses":200,"htmlComments":202,"htmlAttributes":203,"restEndpoints":207,"jsGlobals":208,"shortcodeOutput":209},[201],"pseudo-hr",[],[204,205,206],"name=\"wpcf7-cf7towp-active\"","name=\"wpcf7-cf7towp-title\"","name=\"wpcf7-cf7towp-content\"",[],[],[],{"error":211,"url":212,"statusCode":213,"statusMessage":214,"message":214},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fcontact-form-to-wp-posts\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":216,"versions":217},2,[218,224],{"version":6,"download_url":26,"svn_tag_url":219,"released_at":29,"has_diff":220,"diff_files_changed":221,"diff_lines":29,"trac_diff_url":222,"vulnerabilities":223,"is_current":211},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcontact-form-to-wp-posts\u002Ftags\u002F0.2\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fcontact-form-to-wp-posts%2Ftags%2F0.1&new_path=%2Fcontact-form-to-wp-posts%2Ftags%2F0.2",[],{"version":225,"download_url":226,"svn_tag_url":227,"released_at":29,"has_diff":220,"diff_files_changed":228,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":229,"is_current":220},"0.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcontact-form-to-wp-posts.0.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fcontact-form-to-wp-posts\u002Ftags\u002F0.1\u002F",[],[]]