Custom Validation for CF7 Security & Risk Analysis

wordpress.org/plugins/custom-validation-for-cf7

Advanced validation for Contact Form 7: block URLs, validate phone and email, with admin settings.

20 active installs v1.10 PHP 7.2+ WP 5.2+ Updated Nov 21, 2025
block-urlcontact-form-7-validationphone-and-emailsecurityspam
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Custom Validation for CF7 Safe to Use in 2026?

Generally Safe

Score 100/100

Custom Validation for CF7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The 'custom-validation-for-cf7' plugin version 1.10 demonstrates a strong security posture based on the provided static analysis. The absence of direct entry points like AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces the attack surface. Furthermore, the code analysis reveals no dangerous functions, all SQL queries utilize prepared statements, and file operations are absent. The plugin also shows good practices with nonce and capability checks in place, and a high percentage of output escaping.

Key Concerns

  • Output escaping concern
Vulnerabilities
None known

Custom Validation for CF7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Custom Validation for CF7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
27 escaped
Nonce Checks
3
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

87% escaped31 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
cf7vp_settings_tab (custom-validation-for-cf7.php:75)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Custom Validation for CF7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionadmin_menucustom-validation-for-cf7.php:27
filterwpcf7_validate_telcustom-validation-for-cf7.php:176
filterwpcf7_validate_tel*custom-validation-for-cf7.php:177
filterwpcf7_validate_emailcustom-validation-for-cf7.php:210
filterwpcf7_validate_email*custom-validation-for-cf7.php:211
filterwpcf7_validatecustom-validation-for-cf7.php:234
actionwpcf7_form_hidden_fieldscustom-validation-for-cf7.php:237
filterwpcf7_validate_textcustom-validation-for-cf7.php:290
filterwpcf7_validate_text*custom-validation-for-cf7.php:291
Maintenance & Trust

Custom Validation for CF7 Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 21, 2025
PHP min version7.2
Downloads308

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

Custom Validation for CF7 Developer Profile

MOMO Media

1 plugin · 20 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Custom Validation for CF7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/custom-validation-for-cf7/css/cvcf7-admin-style.css/wp-content/plugins/custom-validation-for-cf7/js/cvcf7-admin-script.js
Version Parameters
custom-validation-for-cf7/css/cvcf7-admin-style.css?ver=custom-validation-for-cf7/js/cvcf7-admin-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
cvcf7-admin-settings
Data Attributes
data-cf7vp-phonedata-cf7vp-emaildata-cf7vp-urlblockdata-cf7vp-phone-digits
JS Globals
cf7vp_vars
FAQ

Frequently Asked Questions about Custom Validation for CF7