Contact Me – Very Simple Contact Form Security & Risk Analysis

wordpress.org/plugins/contact-me-very-simple-contact-form

Contact Me is a very simple contact form with uploading file option;

0 active installs v0.0.3 PHP 5.2.4+ WP 4.9+ Updated Jun 3, 2018
contactemailformsimpleupload-file
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Contact Me – Very Simple Contact Form Safe to Use in 2026?

Generally Safe

Score 85/100

Contact Me – Very Simple Contact Form has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7yr ago
Risk Assessment

The "contact-me-very-simple-contact-form" plugin version 0.0.3 exhibits a generally good security posture with several positive indicators. The absence of any known CVEs and the robust use of prepared statements for SQL queries suggest a proactive approach to security in the plugin's development. Additionally, the presence of nonce and capability checks indicates an understanding of WordPress security best practices for protecting against common attacks.

Key Concerns

  • Unsanitized paths in taint analysis
  • Output escaping not fully implemented
Vulnerabilities
None known

Contact Me – Very Simple Contact Form Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Contact Me – Very Simple Contact Form Release Timeline

v0.0.3Current
v0.0.2
v0.0.1
Code Analysis
Analyzed Mar 17, 2026

Contact Me – Very Simple Contact Form Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
5
14 escaped
Nonce Checks
2
Capability Checks
1
File Operations
2
External Requests
0
Bundled Libraries
0

Output Escaping

74% escaped19 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

2 flows1 with unsanitized paths
vvcf_html_form_code (vvcf-contact-form.php:39)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Contact Me – Very Simple Contact Form Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[vv-contact-form] vvcf-contact-form.php:225
WordPress Hooks 6
actionadmin_enqueue_scriptsvvcf-contact-form.php:27
actionwp_enqueue_scriptsvvcf-contact-form.php:35
actioninitvvcf-contact-form.php:84
actionadmin_menuvvcf-contact-form.php:229
actionadmin_initvvcf-contact-form.php:241
actioninitvvcf-contact-me-options.php:40
Maintenance & Trust

Contact Me – Very Simple Contact Form Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedJun 3, 2018
PHP min version5.2.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Contact Me – Very Simple Contact Form Developer Profile

rorinka

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Contact Me – Very Simple Contact Form

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/contact-me-very-simple-contact-form/styles/admin-style.css/wp-content/plugins/contact-me-very-simple-contact-form/styles/style.css
Version Parameters
contact-me-very-simple-contact-form/styles/admin-style.css?ver=contact-me-very-simple-contact-form/styles/style.css?ver=

HTML / DOM Fingerprints

CSS Classes
attachment-formvvcf-hidevvcf-errors
Data Attributes
name="vv-nonce1"
Shortcode Output
<form action=" method="post" enctype="multipart/form-data" class="attachment-form"><input type="text" name="namep"<input type="email" name="email"
FAQ

Frequently Asked Questions about Contact Me – Very Simple Contact Form