LukasApps CAPTCHA tools for Contact Form 7

82 Quality Score

Active Installs

23/30

With 100,000 active installs, the plugin has solid adoption in the CF7 ecosystem but sits well behind the top alternatives on raw install counts.

Update Freshness

25/25

A fresh update on 2026-02-01 and tested against WordPress 6.9.4 signal that the developer is actively keeping the plugin current with core releases.

User Rating

12/15

An 82/100 rating across 48 reviews is respectable, though the small sample size means the score should be read with some caution.

Support Health

8/15

Zero support threads out of zero resolved is a meaningful warning sign: there is no public track record of the developer responding to user issues in the WordPress.org forums.

WP Compatibility

15/15

Tested up to WordPress 6.9.4 with a minimum requirement of 4.1.2, the plugin covers an unusually wide range of WordPress versions and earns a perfect compatibility score.

Scores higher than 88% of indexed plugins

About

Protect Contact Form 7 forms from spam with Google reCAPTCHA v2, reCAPTCHA v3, hCaptcha or Cloudflare Turnstile.

Active Installs 100k+

Rating ★★★★ 4.1/5

Last Updated 2026-09-24 4:42am GMT

Requires WordPress 6.2+

Tested Up To 7.1.2

Security History

3 known vulnerabilities, all patched

1 High 2 Medium

Most recent: September 7, 2026

View details ▸

What It Does

Contact Form 7 Captcha adds bot protection to forms built with Contact Form 7 by letting site owners pick from Google reCAPTCHA v2, Google reCAPTCHA v3, hCaptcha, or Cloudflare Turnstile. It injects the chosen CAPTCHA widget or invisible token into CF7 forms without requiring custom code. The plugin is designed as a single-purpose bridge between CF7 and whichever CAPTCHA provider the site prefers.

Who It's For

This plugin is best for small to mid-sized sites already running Contact Form 7 that need a quick, no-cost way to stop automated form submissions on lead generation, contact, or quote request pages. It suits site owners who want flexibility to switch between CAPTCHA providers without replacing their form plugin or hiring a developer. Agencies and freelancers maintaining multiple CF7-based sites for clients will also find the multi-provider support useful.

Who Should Skip It

If your site does not use Contact Form 7, this plugin is irrelevant, and you should consider a broader anti-spam tool like CleanTalk or hCaptcha for Forms and More instead. Larger sites that need enterprise-grade bot detection, detailed analytics, or dedicated support will likely outgrow this plugin quickly.

The Bottom Line

Contact Form 7 Captcha is a competent, actively maintained bridge plugin that gives CF7 users a rare four-way choice of CAPTCHA providers. Its biggest real-world weakness is the lack of any visible support activity on WordPress.org, so buyers should be comfortable troubleshooting on their own. For a typical small business CF7 site it does the job well, but power users should weigh it against hCaptcha for Forms and More or CleanTalk for stronger ecosystems.

Pick CleanTalk when you need site-wide spam protection beyond just CF7, including comments, registrations, and WooCommerce.

hCaptcha for WP 91/100

Choose hCaptcha for Forms and More if you want a privacy-focused CAPTCHA provider that works across many plugins, not only Contact Form 7.

Simple CAPTCHA with Cloudflare Turnstile 90/100

Go with Simple Cloudflare Turnstile if you have standardized on Cloudflare and want a lightweight, single-provider solution with a strong 89.95 score.

CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 90/100

Consider CF7 Apps if you want a suite of CF7 add-ons including a zero-friction honeypot anti-spam layer with 300,000 installs behind it.

Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] 88/100

Pick Disable Comments only if comment spam is your actual problem rather than form spam, and you want to remove the comment system entirely.