Multifile Upload Field for Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/multifile-upload-field-for-contact-form-7

Multiple files upload field addon for Contact Form 7

5K active installs v1.0.1 PHP + WP 4.3+ Updated Nov 28, 2017
contactcontact-formcontact-form-7-multiple-files-uploadform
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Multifile Upload Field for Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 85/100

Multifile Upload Field for Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "multifile-upload-field-for-contact-form-7" plugin exhibits a generally good security posture based on the provided static analysis. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and a high percentage of properly escaped output are positive indicators. The plugin also doesn't appear to perform external HTTP requests, which often introduce vulnerabilities. However, the lack of any observed nonces or capability checks on any of its entry points is a significant concern, as is the absence of any taint analysis results, which might indicate limited testing or a very small codebase.

Key Concerns

  • No nonce checks on any entry points
  • No capability checks on any entry points
  • Zero taint flows analyzed
Vulnerabilities
None known

Multifile Upload Field for Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Multifile Upload Field for Contact Form 7 Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
58 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
0
Bundled Libraries
0

Output Escaping

94% escaped62 total outputs
Attack Surface

Multifile Upload Field for Contact Form 7 Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionwpcf7_initmultifile-for-contact-form-7.php:19
filterwpcf7_form_enctypemultifile-for-contact-form-7.php:79
filterwpcf7_validate_multifilemultifile-for-contact-form-7.php:94
filterwpcf7_validate_multifile*multifile-for-contact-form-7.php:95
filterwpcf7_messagesmultifile-for-contact-form-7.php:258
actionwpcf7_admin_initmultifile-for-contact-form-7.php:292
actionwpcf7_admin_noticesmultifile-for-contact-form-7.php:387
Maintenance & Trust

Multifile Upload Field for Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested4.7.32
Last updatedNov 28, 2017
PHP min version
Downloads49K

Community Trust

Rating66/100
Number of ratings10
Active installs5K
Developer Profile

Multifile Upload Field for Contact Form 7 Developer Profile

Nitroweb

3 plugins · 5K total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Multifile Upload Field for Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/multifile-upload-field-for-contact-form-7/css/styles.css/wp-content/plugins/multifile-upload-field-for-contact-form-7/js/scripts.js
Script Paths
/wp-content/plugins/multifile-upload-field-for-contact-form-7/js/scripts.js
Version Parameters
multifile-upload-field-for-contact-form-7/css/styles.css?ver=multifile-upload-field-for-contact-form-7/js/scripts.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpcf7-form-control-wrap
Data Attributes
accept_wildcardlimit
Shortcode Output
<span class="wpcf7-form-control-wrap<input type="file" name="
FAQ

Frequently Asked Questions about Multifile Upload Field for Contact Form 7