Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR)

84 Quality Score

Active Installs

22/30

With 80,000 active installs, it has solid reach within its niche form-builder category, though it is dwarfed by general anti-spam plugins.

Update Freshness

25/25

It was updated on December 10, 2025, and is tested against WordPress 6.9.4, which signals active and current maintenance.

User Rating

14/15

A 94 out of 100 rating from 49 reviews is a strong score, though the small review pool means the result should be read with some caution.

Support Health

8/15

There is only 1 support thread in total with a 0.0% resolution rate, which is a meaningful weakness given how thin the support history is.

WP Compatibility

15/15

It supports WordPress 4.7 and up on PHP 7.0 and is tested with the latest 6.9.4 release, giving it a wide and current compatibility footprint.

Scores higher than 93% of indexed plugins

About

Adds an Image CAPTCHA to Contact Form 7 and WPForms, GDPR ready, perfect WPForms or Contact Form 7 Spam Protection Image CAPTCHA, adds a honeypot

Active Installs 80k+

Rating ★★★★½ 4.7/5

Last Updated 2026-08-24 8:36am GMT

Requires WordPress 4.7+

Tested Up To 7.1

Requires PHP 7.0+

✓ No known vulnerabilities

What It Does

This plugin adds an image-based CAPTCHA challenge to forms built with Contact Form 7 and WPForms, requiring visitors to identify and select specific images before they can submit. It also includes a honeypot field as a secondary spam layer and is configured to comply with GDPR by not storing personal data from the CAPTCHA interaction.

Who It's For

This plugin is best suited for small to mid-sized businesses running Contact Form 7 or WPForms who need visual, image-based spam protection rather than text CAPTCHAs or checkbox puzzles. It works well for law firms, healthcare practices, real estate agencies, and other professional sites where a familiar visual challenge is preferable for older or non-technical visitors.

Who Should Skip It

Sites that do not use Contact Form 7 or WPForms will gain no benefit, since the plugin is tightly scoped to those two form builders. Operators who prefer invisible spam filtering or have already deployed a site-wide solution like Akismet or CleanTalk should also skip this to avoid redundant CAPTCHA prompts.

The Bottom Line

With a Quality Score of 81.88 out of 100, 80,000 active installs, and a 94 out of 100 user rating, this plugin is a competent, well-maintained choice for sites using Contact Form 7 or WPForms that specifically want image-based spam protection with GDPR considerations. The standout concern is the support track record: only 1 thread logged and a 0.0% resolution rate, so buyers who value responsive help should weigh that carefully before committing.

Choose Akismet if you want invisible, site-wide spam filtering across comments, contact forms, and registrations without any user-facing challenge at all.

GDPR Cookie Compliance 93/100

Pick this only if your actual gap is cookie consent and cookie policy compliance, not form spam, since it does not address CAPTCHA needs.

Complianz

Opt for Complianz when you need a full privacy, cookie consent, and consent logging suite rather than a form-level CAPTCHA.

CleanTalk Anti-Spam 92/100

Choose CleanTalk if you want a paid, fully managed anti-spam firewall covering forms, comments, and registrations without adding any user interaction.

Matomo Analytics 91/100

Matomo is a privacy-focused analytics tool and is not a substitute for CAPTCHA, so consider it only alongside, not instead of, a spam protection layer.