Captcha WordPress Plugins That Need Review

52 indexed plugins

Plugins

52

Active Installs

3m+

Average Score

58

Audited

52

RankPluginScoreErrorsWarningsInstallsAddedUpdatedTop Issue
#1Captcha Them All213003236k+Output is not escaped
#2Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms2249329510k+Text Domain Mismatch
#3CleanTalk Anti-Spam. Spam Firewall & Bot protection248251,079200k+Missing nonce verification
#4CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7241,0341,396300k+Non-prefixed global variable
#5SiteGuard WP Plugin24359350500k+Output is not escaped
#6SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)2523521410k+Database parameter is not escaped
#7WPBruiser {no- Captcha anti-Spam}2564625910k+Non Singular String Literal Domain
#8Wordfence Login Security2524841870k+Output is not escaped
#9reCaptcha by BestWebSoft29474272100k+Text Domain Mismatch
#10Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant302642214k+Non Singular String Literal Text
#11Contact Form Block326477500Non Singular String Literal Domain
#12Human Presence – Stop Form Spam Without ReCaptcha3354651k+Request data is not unslashed
#13Advanced Custom Fields: reCAPTCHA Field3410453800Text Domain Mismatch
#14CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress352010100k+Missing Arg Domain
#15CrowdSec351301192k+Output is not escaped
#16Friendly Captcha for WordPress35192629k+Output is not escaped
#17Give – Cloudflare Turnstile3532600Hidden files included
#18Simple CAPTCHA with Cloudflare Turnstile3582148100k+Output is not escaped
#19Eazy CF Captcha379354500Text Domain Mismatch
#20ReCaptcha Integration for WordPress3760669k+Output is not escaped
#21Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)39284580k+Missing nonce verification
#22SKP WP Admin Login Captcha3977181k+Output is not escaped
#23TomS reCAPTCHA39128256500Missing nonce verification
#24Contact Form 7 Captcha41775100k+Request data is not unslashed
#25hCaptcha for WP421151870k+Exception output is not escaped
#26Mailster Cool Captcha426528400Text Domain Mismatch
#27Uber reCaptcha43129451k+Text Domain Mismatch
#28Contact Form 7 BWP reCAPTCHA Extension489210500Non Singular String Literal Domain
#29Gravity Forms No CAPTCHA reCAPTCHA51301710k+Text Domain Mismatch
#30Affiliates Manager Google reCAPTCHA Integration671810400Request data is not unslashed
#31Simple Login Captcha70201910k+date date
#32Formidable Honeypot74106400Text Domain Mismatch
#33Contact Form 7 Text CAPTCHA7614341k+Non-prefixed global variable
#34Honeypot Plus for Contact Form 777317700Missing nonce verification
#35Hizzle CAPTCHA – Protect your forms from spam80427500Non-prefixed global variable
#36Image Captcha For Gravity Forms802010400Text Domain Mismatch
#37Enable Turnstile (Cloudflare) for Gravity Forms8487700Missing direct file access protection
#38Mailster reCaptcha844151k+Missing nonce verification
#39reCaptcha Add-On for FormCraft854167k+Missing Version
#40Power Captcha reCAPTCHA85471k+Database parameter is not escaped
#41Math Captcha for Elementor Forms861023k+No Explicit Version
#42Captcha by Yandex for Contact Form 7889123k+Text Domain Mismatch
#43Gravity Forms Zero Spam9449100k+trademarked term
#44Login Lockdown & Protection94515100k+Non-prefixed global variable
#45Advanced Google reCAPTCHA97315200k+Non-prefixed global variable
#46Captcha Code971712100k+wp function not compatible with requires wp
#47Easy Spam Filter – Privacy-Friendly CAPTCHA Alternative with Turnstile for Contact Form 7, WPForms, BuddyPress, Elementor972141k+Dynamic hook name
#48Really Simple CAPTCHA9822300k+Non-prefixed constant
#49BotBlocker Security – Firewall & Bot Protection9953k+Non-prefixed constant
#50DS CF7 Math Captcha1001010k+trunk stable tag