We don't like outright banning certain WordPress plugins on our server, but 'Contact Form 7' - a plugin widely used by millions - is riddled with vulnerabilities, and is is constantly the subject of exploits. One of our clients had it installed, then was a few days late with an update, and it compromised his entire website.
Our form system is the most powerful is the finance (and and other) industry, so there's absolutely no reason to use it. In this case, it was installed by a third party.
If you have a 'developer' install CF7, it's a sign that they shouldn't be allowed to touch your digital assets - it's a clear sign of mediocrity.
If CF7 is currently installed on your website (very unlikely), it will be removed within 48 hours.
