Top Spam Protection WordPress Plugins
25 indexed plugins
Plugins
25
Active Installs
2m+
Average Score
60
Audited
25
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | CryptX | 100 | 2 | 10k+ | Non-prefixed function | |||
| #2 | Dam Spam | 100 | 1 | 3k+ | unexpected markdown file | |||
| #3 | Hostbox Google reCAPTCHA | 99 | 1 | 7 | 600 | Non-prefixed global variable | ||
| #4 | ActiveLayer Anti-Spam: Spam Protection for Forms & Comments | 95 | 4 | 9k+ | Database parameter is not escaped | |||
| #5 | Stop Spammers Classic | 94 | 185 | 1 | 30k+ | wp function not compatible with requires wp | ||
| #6 | Simple Honeypot for Contact Form 7 | 91 | 1 | 6 | 500 | Missing nonce verification | ||
| #7 | FluentComments – AJAX Comments, Anti-Spam & Comment Email Notifications | 85 | 2 | 8 | 700 | Missing nonce verification | ||
| #8 | Enable Turnstile (Cloudflare) for Gravity Forms | 84 | 8 | 7 | 900 | Missing direct file access protection | ||
| #9 | Antispam Bee | 81 | 1 | 38 | 700k+ | Nonce verification recommended | ||
| #10 | Honeypot Anti-Spam | 78 | 5 | 7 | 10k+ | Missing nonce verification | ||
| #11 | Contact Form 7 Text CAPTCHA | 76 | 14 | 34 | 1k+ | Non-prefixed global variable | ||
| #12 | CHEQ Essentials | 56 | 14 | 49 | 600 | Request data is not unslashed | ||
| #13 | Anti-Spam Protection – No API Key, GDPR Friendly | 49 | 2 | 106 | 1k+ | Direct Query | ||
| #14 | Proxy & VPN Blocker | 44 | 74 | 1k+ | Nonce verification recommended | |||
| #15 | Uber reCaptcha | 43 | 129 | 45 | 1k+ | Text Domain Mismatch | ||
| #16 | Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms | 41 | 11 | 294 | 4k+ | Direct Query | ||
| #17 | WP Armour – Honeypot Anti Spam | 40 | 54 | 66 | 400k+ | Missing nonce verification | ||
| #18 | Universal Honey Pot | 40 | 23 | 94 | 1k+ | Missing nonce verification | ||
| #19 | Custom Contact Forms | 38 | 22 | 116 | 6k+ | Missing nonce verification | ||
| #20 | mosparo Integration | 35 | 113 | 309 | 1k+ | Missing nonce verification | ||
| #21 | Titan Anti-spam & Security – Brute Force Protection, 2FA & Spam Filter | 31 | 57 | 196 | 50k+ | Nonce verification recommended | ||
| #22 | SilentShield – Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce) | 26 | 245 | 245 | 10k+ | Database parameter is not escaped | ||
| #23 | Disable Comments & Delete All Comments | 25 | 502 | 184 | 9k+ | Output is not escaped | ||
| #24 | CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 | 24 | 1,053 | 1,397 | 300k+ | Non-prefixed global variable | ||
| #25 | Captcha by BestWebSoft – Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms | 22 | 493 | 295 | 10k+ | Text Domain Mismatch |
