Does Validation Muse for Contact Form 7 have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Validation Muse for Contact Form 7 compatible with WordPress 7.0.2?

According to WordPress.org data, Validation Muse for Contact Form 7 1.6.3 has been tested up to WordPress 7.0.2. Check the plugin's changelog for the latest compatibility information.

Is Validation Muse for Contact Form 7 compatible with PHP 8.0+?

Validation Muse for Contact Form 7 requires PHP 8.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Validation Muse for Contact Form 7 updated?

Validation Muse for Contact Form 7 was last updated on Jul 3, 2026. Frequent updates are generally a positive security signal.

What is Validation Muse for Contact Form 7's security score?

Validation Muse for Contact Form 7 has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Validation Muse for Contact Form 7 Security & Risk Analysis

wordpress.org/plugins/validation-muse-for-contact-form-7

Custom validation rules & messages for Contact Form 7 — regex, length, required-if, per field, CF7 6.x SWV-compatible, multilingual.

0 active installs v1.6.3 PHP 8.0+ WP 6.0+ Updated Jul 3, 2026

cf7contact-form-7error-messagemultilingualvalidation

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Validation Muse for Contact Form 7 Safe to Use in 2026?

Generally Safe

Score 100/100

Validation Muse for Contact Form 7 has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The plugin 'validation-muse-for-contact-form-7' v1.4.0 exhibits a generally strong security posture based on the provided static analysis. The code demonstrates good practices by utilizing prepared statements for all SQL queries and properly escaping all output. The absence of file operations and external HTTP requests further minimizes potential attack vectors. Furthermore, the plugin incorporates nonce and capability checks in several areas, indicating a conscious effort to secure its functionality.

Key Concerns

Unprotected AJAX handler

Vulnerabilities

None known

Validation Muse for Contact Form 7 Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Validation Muse for Contact Form 7 Release Timeline

v1.6.3Current

v1.6.2

v1.6.1

v1.6.0

v1.5.0

v1.4.2

v1.4.0

v1.3.0

v1.2.1

v1.2.0

Code Analysis

Analyzed Mar 17, 2026

Validation Muse for Contact Form 7 Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

80 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared2 total queries

Output Escaping

100% escaped80 total outputs

Attack Surface

1 unprotected

Validation Muse for Contact Form 7 Attack Surface

Entry Points1

Unprotected1

AJAX Handlers 1

authwp_ajax_vmcf7_ai_translateincludes\class-vmcf7-loader.php:50

WordPress Hooks 5

actionadmin_enqueue_scriptsincludes\class-vmcf7-loader.php:45

filterwpcf7_editor_panelsincludes\class-vmcf7-loader.php:46

actionwpcf7_save_contact_formincludes\class-vmcf7-loader.php:47

actionadmin_noticesvalidation-muse-for-contact-form-7.php:92

actionplugins_loadedvalidation-muse-for-contact-form-7.php:100

Maintenance & Trust

Validation Muse for Contact Form 7 Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2

Last updatedJul 3, 2026

PHP min version8.0

Downloads634

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Validation Muse for Contact Form 7 Alternatives

Message Popup For Contact Form 7

message-popup-for-contact-form-7

100

Show a beautiful, fully customizable success popup notification on Contact Form 7 submission. Control colors, borders, size, button text, and auto-hid …

1K No CVEs

CF7 Israeli Phone Validation

cf7-israeli-phone-validation

Will work on fields with name 'il_phone', ie. [tel* il_phone placeholder "Israeli Phone"]

40 No CVEs

CF7 Mailgun Domain Validation

cf7-mailgun-domain-validation

Allows email addresses using your site’s Mailgun domain to pass Contact Form 7’s form validation feature.

10 No CVEs

Database Addon for Contact Form 7 – CFDB7

contact-form-cfdb7

Save and manage Contact Form 7 messages. Never lose important data. It is a lightweight contact form 7 database plugin.

600K 7 CVEs

Redirection for Contact Form 7

wpcf7-redirect

Redirect to any page or URL, execute scripts after submission, save data to the database, and unlock additional submission actions for Contact Form 7.

200K 15 CVEs

Developer Profile

Validation Muse for Contact Form 7 Developer Profile

SYMONOV

2 plugins · 0 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Validation Muse for Contact Form 7

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/validation-muse-for-contact-form-7/admin/css/vmcf7-admin.css/wp-content/plugins/validation-muse-for-contact-form-7/admin/js/vmcf7-admin.js

Script Paths

admin/js/vmcf7-admin.js

Version Parameters

validation-muse-for-contact-form-7/admin/css/vmcf7-admin.css?ver=validation-muse-for-contact-form-7/admin/js/vmcf7-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes

vmcf7-tabvmcf7-custom-validation-fieldvmcf7-message-input

HTML Comments

Data Attributes

data-field-namedata-field-typedata-message-type

JS Globals

vmcf7

FAQ