Contact Form 7

{
    "slug": "contact-form-7",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "Upgrade",
            "kind": "ioc:changelog_phrase",
            "file": "readme.txt",
            "line": 121,
            "snippet": "== Upgrade Notice ==",
            "confidence": "low"
        }
    ],
    "triage_note_2026_05_03": "contact-form-7: single Upgrade hit on standard \"== Upgrade Notice ==\" readme header. CF7 is well-known plugin."
}

{
    "slug": "contact-form-7",
    "active_installs": 10000000,
    "critical_matches": 1,
    "high_matches": 0,
    "lookback_days": 90,
    "sample_threads": [
        {
            "title": "End of link",
            "date": "2026-04-03 00:05:33",
            "url": "https://wordpress.org/support/topic/end-of-link/",
            "starter": "vadimm5",
            "keyword": "hacked"
        }
    ],
    "explanation": "Cluster of support-forum threads in the last 90 days containing user-reported attack vocabulary. Critical when any thread mentions explicit compromise terms (hacked / backdoor / admin user added); high when two or more mention symptom-class terms (redirect to spam / vendor alerts)."
}

{
    "slug": "contact-form-7",
    "author_slug": "rocklobsterinc",
    "author_display_name": "Rock Lobster Inc.",
    "author_employer": null,
    "author_member_since": "2025-09-17",
    "earliest_plugin_commit": "2017-07-30 15:36:19",
    "plugin_age_at_author_join": 2970,
    "author_age_now_days": 218,
    "prior_committers": [
        "takayukister"
    ],
    "active_installs": 10000000
}