WP Manifestindependent plugin directory
manifest / forms / cf7-prevent-spam

CF7 Advanced Anti-Spam Shield WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

A lightweight and powerful WordPress plugin designed to protect Contact Form 7 (CF7) forms from spam submissions, bots, and fake enquiries without affecting real users.

★ 0stars
5release downloads
v3.4.2latest · 6mo ago

Install

Download cf7-prevent-spam.zip From the v3.4.2 release on GitHub, Apr 23, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/davsong01/cf7-prevent-spam/releases/download/v3.4.2/cf7-prevent-spam.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

CF7 Prevent Spam Plugin

A lightweight and powerful WordPress plugin designed to protect Contact Form 7 (CF7) forms from spam submissions, bots, and fake enquiries without affecting real users.


🚀 Overview

CF7 Prevent Spam enhances your Contact Form 7 forms with intelligent spam protection layers. It filters out unwanted submissions using smart detection rules while keeping the user experience smooth for genuine visitors.

The plugin is built for performance, simplicity, and reliability.


✨ Features

  • Smart spam detection for Contact Form 7
  • Bot and automated submission protection
  • Keyword-based spam filtering
  • Blacklist and whitelist support
  • Real-time form validation
  • CFDB7 integration for form data tracking
  • Admin dashboard for spam monitoring
  • Spam logs and activity tracking
  • Lightweight and fast performance
  • Works without affecting genuine submissions

🧠 How It Works

  1. User submits a CF7 form

  2. Plugin analyzes submission in real-time

  3. It checks for:

    • Suspicious keywords
    • Bot-like behavior
    • Blacklisted patterns
    • Invalid or spam-like inputs
  4. If clean → form is submitted normally

  5. If spam → submission is blocked and logged


📊 Admin Features

The plugin adds an admin interface where you can:

  • View spam logs
  • Manage blacklist keywords
  • Manage whitelist entries
  • Monitor blocked submissions
  • Adjust filtering sensitivity

🔒 Security Layers

  • Input sanitization and validation
  • Honeypot-style bot detection (optional logic)
  • Keyword filtering engine
  • Submission pattern analysis
  • Protection against form flooding

⚙️ Installation

  1. Download or clone the plugin

  2. Upload to:

    wp-content/plugins/
  3. Activate from WordPress dashboard

  4. Ensure Contact Form 7 is installed

  5. Configure settings under plugin menu


🧪 Compatibility

  • WordPress 5.8+
  • PHP 7.4+
  • Contact Form 7 (latest version)
  • CFDB7 (optional integration)

🎯 Use Cases

  • Business websites
  • School admission forms
  • Contact pages
  • Lead generation forms
  • Service inquiry forms
  • E-commerce contact forms

🚧 Future Improvements (Optional Roadmap)

  • AI-based spam detection
  • IP reputation blocking
  • reCAPTCHA integration
  • Country-based filtering
  • Advanced analytics dashboard
  • Email alert system for spam attempts

📌 Notes

  • Plugin works silently in the background
  • No impact on form speed for real users
  • Designed to reduce spam without adding friction
  • Fully compatible with standard CF7 workflows

👨‍💻 Author

Custom-built WordPress plugin focused on improving form security and lead quality for Contact Form 7 websites.


📄 License

Private/custom use license — not for redistribution without permission.

Releases

4 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v3.4.2 latest
Apr 23, 2026 6mo ago
cf7-prevent-spam.zip
3
Apr 23, 2026 6mo ago
cf7-prevent-spam.zip
1
Apr 23, 2026 6mo ago
cf7-prevent-spam.zip
1
Apr 23, 2026 6mo ago
tag only
—
A grade

Security

CF7 Advanced Anti-Spam Shield 3.4.2 · audited by WP Registry

No security issues found.

Audited release
3.4.2
Findings
none
Worst severity
—
Content hash
30277901a8e99d70c55cfd6d…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.