Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms

78 Quality Score

Active Installs

16/30

With roughly 4,000 active installs it is a niche plugin, sitting far below mainstream options like Akismet's 6 million installs, but the popularity score is boosted by consistent relative growth.

Update Freshness

25/25

The plugin was updated on 2025-06-02 and is tested against WordPress 6.8.5, which signals an actively maintained codebase, though the maintenance score is held back by the modest overall activity around the project.

User Rating

14/15

A 98 out of 100 rating across 46 reviews is exceptionally strong and indicates high user satisfaction among those who have tried it.

Support Health

8/15

Only 2 support threads exist and neither is marked resolved, which is a small sample size and a meaningful warning sign for anyone who may need hands-on help.

WP Compatibility

15/15

Compatibility is solid: it supports WordPress 4.8 and up, PHP 5.6 and up, and has been tested on the current 6.8.5 release, covering a very wide range of hosting environments.

Scores higher than 64% of indexed plugins

About

Invisible spam protection for every form, login and checkout. No puzzles, no checkboxes, no lost visitors — a CAPTCHA your users never see.

Active Installs 4k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-24 8:15pm GMT

Requires WordPress 4.8+

Tested Up To 7.1.2

Requires PHP 7.1+

Security History

5 known vulnerabilities, all patched

1 High 4 Medium

Most recent: September 15, 2026

View details ▸

Invisible Anti-Spam & CAPTCHA <= 5.1.0 - Missing Authorization Medium

September 15, 2026 Patched in ["5.1.1"] CVE-2026-91010

Invisible Anti-Spam & CAPTCHA <= 5.1 - Unauthenticated Stored Cross-Site Scripting via 'action' Parameter High

August 14, 2026 Patched in ["5.1.1"] CVE-2026-16145

Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via Pattern JSON Keys/Values Medium

August 14, 2026 Patched in ["5.1.1"] CVE-2026-16146

Invisible Anti-Spam & CAPTCHA <= 5.1 - Authenticated (Editor+) SQL Injection via 'key' Parameter Medium

August 14, 2026 Patched in ["5.1.1"] CVE-2026-16094

Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant <= 4.1.1 - Cross-Site Request Forgery Medium

June 5, 2025 Patched in ["4.1.2"] CVE-2025-49283

What It Does

This plugin adds Google reCAPTCHA (including invisible mode) to WordPress forms to block spam submissions and brute-force login attempts. It is designed to operate in a GDPR-compliant manner, which is the main differentiator promoted by the developer. It works across a wide range of form and login contexts rather than being tied to a single form builder.

Who It's For

It is a good fit for small to mid-sized European sites that need lightweight spam protection and want a reCAPTCHA-based solution that claims GDPR compliance out of the box. Sites running Contact Form 7, WPForms, WooCommerce, or native WordPress comment and login forms will get the most value without configuring per-plugin integrations.

Who Should Skip It

Sites that already rely on Akismet, CleanTalk, Cloudflare Turnstile, or hCaptcha do not need to add another anti-spam layer. Anyone uncomfortable depending on Google services for CAPTCHA should skip this plugin since it is built around reCAPTCHA specifically.

The Bottom Line

This is a focused, well-rated reCAPTCHA plugin that delivers on its core promise of GDPR-oriented spam protection with a tiny footprint. The unresolved support threads and small install base mean you are trusting a niche maintainer, so keep an eye on updates if you adopt it. Overall Quality Score: 64.23/100, with ratings being the standout strength.

Pick Akismet if you primarily need comment and form spam filtering at massive scale and want the most battle-tested solution available.

CleanTalk Anti-Spam. Spam Firewall & Bot protection 92/100

Choose CleanTalk if you want a SaaS-based spam firewall that covers comments, registrations, and forms without requiring visitors to solve a CAPTCHA.

hCaptcha for WP 91/100

Opt for hCaptcha if you want a privacy-first CAPTCHA alternative to Google's reCAPTCHA that still offers broad form coverage.

Simple CAPTCHA with Cloudflare Turnstile 90/100

Choose Cloudflare Turnstile if you want a free, fast, non-Google challenge solution with strong privacy credentials.

CF7 Apps: Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7 90/100

Pick this add-on if you only use Contact Form 7 and prefer an invisible honeypot approach with zero user friction.