Acquired by Rock Lobster Inc. (Takayuki Miyoshi).
Previously owned by Takayuki Miyoshi (takayukister).
New committers from that team's naming convention are expected and will not fire takeover events.
source ↗
Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts).
View raw JSON
{
"slug": "contact-form-7",
"active_installs": 10000000,
"critical_matches": 1,
"high_matches": 0,
"lookback_days": 90,
"sample_threads": [
{
"title": "End of link",
"date": "2026-04-03 00:05:33",
"url": "https://wordpress.org/support/topic/end-of-link/",
"starter": "vadimm5",
"keyword": "hacked"
}
],
"explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}
Accounts with actual commit access to contact-form-7 on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.
Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?