shawfactor

Why should your users prove that they’re humans by filling out captchas? Let bots prove they’re not bots with the <a href="http://lhero.org/plugins/lh-zero-spam/" rel="nofollow ugc">LH Zero Spam plugin</a>.
LH Zero Spam blocks registration spam and spam in comments automatically without any config or setup. Zero Spam was initially built based on the work by <a href="http://davidwalsh.name/wordpress-comment-spam" rel="nofollow ugc">David Walsh</a>, but enhanced with simpler code base and unobtrusive JavaScript.
Major features in LH Zero Spam include:
<ul>
<li>No captcha, because spam is not users’ problem</li>
<li>No moderation queues, because spam is not administrators’ problem</li>
<li>Blocks spam registrations & comments with the use of JavaScript</li>
<li>Blocks buddypress spam registrations with the use of JavaScript</li>
<li>Blocks woocommerce spam orders with the use of JavaScript</li>
</ul>
Like this plugin? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/lh-zero-spam/" rel="ugc">leaving a 5-star review</a>.
Love this plugin or want to help the LocalHero Project? Please consider <a href="https://lhero.org/portfolio/lh-zero-spam/" rel="nofollow ugc">making a donation</a>.

LH Zero Spam

The plugin itself works perfectly and if you like lightweight unobtrusive solutions it is the way to go



Ben Marshalls commenty is unhelpful

Zero Spam makes blocking spam comments and registrations easy.

tornevall

Tornevall Networks DNSBL and FraudBL protection for WordPress. The plugin helps block comment activity, account registrations and other unwanted submissions from addresses flagged by Tornevall Networks DNSBL and FraudBL.
FraudBL is part of the protection layer used by the plugin and is available at <a href="https://www.fraudbl.org/" rel="nofollow ugc">fraudbl.org</a>. For general discovery, broader search terms like fraud, blacklist, comment spam and user registration are usually easier to find than niche technical acronyms alone.
The plugin is intended to provide a lightweight anti-spam and anti-abuse layer for WordPress, with support for local caching to reduce repeated lookups and unnecessary load against blacklist services.
Current admin features include manual DNS lookup tools, self-check tools, visitor statistics, safe IP whitelisting, frontend dry-run support for administrators, Cloudflare Turnstile for comments, DNSBL plus Turnstile protection for new WordPress account registrations, and a separate opt-in Turnstile toggle for the public delisting/removal flow. Tools integration now uses one visible DNSBL / Tools API token field in the plugin UI. The live Check token permissions flow always asks Tools directly, warns clearly when the token exists on the other Tools environment (<code>tools.tornevall.com</code> vs <code>tools.tornevall.net</code>), and reports the effective DNSBL permissions for the configured token. Active admin-owned Tools tokens are shown as having automatic DNSBL access through the same <code>X-Dnsbl-Token</code> transport. The plugin now also warns on the WordPress dashboard and settings page when the current token cannot perform live delete / delist operations yet, with a direct link to the active Tools access page. The token status area shows current add/delete/update capability instead of only saying that a token exists, and delisting-page controls stay read-only until delete / delist permission has been confirmed. Internal delist slug routing now uses a dedicated rewrite/query-var path and refreshes rewrite rules on activation and slug changes to avoid <code>/delist</code> 404 cases. The managed public delist page now runs as a checker-style IP-only flow (checks listing first, then submits delist), while custom shortcode pages still support the broader permission-aware operations. The plugin also ships a shortcode delisting/removal form (<code>[dnsbl_removal_form]</code>) with AJAX backend proxy and optional API dry-run acknowledgement, plus a built-in primary removal-page template that is only activated when the configured token has live delete permission. Advanced CIDR delist now follows the delegated Tools guardrail <code>delete_min_cidr_prefix</code>, so non-admin tokens can be limited to <code>/25</code>..<code>/32</code>, <code>/26</code>..<code>/32</code>, or <code>/32</code> only instead of always exposing <code>/24</code>. Tools-backed DNSBL write/check calls now also include additive site identity metadata so Tools-side delist audits can show which WordPress site submitted the request. The admin UI also now shows a small dismissible reminder with a direct link to the WordPress.org review form.
Report issues and feedback: <a href="https://github.com/Tornevall/tornevall-wp-dnsbl/issues" rel="nofollow ugc">GitHub issues</a> 
Plugin URL: <a href="https://wordpress.org/plugins/tornevall-networks-dnsbl-implementation/" rel="ugc">WordPress.org plugin page</a> 
Documentation: <a href="https://tools.tornevall.net/docs/dnsbl-api" rel="nofollow ugc">DNSBL API documentation</a>
<h4>Support and feedback</h4>
Bug reports and feedback can currently be submitted via <a href="https://github.com/Tornevall/tornevall-wp-dnsbl/issues" rel="nofollow ugc">GitHub issues</a>.
Full Documentation: <a href="https://tools.tornevall.net/docs/dnsbl-api" rel="nofollow ugc">DNSBL API documentation</a>
Translations can be contributed via <a href="https://translate.wordpress.org/projects/wp-plugins/tornevall-networks-dnsbl-implementation" rel="nofollow ugc">translate.wordpress.org</a>.

Tornevall Networks DNSBL Implementation

Tornevall Networks DNSBL implementation with FraudBL support for WordPress

LH Zero Spam vs Tornevall Networks DNSBL Implementation