Schwarttzy

reCAPTCHA for Jetpack enhances your WordPress site’s security by integrating Google reCAPTCHA v3—an invisible, score-based spam filter—with Jetpack contact forms, comments, and WooCommerce registration. Designed for block-based themes (e.g., Full Site Editing), it uses behavioral scoring to block bots seamlessly. Key features:
<ul>
<li>Invisible Protection: Analyzes user behavior (e.g., mouse movements, session duration) to assign a score (0.0–1.0) for contact forms, comments, and WooCommerce registration.</li>
<li>Customizable Threshold: Set a score threshold (default 0.5) to balance spam blocking and user access for all forms.</li>
<li>Conditional Loading: Control where reCAPTCHA loads: on all pages, specific page types (e.g., front page, single posts), or specific slugs. Improves performance by skipping unnecessary pages.</li>
<li>Debug Mode: Toggle console.log output for debugging purposes; disable for production to reduce browser console clutter.</li>
<li>Skip for Logged-in Users (new in 1.17): New checkbox to bypass reCAPTCHA entirely for any logged-in user (admins, customers, members, etc.). Perfect for membership sites where only guests need protection.</li>
<li>Automatic Spam Handling:
<ul>
<li>Form submissions with scores below the threshold are reliably blocked and moved to the Jetpack Feedback CPT spam folder in the admin interface.</li>
<li>Comments with scores below the threshold are automatically moved to the spam folder without triggering approval emails.</li>
<li>New in 1.13 / 1.14: Blocks bot account creation on WooCommerce registration form (including the My Account page).</li>
</ul>
</li>
<li>Submission Stats: Tracks total submissions and logs the last 20 submissions (forms, comments, registration) with scores and status (success/spam) in a streamlined manner.</li>
<li>Jetpack Integration: Requires Jetpack for contact form and comment protection, fully compatible with block-based forms and Jetpack forums.</li>
<li>Email Enhancements: Appends reCAPTCHA scores to form submission emails and comment notification/moderation emails for transparency.</li>
<li>Admin Feedback: Displays reCAPTCHA scores to admins on form success pages and logs detailed debug info for failed submissions.</li>
</ul>
Perfect for modern WordPress sites, this plugin provides robust spam prevention with insightful analytics, ensuring a seamless user experience while keeping your forms, comments, and registrations spam-free.
<h3>External Services</h3>
This plugin uses Google reCAPTCHA v3, a service provided by Google to verify user interactions and prevent spam on contact forms, comments, and WooCommerce registration.
<ul>
<li>Purpose: Google reCAPTCHA v3 analyzes user behavior to assign a score (0.0–1.0) indicating the likelihood of a user being a bot. This score determines whether form submissions, comments, or registrations are blocked (moved to spam).</li>
<li>Data Sent: When a user submits a form, comment, or registers, the plugin sends a reCAPTCHA token to Google’s API (<code>https://www.google.com/recaptcha/api/siteverify</code>). The request includes only the secret key and response token.</li>
<li>When Data is Sent: Data is sent to Google’s API on every Jetpack contact form, comment, or WooCommerce registration submission.</li>
<li>Service Provider: Google LLC.</li>
<li>Terms of Service: https://www.google.com/recaptcha/about/</li>
<li>Privacy Policy: https://policies.google.com/privacy</li>
</ul>
Users must agree to Google’s terms of service when setting up reCAPTCHA keys. No user consent is required for reCAPTCHA v3, as it operates invisibly without challenges.
<h3>License</h3>
This plugin is licensed under the GPLv2 or later. See https://www.gnu.org/licenses/gpl-2.0.html for details.

reCAPTCHA V3 for Jetpack


reCAPTCHA V3 for Jetpack is a game-changer for my website. It seamlessly integrates Google’s reCAPTCHA V3 with Jetpack contact forms, blocking spam without annoying users with challenges. Setup was straightforward, and the plugin is lightweight with no noticeable performance impact. Highly recommend for anyone using Jetpack!


Excellent Spam Protection for Jetpack Forms!

Adds Google reCAPTCHA v3 to Jetpack contact forms, comments, and WooCommerce registration to prevent spam, with stats and spam folder handling.

Pascal CESCATO

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.
Features:
<ul>
<li>Three security modes: Full Disable, Guest Disable, or Selective Blocking</li>
<li>Blocks dangerous methods: system.multicall, pingback.ping, and more</li>
<li>Compatible with Jetpack and WooCommerce</li>
<li>Optional user enumeration blocking</li>
<li>Attack logging for monitoring</li>
<li>Zero configuration required – works out of the box</li>
<li>Clean, intuitive admin interface</li>
</ul>

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

reCAPTCHA V3 for Jetpack vs Stop XML-RPC Attacks