[your-email] ! Unsafe email config is used without sufficient protection.
that warning is not about your message text 👍
It’s a Contact Form 7 security warning and very common. Here’s what it means and how to fix it properly.
Table of Contents:
❗ Why you’re seeing this warning
You have this in Mail (2) → To:
[your-email]
CF7 flags this as unsafe because emails are being sent directly to user-input email addresses without verification. This can be abused for spam if not protected.
CORRECT & SAFE WAY (Recommended)
Step 1: Keep To as [your-email]
That’s fine — but you must add Additional Headers.
Step 2: Add this in Additional Headers
Paste exactly this:
Reply-To: [your-email]
âś” This tells CF7 the email is intentional
âś” Warning usually disappears
âś” Improves email deliverability
BEST PRACTICE SETUP (Industry Standard)
Mail (2) settings should be:
To
[your-email]
From
SEO Tool King <noreply@seotoolking.com>
Additional Headers
Reply-To: noreply@seotoolking.com
👉 This makes it clear the email is system-generated and safe.
EXTRA STRONG FIX (If warning still shows)
Enable one of these:
- Contact Form 7 → reCAPTCHA
- Or use Flamingo plugin
- Or install an SMTP plugin (VERY recommended)
Best SMTP plugins:
- WP Mail SMTP
- FluentSMTP
- Post SMTP Mailer
SMTP = no warnings + emails won’t land in spam.
Quick Fix
Add this line and you’re good:
Reply-To: [your-email]