How many vulnerabilities does ReCaptcha v2 for Contact Form 7 have?

The audit found 66 findings: 0 critical, 2 high, 61 medium severity.

Should I use ReCaptcha v2 for Contact Form 7?

Based on the latest audit (grade A, risk HIGH), review the 66 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

ReCaptcha v2 for Contact Form 7

Q: Is ReCaptcha v2 for Contact Form 7 secure?

WP HealthKit's independent audit rates ReCaptcha v2 for Contact Form 7 overall risk as HIGH with a report-card grade of A.

v1.5.0WordPress Plugin200K+ installs5.0Audited 109 days ago

HIGH

Total Findings

Security Grade

Active Installs

200K+

Coding Score

100/100

Security Findings

Critical0

High2

Medium61

Low0

Info3

Executive Summary

Is ReCaptcha v2 for Contact Form 7 secure? In WP HealthKit's independent 2026 audit, ReCaptcha v2 for Contact Form 7 received an overall risk of HIGH and a report-card grade of A across 66 findings (0 critical, 2 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

100/100

PHP Compatibility

Requires PHP 8.0

Categories with Findings

PHP CompatibilityPlugin ConflictsType SafetyWordPress CompatibilityHook WiringPerformanceInternationalization

Plugin Info

Active Installs: 200K+
WP.org Rating: 5.0
Requires WP: 4.9+
Tested Up To: 7.0
Requires PHP: false+
Audit Count: 1
Type: plugin

Embed Audit Badge

Show your audit status in your README or website.

[![ReCaptcha v2 for Contact Form 7 security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/wpcf7-recaptcha)](https://wphealthkit.com/directory/wpcf7-recaptcha)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin