{"active_installs":200000,"added":{"timestamp":1337299200,"timezone":"UTC"},"author":"CleanTalk Inc","author_profile":{"url":"https://profiles.wordpress.org/cleantalk/","alt":"CleanTalk Inc"},"banners":[{"type":"high","url":"f"},{"type":"low","url":"https://ps.w.org/cleantalk-spam-protect/assets/banner-772x250.png?rev=3239606"}],"changelog":"

6.68 13.11.2025

New. Integration. Ultimate affiliate plugin (Codecanyon).
\nNew. Integration. Gwolle Guestbook integration implemented.
\nUpd. Integrations. Improved capability with perfmatters.
\nUpd. Settings. Improved UX.
\nUpd. Email Encoder. Try to decode in both ways ssl/str_base.
\nFix. ContactEncoder. Editing duplicate pages due to buffer interception.
\nFix. Code. Unit text TestRequirementsChecker refactored.
\nFix. Integration. WPForo. Catch email and nickname via native WPF object. Get message from input.
\nFix. Integrations. Nex-forms POST clearance from service fields after check.
\nFix. Protection by fake button. Sender.net forms ignored, preparing for the next iteration.
\nFix. Integrations. GiveWP. Partially protected Give REST submission.
\nCode. Unused code removed.
\nMod. TRP. TRP edits, duplicate the cleantalk_allowed_moderation option and move it to settings.

6.67 30.10.2025

New. AdminBanner. Separation of banners about an empty and invalid key
\nNew. AdminBanner. Editing logic for a banner about an incorrect key
\nFix. ContactEncoder. Revert svg content.
\nFix. Integrations. Prevent spam requests to third-party services.
\nFix. Integrations. Added Beaver Builder.
\nFix. Integrations. Improved gathering data for fluentbooking pro.
\nFix. OptimizePress. Registration process protected.
\nFix. Integration. WP Booking System integration fixed.
\nNew. Integration. Doctor Plus theme registration and login.
\nFix. Integration. WPForms. Fixed missed request on non-emtpty WPForm form errors array.
\nFix. Hide website field. Forced condition to replace via honeypot.
\nUpd. Server Requirements Checker. Added curl_multi_exec to the check-list.
\nNew. Email exists check. Implemented for CF7. (#669)
\nUpd. Settings. Updated access key link parameters for improved registration process.
\nFix. Settings. Typo (system requirements) fixed.
\nFix. Settings. Complete deactivation fixed.
\nFix. State. Default fw_stats fixed.
\nFix. SFW. SFW updating (process exclusions) fixed.
\nFix. Exclusion. Newsletter Automation. Skip test newsletter check.
\nFix. Integration. btQuoteBooking form params gathering fixed.
\nFix. Integration. WP Mailer Lite. Fixed exclusion.

6.66 16.10.2025

Fix. Remote calls. Debug RC now hide sensitive data.
\nFix. TRP. Show TRP for admins and editors.
\nFix. TRP. Twenty Twenty-Five theme support added.
\nFix. Settings. Activator fixed.
\nNew. Summary and statistics. Support user action moved.
\nFix. Integrations. Skip service requests for checkout process.
\nFix. FW. Improved rules to update personal tables.
\nFix. Integrations. Updated statement to skip woo-mailerlite service requests.
\nFix. Integrations. Fixed statement for cwginstock.
\nFix. Integrations. Improved statement to intruding to checkout request.

6.65 02.10.2025

Fix. Code. Pluggable exclusions logic fixed.
\nFix. Common. Alt cookies getting fixed.
\nFix. ContactEncoder. Skip SVG content.
\nFix. Integration. Added WPCommunity login to request exclusions.
\nFix. Integration. Fluent Booking Pro integration fixed – exclude requests from general contact forms checking.
\nFix. Integration. Skip BuddyBoss login form.
\nFix. Integration. WooCommerce mark spam orders fixed.
\nFix. Integration. WP Booking System integration fixed – support pro version.
\nFix. Integrations. Added rules to skip woocommerce service request.
\nNew. CheckEmailExist. Support for Registration Form.
\nNew. CheckEmailExist. Support for Woocommerce checkout form.
\nNew. Integration. Added NEXForms integration.
\nNew. Integration. Indeed Coming Soon integration implemented.
\nNew. Summary and statistics. Temporary support user creation implemented.
\nUpd. CheckEmailExist. Improve support for Woocommerce checkout form and update option description.
\nUpd. Search form. Added CleanTalk unique sign for native form.
\nUpd. UsersChecker. Include first name, last name, and nickname in csv report of user data output.

6.64 18.09.2025

New. Integration. Integration with WPFunnels.
\nNew. CheckEmailExist. Support for Registration Form.
\nNew. Integration. LifterLMS (registration) protection implemented.
\nNew. CheckEmailExist. Support for Fluent Forms.
\nUpd. Request parameters. Calculate no submittime if bot detector enabled.
\nUpd. Bot detector gathering. Changed URL of wrapper to fd.cleantalk.org
\nMod. Integration. Unset visible fields.
\nFix. Integration. Happy Forms protection fixed.
\nFix. Integration. HabSpot external form (transparent div) protection fixed.
\nFix. Integration. Back-In-Stock ajax catching detect fixed.
\nFix. Integration. Back-in-stock-notifier fixed event token transport.
\nFix. External forms. Protection by cover fixed.
\nFix. Code. Undefined object botDetectorLocalStorage using removed.

6.63 04.09.2025

New. Integrations. BuddyPress App REST API protection.
\nNew. Integration. WooCommerce Wholesale Lead Capture registration protection implemented.
\nFix. Integration. SiteReviews integration fixed.
\nFix. Integration. Connecting the required js bundle and bot detector for Fluent Booking.
\nFix. JS. Passing the original context to an anonymous function
\nFix. Integration. FluentBooking integration fixed.
\nFix. Code. JS function getCleanTalkStorageDataArray moved to common file.
\nFix. Anti-Spam. Integrations by class logic fixed.
\nFix. Registration. Checking WP_Error during registration protection.

6.62 21.08.2025

Mod. Firewall. Disabling SFW, AntiCrawler, and AntiFlood if the key is invalid or empty
Fix. Woocommerce. Add to cart validation on AJAX fixed.
Mod. Settings. Renaming email verification options before submitting the form
Fix. EmailCheckExist. Edit for WL mode
Ref. Frontend. Optimize flow to prevent forсed reflow.

6.61 07.08.2025

New. Integration. Asgaros Forum topics and replies protected.
Upd. EmailEncoder. Add mode handler for shortcode.
Upd. Settings. Restore notice about get key auto.
Upd. Footer links. Footer links block Recommended plugins updated.
Upd. ServerRequirementsChecker. Check updated, unit test provided, docs added.
Ref. JS. Refactoring to optimize bundle size.
Mod. Code. Removing the option – Manage comments on public pages.
Del. Script. Remove cleantalk-public-admin.js.
Fix. Integrations. Do not skip check for woo registration during checkout.
Fix. Integrations. Fixed uni cpo gathering meta data about woocommerce item.
Fix. Woocommerce. Deleting REST API order if on pending status.
Fix. Woocommerce. Event token gathering fixed on any cookies mode.
Fix. Searchform. JS error on form class gathering fixed.
Fix. Settings. Search forms. Forgotten space added.

6.60 17.07.2025

New. BlockServerRequirements. Added a block with the Server Requirements output
Mod. BlockServerRequirements. Changed in layout, title, link to the article
Fix. Code. URLs collecting. Probably fatal error fixed due JSON decoding.
Fix. Code. EmailEncoder.php. Probably fatal fixed on JSON decoding due null passed as decoded emails array on logging.
New. Integration. Integration with the SureForms plugin
Fix. BlockServerRequirements. Style edits
Fix. BlockServerRequirements. Adding information about requirements to a class, changing access to the Requirements variable
New. Integration. Integration with SureForms, a new approach to rest integrations
Fix. Integration. AjaxLogin integration fixed.
New. FluentCommunity. Skipping a request from the login form
Fix. Integrations. Newsletter. Fixed warning on acces array offset.
Fix. FirewallModule. Added a hook to set special cookie “apbct_firewall_die” to skip page caching.
Fix. Integration. Ninja Forms. Fields collection fixed.
Fix. Integration. WP Forms. Fields collection fixed.
Mod. SureForms. Separate implementation of rest route interception, editing of block message output
Fix. SFW. Skip check on probably missed tables due update process.
Fix. Code. Code direct call preventing.
Fix. Alt sessions. Incoming data validation.
Fix. API. Restored missed first param $url on callback action checkResponse to avoid secound param $method_name missing.
Fix. SureForms. Edits based on the review
Fix. Integrations. JS. Do not handle onSubmit middleware for the Events Calendar search form.
Fix. DB. Table “cleantalk_sessions”. If table index is incorrect then recreate the table via updater due update to v6.60.

6.59 03.07.2025

Upd. Tests. Reorganizing the file structure of the tests folder
New. PhpUnit. A separate script for calculating coverage
Mod. Git. Added a file coverage.txt to gitignore
Fix. Coverage. Removed the coverage calculation
Mod. ShortCodeSkipEncode. Removing the shortcut functionality for skipping from encoding
Fix. ShortCodeSkipEncode. Editing text insertion
Fix. ShortCodeSkipEncode. Removing the skip test from coding
Fix. Integrations. Update woocommerce nickname gathering.
Fix. Integration. Cover-style protection adapted for Zoho iframes.
Fix. Clear $_POST service fields after basecall.
Fix. Integration. Fluent form steps ignore.
Fix. Honeypot. Hidden input for search form fixed.
Fix. Helper. ToUTF8. Fix nullable case of pregmatch.
New. Integration. Mailchimp embed forms. Form values replacement adapted.
New. Hook. Filter user roles who can see the dashboard widget.
Mod. RequirementsChecker. Nested check allow_url_fopen dependent on cURL
Ref. Integrations. Updated wp-json handler.
Fix. Skip check. Added entry point for breakdance forms.
New. Integration. QuickCal integration protection implemented.
New. Integrations. RegistrationMagic plugin – prtotect registration.
Fix. LoginIPKeeper. Handled fatal error case when user meta returns non- array values.
Fix. JS. Removed AJAX call “apbct_set_important_parameters” handlers.
Code. EmailEncoder. Encoder. Errors layout refactored.
Fix. Integrations. Fixed CSCF nickname gathering.
Fix. EmailEncoder. Encoder. Do not use SSL for logged in user on any page, even if encoded via hook.
Fix. AntiCrawler. Fixed setCookie statement.
New. Cloud service. Ability to change regional cloud servers implemented.
Code. Constants handler implemented.
Code. Constants “skip_anticrawler_on_rss_feed” and “set_ajax_route_type” are adapted to ServiceConstants class.
New. Common. Do not exclude no-email requests if constant “APBCT_SERVICE__DISABLE_EMPTY_EMAIL_EXCEPTION”.
Fix. Integration. AjaxLogin integration fixed.
Fix. CheckServerRequirements. Style css edit
Fix. WPForms. Editing the username receipt

6.58.1 20.06.2025

Fix. Honeypot. Hidden input for search form fixed.

6.58 18.06.2025

Upd. Settings. Updated hosting license flow.
Upd. Remote Calls. Debug call improved – show alt. sessions status.
Mod. AJAXService. Separating hack connections into a separate class, editing no_priv, renaming the function to AJAXService.
Fix. Encoder. Encoding content by hooks fixed.
Fix. Honeypot. Remove label for the Wave validator compatibility.
Fix. Honeypot. Aria attribute added for label tag.
Fix. Integration. WP Forms integration protection fixed.
Fix. Integration. Forminator protection improved.

6.57.2 09.06.2025

Fix. Integration. WP Forms integration protection fixed.

6.57.1 06.06.2025

Fix. Encoder. Encoding content by hooks fixed.

6.57 05.06.2025

New. Integration. Chatway Live Chat. Protected via iframe coverage.
\nNew. Integration. Login Signup/Popup registration protection implemented.
\nNew. Integrations. All-in-one chat.
\nNew. EmailEncoder. Shortcode to exclude data from encoding. Lot of refactoring.
\nNew. User/Comment checker. New class LoginIPKeeper implemented to keep spammer IP address even if spammer session is expired.
\nNew. Code. Added links to support and an article in help.
\nUpd. Integrations. Move wpforms integration to separate class.
\nMod. EmailEncoder. Long description updated.
\nFix. Alt sessions. Missed data last_update fixed.
\nFix. External forms. Outside iframe check. Validate result before final actions.
\nFix. Integrations. Fixed forminator nickname gathering.

6.56 22.05.2025

Upd. PublicScripts. Update bot detector script enqueueing to use wp_enqueue_script with proper parameters for improved performance and compatibility.
Ref. WPSearch. Class integration for WP Search
Upd. Cron. Update flow to prevent object cache.
New. Options. Gravity Forms spam entries saving option implemented.
New. Integration. Newsletter plugin integration implemented.
Fix. Encoder. Dropping attributes contains emails fixed.
New. Integration. BuddyBoss app REST api protection implemented.
Upd. Search forms. Integration by class. Meta and cpam check method moved to the class.
New. Integration. Chaty. Contact form.
New. Integration. Chaty. Whatsapp form now works via external forms.
Fix. External forms. Force protection. AJAX action cleantalk_force_ajax_check added to skip signs to make the integration class work.
Fix. Encoder. Encoding via buffer fixed.
Upd. Footer. Everest Forms cross-link added.
Fix. Integration. Easy Digital Downloads. Skip check on built-in email verification.
New. Integration. WPZOOM forms.
Fix. Email encoder. Exclude attribute data-et-multi-view from encoding.
Fix. Integration. Avada Fusion Builder. Reformated JSON response.
Fix. Honeypot. Search form handling fixed.
Fix. Encoder. Integration for excluding some service data encoding on SureCart plugin implemented.
Fix. Encoder. Setting description fixed.
New. ServeChecker. A class for checking server variables and implementing a non-compliance banner during installation
Fix. Activator. Deleting an unnecessary call, making code edits
Fix. AdminNotices. Deleting an extra paragraph
Fix. Force protection. Condition logic fixed.
Fix. Force protection. Encoding-decoding stability improved.
Fix. Force protection. Checking option into constructor implemented.
Upd. Sessions. Update storage.
Upd. Settings. Using level for banners from cloud.
Fix. AdminSettings. Removing unnecessary js code
Fix. Settings. Editing the display of the About block in Whitelabel mode

6.55 24.04.2025

New. Contact data encoder. New encoder state form in settings.
New. Contact data encoder. Phone number encoding implemented.
New. Integration. Appointment Booking Calendar.
New. Settings. Added the footer.
Mod. Email Encoder. Added underline for replaced text in replace mode.
Mod. Email Encoder. Statuses of features are disabled if the encoder is fully turned off.
Mod. Settings. Updates for text the “Set cookies” option.
Mod. Settings: Changed API key field description and behavior.
Fix. SFW. The check now runs on init hook to fix “load_text_domain” error.
Fix. Enqueue. Added allow_url_fopen check before processing script paths.
Fix. Integrations. Improved email validation in Ninja Forms
Fix. Integrations. Enhanced Zoho spam check flow
Fix. Integrations. Added ‘activehosted.com’ support in form handling
Fix. Code. Enqueue. External bot detector script turned back to standard WP enqueuing way.
Upd. Anti-Crawler. Excluded feed requests.

6.54 10.04.2025

New. Code. Enqueue scripts via specialized handler.
New. Settings. Email Encoder. Now the obfuscation way can be selected (blur/obf/replace).
Fix. ExternalForms. Excluding the creation of a textarea with the value of the submit attribute.
Fix. Integrations. Fixed gravity form flow.
Fix. Integrations. Fixed vikrentcar and vikbooking.
Fix. Integrations. Fixed wspsc add cart.
Fix. Integrations. Fixed zoho form flow.
Fix. Integrations. Rollback preventDefault action.
Fix. UsersScan. Added check for ct_role existence in user data before processing.
Ref. Email Encoder. Obfuscation refactored.
Upd. Integrations. Added spam check for buddyboss edit.
Upd. Integrations. Ninja forms. Now integration can provide additional email addresses array via GetFieldsAnyDto.

6.53 27.03.2025

New. Integration. Event Manager – booking form
New. Integration. Smart Quiz Builder integration
New. Integration. Brave PopUp Pro integration implemented.
Code. Psalm. Fixed all taint issues.
Fix. Cookies. Page hits and site referrer pararms gain fixed.
Fix. Cookies. Count in forced alt cookies state on page_hits gain.
Fix. Cookies. Site referer fixed.
Fix. Code. UTM marks for payment link fixed.
Fix. User checker. Non-checkable tab fixed.
Fix. Integrations. WSForm update flow to handle request in direct function.
Fix. AjaxHook. Initializing a global variable
Fix. AvadaIntegration. Skipping hooks, username definition, GFA edit, removed no_cookie_data excision
Fix. AvadaIntegration. Removed post filtering
Fix. Integration. Added the definition of ‘message’ for integration with Jet Form Builder

6.52 13.03.2025

New. Integration. Integration with plugin/theme Listeo.
Mod. Pixel. Disabling a pixel if its mode is ‘auto’ and the bot detector is enabled
Mod. Decoration. Changing cursor data collection, renaming functionality
Mod. Decoration. Removing decorations and changing the logic of data collection from the frontend
Ref. Integrations. Woocommerce gather to one class.
Fix. Email encoder. Texts modified by hooks.
Fix. Email Encoder. Using buffer fixed.
Fix. CollectingUserActivity. Rename script, changing the selection definition
Fix. GetKeyAuto. Removed localization
Fix. External forms. Bitrix24 forms protection implemented.

6.51 03.03.2025

New. Integration Awesome Support. Checking registration and creating new tickets.
New. Integrations. Added Site reviews handler.
New. Integration. Paid Member Subscription plugin.
Upd. EmailEncoder. Made JS message translate-ready.
Upd. ProtectByShortcode. Expanded the array of options.
Upd. EmailEncoder. Unified localization.
Mod. GetKeyAuto. Checking the query result code.
Mod. EmailEncoder. Unification of Email Encoder functionality.
Fix. Code. JS error during external forms protection fixed.
Fix. Integrations. False detecting request type registration fixed.
Fix. Honeypot. Honeypot layout simplified.
Fix. Get fields any. Collecting message fixed.
Fix. Common. POST clearance updated.
Fix. Code. SFW class. PHP 8.2+ compatibility.
Fix. TRP. Editing the rendering of badges in the admin area.
Fix. Search form. Skip hero booking forms.
Fix. Admin page. Admin bar. Spam counters reset fixed.

6.50.1 21.02.2025

Fix. Integrations. Registration flag condition updated.

6.50 12.02.2025

New. AJAX Wrapper.
New. Integration. Hubspot embed forms (non-iframe).
New. Integration. Added LeakyPaywall register handler.
Fix. Code. Psalm lvl3 completed.
Fix. Code. Contact Form 7. Run gathering NoCookie Data before apbct_js_test() run.
Fix. Real Person. Editing the badge output for existing users.
Fix. Global variables. Cookies getting logic fixed.
Fix. Settings. Fixed wpms work mode select.
Fix. Email Encoder. Attribute drop sign upgraded.
Fix. Email Encoder. Regexp for exclusions updated.
Fix. EmailEncoder. Exclude ICS calendar.
Fix. JS. Removed AJAX call “apbct_set_important_parameters”.
Fix. Integration. External forms for publisher.copernica.com custom code.
Fix. Honeypot field. CSS selector for labels fixed.

6.49 30.01.2025

Fix. Email Existence check. The icon and popup now adaptive on window resizing.
Fix. EmailEncoder. Improved flow to skip encoding inside inline js.
Fix. Force Protection. Correcting the error of using the class before initialization, adding an option check.
Fix. Force Protection. Preventing notice occurs from js.
Fix. Integrations. Added nasa login exclusion.
Fix. Integrations. Improved ConvertKit forms integrations.
Fix. Integrations. Improved flow to prevent error occurs.
Fix. Integrations. Improved nasa registration params.
Fix. Integrations. Prevent broking elementor swiper gallery.
Fix. SFW. Fixed update flow, to prevent warning occur on download stage.
Fix. Settings. Improved refresh nonce flow.
Fix. Users checker. Selecting users for the checking was fixed.
New. Bot detector frontend data log. Save logs to alt sessions only if records has new event types.
New. FormDecoration. The plugin’s signature has been added to all the decorations. Added click counting for signatures.
New. JS-Bundles. Branching the js bundle into external and internal and depending on their options.
New. UsersChecker. Sorting users implemented.
Upd. Dashboard widget. Countries flags convert to the svg sprite.
Upd. DeactivationPopup. Deleted the plugin deactivation pop-up.
Upd. Integrations. Skip Leaky Paywall validation request.
Upd. JS-Bundles. Changes to the assembly of bundles and their use.
Upd. ProtectByShortcode. Renaming the hook.

6.48.2 23.01.2025

Fix. SFW. Fixed update flow, to prevent warning occur on download stage.
Fix. Force Protection. Preventing notice occurs from js.

6.48.1 21.01.2025

Fix. Settings. Improved refresh nonce flow.

6.48 16.01.2025

New. Cookies type. Auto-detect cookies type on list of specified plugins active.
New. Integration. Dubsado external iframes protection implemented.
New. Integration. Tevolution plugin integration implemented.
New. ForceProtection. Added new module.
New. SpamProtection. Added shortcode for easily third party integration.
Fix. AltCookies. Trailing spaces removed.
Fix. Comment checker. Hints descriptions updated.
Fix. Comments checker. Fixed count of comments during ajax check process. Docs and descritpions updated.
Fix. Common. JS keys getting. Fixed case when inline script fired before public bundle loaded.
Fix. Common. Helper::dnsResolve() method fixed.
Fix. Common. Prevent cookies set on WP Rocket preloader requests.
Fix. Cron. Added cast for value from database.
Fix. External Forms. Use ‘load’ event of window object to add external forms protection instead of rewriting ‘window.onload’ function.
Fix. External forms. Clear service fields fixed.
Fix. Email encoder. Adaptive. Magic on the way popup layout fixed.
Fix. Forms decoration. Fatal error getting decoration fixed.
Fix. Integrations. Improved compatible with tandem of wp-rocket and wp-engine.
Fix. Integrations. 3rd party Moosend form behaviour (spinner) fixed.
Fix. Integrations. Skip CartFlows login.
Fix. Integrations. Ninja forms integration fixed.
Fix. ForceProtection. The condition for adding a listener to enable the option.
Fix. Search form. Error handling alt cookies set fixed.
Fix. SetCookies. Removed data encoding for writing cookies off.
Fix. Settings. Adaptive. Long description popup layout and handling fixed.
Fix. Settings. Long description behavior fixed.
Fix. SFW. Download update files by batches.
Fix. SFW Error Text. Checking whether the init or plugins_loaded hook was executed (#529).
Fix. WooCommerce. Deleted draft order after forbidden solution.
Upd. AntiCrawler. Fix condition.
Upd. AntoCrawler. Changing the logic of the conditions, receiving cookies.
Upd. AntiCrawler. Added a new cookie for AntiCrawler, checking the loading of the bot detector.
Upd. BuddyPress. Send negative feedback for deleted Buddypress users.
Upd. Code. ServerVariables::get is deprecated now.
Upd. Code. Refactoring to compatible with psalm L3.
Upd. ForceProtection. Added a verification cookie, added a description and confirmation before enabling the option.
Upd. Settings. Enabling the default ’email check exist’ setting.
Upd. Settings. Rename get-access-key button.
Upd. WP CLI. Improvements.

6.47 18 Dec 2024

New. Form decoration. Holiday form decoration option added.
New. JSLibrary. Bot detector log collecting.
New. Integrations. Sendpulse 3rd party service integration implemented.
New. Integrations. Added SeedConfirmationPro.
Upd. EmailEncoder. Remember hook decoding.
Upd. Settings. Updated logic to clear old sessions data.
Upd. Integrations. Updated EmailEncoder to integrate Business Directory.
Upd. EmailEncoder. Fixed warning occurs on plugin delete action.
Upd. EmailEncoder. Improved work to handle seldom cases.
Upd. Integrations. Refactoring BuddyPress handler.
Upd. Code. Improved clean old session data handler.
Mod. Bot Detector. Library JS script load strategy set to “defer”.
Fix. Integrations. WooCommerce checkout during REST protection fixed.
Fix. External forms. External forms catching fixed.
Fix. External forms. ConvertKit integration fixed.
Fix. UniBanner. Edit access to a variable.

6.46 27 Nov 2024

New. Integrations. CoBlocks integration implemented.
New. EmailEncoder. A new hook for encoding mail
Upd. TheRealPerson. Update layout.
Upd. Code. Psalm L3. Updated codebase
Upd. Integrations. Breeze cache plugin integration implemented.
Upd. Code. Refactoring honeypot logic.
Upd. TRP. Improved adaptive.
Upd. Integrations. Added fibosearch support.
Fix. Integrations. Ninja forms getting form fields fixed.
Fix. TRP. Popup text color fixed.
Fix. Email encoder. Decoding blur-magic rebuilt.
Fix. Integrations. Exclusion of the Elementor search form
Fix. Integrations. Regex to exclude search forms
Fix. EmailEncoder. Handling exceptions and logged-in users
Fix. EmailEncoder. Exclusion of maps from leaflet

6.45.2 19 Nov 2024

Fix. Settings. Fixed banners close handler.

6.45.1 15 Nov 2024

Fix. Email Encoder. Exclusions condition fixed.
Fix. Collecting JS errors. Substring fail case fixed.

6.45 14 Nov 2024

Code. Psalm level 3. New progress.
Fix. Anti-Flood. Blocking page loop fixed.
Fix. Code. GetFieldsAny(). Added protection for unknown Gravity forms attack that ignores integration hooks.
Fix. Common check. Prevent spam on Formintator forms direct call attacks.
Fix. EmailEncoder. Editing the change of double quotes to single quotes.
Fix. EmailEncoder. Issue with missing tables fixed.
Fix. EmailEncoder. Revived lost modifyAriaLabelContent() call used to replace back the origin aria attr.
Fix. Remote Calls. RC calling for the services without the api key fixed.
Fix. Request Parameters. apbct_site_landing_ts parameter handling fixed.
Fix. Skip request. Skipping an ajax request to edit a profile.
Mod. EmailEncoder. Popup. Copy button removed. Email made selectable by click. Styles unified.
Mod. EmailEncoder. Descriptions updated.
Mod. Sanitize::sanitizeCleantalkServerUrl implemented.
Upd. Settings. Checking email existence option will be enabled by default for the new users.

6.44 31 Oct 2024

New. Integrations. Added honeypot for elementor form.
New. Email encoder. Hook and shortcode apbct_encode_data handler implemented.
Upd. EmailCheck. Improved js.
Upd. Universal banner. Refactored to universal.
Upd. Code. jQuery’s dependency removed form apbct scripts localization.
Fix. Request parameters. Param apbct_headless gain fixed.
Fix. Integrations. Flying Press cache plugin integration implemented.
Fix. EncodeEmail. Editing the change of double quotes to single quotes.
Fix. Common check. Prevent spam on Formintator forms direct call attacks.

6.43.2 23 Oct 2024

Fix. Integrations. Elementor Pro. Remove post-check for email field.
Fix. Get fields any. Revert last changes.

6.43.1 20 Oct 2024

Fix. Integration. Fluent Forms. Field data concatenating fixed.

6.43 17 Oct 2024

New. Integrations. Added TourMaster handler.
New. CheckEmailExist. Visualization of email address verification when filling in the field.
Upd. CheckingComments. Description of the number of all and verified comments.
Upd. Integrations. CF7. Ignore wpcf7_skip_spam_check third-side rules if CleanTalk Anti-Spam runs.
Fix. TRP. Fixed trp layout occurs on the page.
Fix. Integrations. Ninja forms getting form fields fixed.
Fix. Integrations. Added exclusion for Broken Link Notifier service action.
Fix. Integrations. Gravity Forms. Prevent skipping aside attacks to form handler.
Fix. Integrations. WP Rocket image dimensions requests excluded.
Fix. Code. JS minifying. Use return instead break on filling email decoder loop.
Fix. Code. Github action fixed.
Fix. CheckingComments. Editing the text.
Fix. EmailEncoder. Fixed a case with skipped encoding an aria-label attribute.
Fix. EmailEncoder. Improved “wpautop” exclusion.

6.42.1 03 Oct 2024

Fix. Adjust. LiteSpeedCache adjusting fixed.

6.42 03 Oct 2024

Fix. Integrations. Uni-Cpo pruducts actions – service fields skipping improved.
Fix. EmailEncoder. CSS. Hide wpautopt breaks between magic blur elements.
Fix. Integration. Add to cart by get bot detector fixed.
Mod. Settings. Adaptive version of the settings
Mod. Settings. Burger menu
New. Admin bar. Promotion link Manuals and FAQ added.
Fix. Contact form validate. Emails array urlencoding fixed.
Fix. External Forms. Skip PayPal redirection form.
Mod. ReferralLink. Changing the referral link
Fix. Integrations. TVE plugin affliction to gravity forms fixed.
Upd. Integrations. Updated adjust module for litespeed.
Fix. Settings. Removing excess
Fix. Integrations. Masteriyo LMS plugin. Ignore login events.
Fix. Integrations. Masteriyo LMS plugin. Registration POST check improved.
Fix. Code. GetFieldsAny. PHP 8.0 compatibility.
Fix. Integrations. BuddyPres private messages. Nouveau AJAX messages handled.
Fix. Settings. TRP and SFW settings minor fixes.

6.41.1 21 Sep 2024

Fix. Contact form validate. Emails array urlencoding fixed.

6.41 19 Sep 2024

Upd. Params. Removed nocookie table.
Upd. Integrations. Updated handler for FluentFormPro addon.
Upd. TRP. Updated layout.
Fix. Integrations. Updated Forminator handler.
Fix. Integrations. WC add to cart. Use function instead of const to handle GET cards.
Fix. Admin. CleanTalk deactivation popup layout fixed.
Fix. WPMS. SFW update fixed on WPMS mode 3.
Fix. HTTP. Headers collection for WordPress HTTP API fixed.
Fix. Public JS. Reduce setting important parameters AJAX calls.

6.40 05 Sep 2024

New. Email encoder. Animations and blur emails added.
New. Integrations. Added handler for wufoo.com.
New. Integrations. CleantalkWpDieOnComment class implemented to hook the default WP die handler on the comment validation errors.
New. The Real Person. Adaptive CSS version for admin page.
New. The Real Person. Show the badge in the admin panel in the comments list.
Fix. Integration. Woocommerce – adding to cart requests handling fixed.
Fix. Integrations. Added event handler for gravity multiform.
Fix. Integrations. Added exclude for WooCommerceProductFilter.
Fix. Integrations. Updated gathering email handler.
Fix. Integrations. Updated handler for Divi forms.
Fix. Integrations. Updated BuddyPress handler statement.
Fix. Integrations. Excluded klaviyo coupon service request
Fix. Params. Fixed honeypot handler.
Upd. CleantalkWidget. The public CT widget is removed.
Upd. Email encoder. Enabled for any new installations by defaults.
Upd. The Real Person. Closes the popup when the cursor exits the badge element area.

6.39.1 26 Aug 2024

Fix. Params. Fixed honeypot handler.

6.39 22 Aug 2024

New. Integration. Otter blocks integration implemented.
New. GetFieldsAny. Sender emails array
Upd. Pub-Integration. Adding sender_emails_array
Upd. The Real Person. Pop-up changes, layout correction
Fix. The Real Person. Overflow changes for the Spacious theme, Icon size changes
Fix. The Real Person. Checking against undefined
Fix. Adjust. Checking for LiteSpeed activity, review edits
Fix. Integrations. Added EmailOctopus handler.
Fix. Integrations. Updated email gathering on forminator.
Fix. Integrations. Updated skip statement.
Fix. TRP. No TRP badges on inactive licenses
Fix. Anti-spam. Parameter sender_emails_array moved to the sender_info block.
Fix. Anti-spam. Emails array support for CF7 integration.
Fix. Integration. Elementor Pro Form integration fixed.
Fix. Integration. WP Forms integration fixed.
Fix. Anti-spam. Honeypot logic fixed.
Fix. Integrations. Updated gathering email handler.

6.38

Code. Compatibility. Unnecessary WP Rocket text removed.
Fix. Integrations. Updated gathering email on Divi.
Upd. Internationalization. Added Dutch language support.
Fix. Email encoder. Translation fixed.
Fix. Requests parameters. Store URLs fixed.
Fix. Integrations. Fixed compatibility with varnish.
Fix. JS. Updated compatibility with old browsers.
Fix. Common. Revert readme text.
Ref. Search forms protection. Refactored to use storage data instead of hidden fields.
Mod. Integration. External Forms. Divi Form redirect handling via external forms.
Upd. Common. Updated readme description.

6.37

New. Integration. Added klaviyo handler.
New. Integration. Thrive Leads integration implemented.
Upd. Integration. CSCF forms.
Upd. Integration. Forminator forms username gathering.
Upd. Integration. Kali Form updated.
Upd. Changing the Form signs exceptions.
Upd. Common. Moved changelog.
Upd. EmailEncoder. Do not encode email in AMP pages.
Upd. Settings. The Real Person feature. Enabled by defaults for all new installations.
Upd. Settings. Updated description for Capture buffer.
Fix. Common. Honeypot field ID attribute fixed.
Fix. Common. Plugin version fixed.
Fix. Cookie. Updated gathering pages data in force alt mode.
Fix. CleanTalk pixel. Pixel error fixed.
Fix. External forms. Broken reCAPTCHA loading fixed in Active Campaign forms.
Fix. FindSpam. Added params verification.
Fix. JS. Console error – empty formOriginal.
Fix. Settings. Links. Utm tags.
Fix. Settings. Prevented warning appearing.
Fix. SFW. Error message typo fixed.
Ref. Code. Psalm L3. File cleantalk.php refactored.

6.36.1

Fix. Common. JS errors fixed.

= 6.36 Jul 11 2024
\n* New. Integration. Kulahub.
\n* New. Integrations. Added eloqua handler.
\n* New. Integration. Piotnet (PAFE) forms.
\n* New. Integration. Kadence Blocks Advanced.
\n* New. Settings. W3 Total Cache settings adjusting implemented.
\n* Upd. API. Method send_feedback upgraded to the version api3.0.
\n* Upd. Settings. Updated debug view.
\n* Upd. Settings. WL mode for WPMS link updated.
\n* Upd. The Real Person feature. Badge layout and popup improved.
\n* Fix. AltSessions. Encode array to JSON if tried to write raw array to the …

\n","contributors":[{"slug":"glomberg","name":"glomberg","count":4,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/glomberg/","alt":"glomberg's profile"},"plugins":{"url":"https://profiles.wordpress.org/glomberg/#content-plugins","alt":"glomberg's plugins"},"activity":{"url":"https://profiles.wordpress.org/glomberg/#content-activity","alt":"glomberg's activity"},"translations":{"url":"https://profiles.wordpress.org/glomberg/#content-translations","alt":"glomberg's translations"}}},{"slug":"alexandergull","name":"alexandergull","count":3,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/alexandergull/","alt":"alexandergull's profile"},"plugins":{"url":"https://profiles.wordpress.org/alexandergull/#content-plugins","alt":"alexandergull's plugins"},"activity":{"url":"https://profiles.wordpress.org/alexandergull/#content-activity","alt":"alexandergull's activity"},"translations":{"url":"https://profiles.wordpress.org/alexandergull/#content-translations","alt":"alexandergull's translations"}}},{"slug":"sergefcleantalk","name":"sergefcleantalk","count":3,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/sergefcleantalk/","alt":"sergefcleantalk's profile"},"plugins":{"url":"https://profiles.wordpress.org/sergefcleantalk/#content-plugins","alt":"sergefcleantalk's plugins"},"activity":{"url":"https://profiles.wordpress.org/sergefcleantalk/#content-activity","alt":"sergefcleantalk's activity"},"translations":{"url":"https://profiles.wordpress.org/sergefcleantalk/#content-translations","alt":"sergefcleantalk's translations"}}},{"slug":"artemacleantalk","name":"artemacleantalk","count":2,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/artemacleantalk/","alt":"artemacleantalk's profile"},"plugins":{"url":"https://profiles.wordpress.org/artemacleantalk/#content-plugins","alt":"artemacleantalk's plugins"},"activity":{"url":"https://profiles.wordpress.org/artemacleantalk/#content-activity","alt":"artemacleantalk's activity"},"translations":{"url":"https://profiles.wordpress.org/artemacleantalk/#content-translations","alt":"artemacleantalk's translations"}}},{"slug":"safronik","name":"Safronik","count":2,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/safronik/","alt":"Safronik's profile"},"plugins":{"url":"https://profiles.wordpress.org/safronik/#content-plugins","alt":"Safronik's plugins"},"activity":{"url":"https://profiles.wordpress.org/safronik/#content-activity","alt":"Safronik's activity"},"translations":{"url":"https://profiles.wordpress.org/safronik/#content-translations","alt":"Safronik's translations"}}},{"slug":"antonv1","name":"anton_cleantalk","count":2,"is_owner":false,"links":{"profile":{"url":"https://profiles.wordpress.org/antonv1/","alt":"anton_cleantalk's profile"},"plugins":{"url":"https://profiles.wordpress.org/antonv1/#content-plugins","alt":"anton_cleantalk's plugins"},"activity":{"url":"https://profiles.wordpress.org/antonv1/#content-activity","alt":"anton_cleantalk's activity"},"translations":{"url":"https://profiles.wordpress.org/antonv1/#content-translations","alt":"anton_cleantalk's translations"}}},{"slug":"glomberg","name":"glomberg","count":1,"is_owner":true,"links":{"profile":{"url":"https://profiles.wordpress.org/glomberg/","alt":"glomberg's profile"},"plugins":{"url":"https://profiles.wordpress.org/glomberg/#content-plugins","alt":"glomberg's plugins"},"activity":{"url":"https://profiles.wordpress.org/glomberg/#content-activity","alt":"glomberg's activity"},"translations":{"url":"https://profiles.wordpress.org/glomberg/#content-translations","alt":"glomberg's translations"}}}],"description":"

Top-rated anti-spam protection for WordPress. No CAPTCHA, no questions, no animal counting, no puzzles, no math and no spam bots. Universal AntiSpam plugin.

Anti-Spam features

Stops spam comments.
Stops spam registrations.
Stops spam contact emails.
Stops spam orders.
Stops spam bookings.
Stops spam subscriptions.
Stops spam surveys, polls.
Stops spam in widgets.
Stops spam in WooCommerce.
Real-time email validation. Is email real or Not.
Checks and removes the existing spam comments and spam users.
Compatible with mobile users and devices.
Compatible with General Data Protection Regulation (GDPR) (EU).
Blocking disposable & temporary emails.
No Spam – No Google Penalties. Give your SEO boost.
Mobile friendly Anti Spam & FireWall.
Stops spam in Search Form.
Disable comments.
Spam FireWall: Anti-Flood.
Spam FireWall: Anti-Crawler.
Hide «Website» field for comments.
Block messages by languages, countries, networks and stop words.
Email Address Encoder – protection for email addresses published on your site.
No jQuery.

Free trial then $12 per year

CleanTalk is an anti-spam plugin which works with the premium Cloud Anti-Spam service cleantalk.org. This plugin as a service https://developer.wordpress.org/plugins/wordpress-org/detailed-plugin-guidelines/#6-software-as-a-service-is-permitted

Public reviews

\n
It’s more than just a tool to combat spam; it’s an integral component that enhances the overall quality and performance of your website.
\n techbusinessnews.com.au
\n
Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam
\n The Hacker News.
\n
CleanTalk – Cloud-Based Anti-Spam Service to Keep Your Site Bot-Free.
\n NewsWatch Review.
\n
Compare reCAPTCHA & Akismet VS CleanTalk
\n https://www.saashub.com/compare-recaptcha-vs-cleantalk
\n https://www.saashub.com/compare-akismet-vs-cleantalk
\n
I know you have heard of a number of anti-spam plugins. But you must know, the cloud-based ones are the best regarding detection rate. They compare all the content in forms with their own algorithm to find out the legibility.
\n www.techwibe.com
\n
The key selling point of CleanTalk for me is not simply its effectiveness. It’s the fact that CleanTalk works in the background. It does not make users jump through hoops in order to submit a comment or complete a form.
\n www.kevinmuldoon.com
\n

AntiSpam protection for comments

Native spam protection for WordPress, JetPack comments and any other comment plugins. The plugin moves spam comments to SPAM folder or you can set the option to ban spam comments silently. You can also enable the option in the plugin settings to auto-delete comments from SPAM folder.

Contact Form 7 spam filter

Plugin extends spam protection for Contact Form 7 (CF7). It can be used with any other third-party spam filters.
\nHow to protect your Contact Form 7 using CleanTalk Anti-Spam plugin

Elementor Website Builder filter

Plugin extends spam protection for Elementor Website Builder. It filters spam submisssions and tested for contact form type.

Gravity forms spam filter

Plugin extends spam protection for Gravity forms. It filters spam submisssions for any type of forms.

Formidable Form Builder spam filter

Plugin extends spam protection for Formidable Form Builder. It filters spam submisssions for any type of forms – Contact Form, Survey & Quiz Forms.

Leaky Paywall subscription protection

Plugin protects Leaky Paywall plugin (by ZEEN01) against spam subscriptions. It can be used with any other third-party spam filters.

HubSpot protection for embedded forms

Plugin protects HubSpot embedded forms against any spam submissions. Guide to start using embedded forms https://knowledge.hubspot.com/forms/how-can-i-share-a-hubspot-form-if-im-using-an-external-site

Contact Form by WPForms spam filter

Plugin extends Contact Form by WPForms to provide spam protection. It filters spam submissions for each type of forms – simple contact form, marketing form, request a quote and etc.

WooCommerce spam filter

Anti-spam by CleanTalk filters spam registrations and spam reviews for WooCommerce. The plugin is fully compatible with WooCommerce 2.1 and higher.

Spam filter for theme contact forms

The plugin blocks spam emails via any theme (built-in ones included) contact forms. The plugin filters spam emails silently (without any error notices on WordPress frontend) in AJAX forms as well.

bbPress spam filter

Spam protection for everything about bbPress: logins, registrations, forums, topics and replies.

Many other great contact, signups and all kind of forms that supported by CleanTalk

AWeber form builder https://wordpress.org/plugins/aweber-web-form-widget/
Contact form by BestWebSoft https://wordpress.org/plugins/contact-form-plugin/
Contact Form Plugin by Fluent Forms Ninja forms https://fluentforms.com
Forminator contact from https://wpmudev.com/project/forminator-pro/
Ninja forms https://ninjaforms.com
Newsletters – MC4WP: Mailchimp for WordPress (mc4wp.com), MailPoet – emails and newsletters in WordPress (https://www.mailpoet.com/)
WS Form Lite https://wordpress.org/plugins/ws-form/
WP User Frontend, UserPro.
WordPress Landing Pages.

Protection for forms above works as built-in function of Anti-Spam by CleanTalk, without any additional actions from a user. Anywaym, if you have missed spam, try to activate a few options below. If nothing helps, ask for help at support forum https://wordpress.org/support/plugin/cleantalk-spam-protect/

Any WordPress form (checkbox ‘Custom contact forms’).
Any submission to the site (checkbox ‘Check all POST data’).

Check existing comments for spam. Bulk spam comments removal. Spam comment Cleaner

With the help of anti-spam by CleanTalk you can inspect through existing comments to find and quickly delete spam comments at once. To use this function, go to WP Console -> Comments -> Find spam comments.

Check existing users for spam. Bulk spam accounts removal. Spam users cleaner

With the help of anti-spam by CleanTalk you can inspect through existing accounts to find and quickly delete spam users at once. For use this function, go to WP Console -> Users -> Check for spam. Also, you can export a list of spam users to the CSV.

Private black lists for anti-spam service

Automatically block comments and registrations from your private black IP/email address list.

Hide «Website» field for comments

This option hides the «Website» field from standard WordPress comments forms. After that spammers won’t be able to send spam links using «Website» field in the bottom of the comments form.

Low false/positive rate

This plugin uses multiple anti-spam tests to filter spam bots having as low false/positive rate as possible.

How does CleanTalk improve SEO for your website?

CleanTalk works faster than most of the other anti-spam plugins. It is common knowledge that the faster your site loads, the better your customer experience is, the better your SEO will be, and the better your site will convert. Speed is becoming increasingly important in SEO, conversion and user experience. Today, site speed is one of the most important ranking factors on Google. A site that loads slowly will lose visitors and potential revenue.

Among anti-spam plugins CleanTalk is one of the fastest. Despite the large plugin functionality, the developers have optimized the performance of
\nthe plugin so that AntiSpam by CleanTalk is faster than most analogs. This contributes to the cloud service architecture, as all calculations take place in the cloud, not on the server, the server receives the finished result for further action.

https://s.w.org/plugins/cleantalk-spam-protect/screenshot-5.png?r=1288723

Unlike stand-alone plugins (like Antispam Bee) Anti-Spam by CleanTalk uses less CPU that improves site response, visitors experience and SEO results.

Spam FireWall

Spam FireWall allows blocking the most active spam bots before they get access to your website. It prevents spam bots from loading website pages so your web server doesn’t have to perform all scripts on these pages. Also it prevents scanning of pages of the website by spam bots. Therefore Spam FireWall significantly reduces the load on your web server. Spam FireWall also makes CleanTalk the two-step protection from spam bots. Spam FireWall is the first step and it blocks the most active spam bots. CleanTalk Anti-Spam is the second step and checks all other requests on the website in the moment of submitting comments/registers etc. How does it work?

The visitor enters to your web site.
HTTP request data are being checked in the nearly 5.8 million of the identified spam bot IPs.
If it is an active spam bot, the bot gets a blank page, if it is a visitor then he receives a normal page. This process is completely transparent for the visitors.

All the CleanTalk Spam FireWall activity is being logged in the process of filtering.

Spam FireWall: Anti-Flood & Anti-Crawler

Spam FireWall: Anti-Flood and Anti-Crawler options are intended for blocking unwanted bots, content parsing, shop goods prices parsing or aggressive website scanning bots. Learn more https://cleantalk.org/help/anti-flood-and-anti-crawler

How to protect sites from spam bots without CAPTCHA?

The most popular anti-spam method is CAPTCHA – the annoying picture with curved and sloping symbols, which are presented to the visitor to decipher and fill in. In is supposed that spam bots won’t discern these CAPTCHA, but a visitor will. CAPTCHA provokes great irritation, but if the visitor wants to comment, he has to fill in these symbols time after time, making mistakes and starting once again. Sometimes CAPTCHA reminds us of the doodles of a two year old child. For users with vision problems CAPTCHA is an insurmountable obstacle. Users hate captcha. Captcha for users means “hate”. Unreadable CAPTCHA stops about 80% of site visitors. After 2 failed attempts to decipher CAPTCHA 95% of visitors reject further attempts. At the sight of CAPTCHA and after input errors, many visitors leave the resource. Thus, CAPTCHA helps to protect the resource spam both from bots and visitors. CAPTCHA is not a panacea from spam. Doubts concerning the Need for CAPTCHA?

“Ultimately, CAPTCHAs are useless for spam because they’re designed to tell you if someone is ‘human’ or not, but not whether something is spam or not.” Matt Mullenweg

You do not have to work in IT to know what spam is. Besides piles of unwanted email, there are spam bots, or special software programs designed to act as human website visitors that post unwelcome messages over the Internet to advertise dubious services. More often than not spam messages do not even make sense. Similar to bacteria and virus mutations developing antibiotic resistance, spam bots are becoming more resilient in penetrating Internet firewalls and security layers.

Real-time email validation. Is email real or Not.

It is very important to be sure that the user used his real email address. Spambots very often use fake email addresses, i.e. which addresses do not exist.

CleanTalk will check email addresses for existence in real time.

Non-existing email addresses also entail several other problems for website owners.

You can never contact them by email,
the client will never receive any notifications from you (account activation letter, password recovery, email distribution, notifications, etc.),
if you use email marketing for your clients, then a large number of nonexistent emails in the mailing list may result in your IP address being added to various blacklists of email servers.

Improve your email list with email validation without fake emails.

Blocking disposable & temporary emails

Block fake and suspicious users with disposable & temporary emails to improve email delivery. So, it also prevents malicious activity, spam bots, and internet trolls.

Latest and the most SPAM active IPs, Emails, Domains and ASN

yawiviseya67@gmail.com
xrumer888@outlook.com
irinademenkova86@gmail.com
zekisuquc419@gmail.com
prince@stopformspam.xyz
191.101.217.24
199.167.138.22
178.159.37.17
185.190.42.200
45.133.172.23

Effective date is July 13th, 2025. Real-time data is available at https://cleantalk.org/blacklists.

Stops Spam in Search Form

Spam bots can use your search form to make a GET request with spam text. CleanTalk Anti-Spam has the option to protect your website search form from spam bots. Each time, the search generates a new page and if there are many requests, this can create additional load. So, under some conditions, spam searches can be indexed, which affects SEO,

Anti-Spam protection for website search forms repels spambots.
If your search form gets data too often the CleanTalk Anti-Spam plugin will add a pause and increase it with each new attempt to send data. It saves your web server processor time.
Spam protection allows you to not forbid indexation for the crawler bots if you really need it but simultaneously you will get protection from spambots.

You will always know what users were looking for on your site.

Disable comments

This option disables comments on your site. You can choose one or several options:

Disable comments for posts
Disable comments for pages
Disable comments for media

When using Disables comments, existing comments will not be deleted and will remain on the pages.

Email, Phones Address Encoder

CleanTalk Anti-Spam offers a feature called “Encode contact data” that is designed to encode all email addresses on the website pages. Encoding email, phontes addresses increases the level of protection of contact data from being abused, parsed, getting spammed and used in spam mailing lists by bots and online criminals. To reveal the encoded email address simply click on it and it will be decoded instantly.

Will the anti-spam plugin protect my theme?

Yes, it will. The Anti-spam by CleanTalk is compatible with any WordPress theme.

Should I use other anti-spam tools (Captcha, reCaptcha and etc.)?

CleanTalk stops up to 99.998% of spam bots, so you can disable other anti-spam plugins (especially CAPTCHA-type anti-spam plugins). In some cases several anti-spam plugins could conflict with each other.

Honeypot field

The option helps to block bots. The honeypot field option adds a hidden field to the form. When spambots come to a website form, they can fill out each input field. Enable this option to make the protection stronger on these forms. Learn more about supported forms here.

\n","downloaded":21901167,"faq":"\n

\nWhy are they spamming me?\n\n

Spammers want to get backlinks from your site to improve their site’s PageRank or redirect your visitors to malicious sites.This level of spam can damage your reputation with readers and commentators if you fail to tackle it. It is not uncommon for some WordPress websites to receive hundreds or even thousands of comments every week. However, by using a CleanTalk plugin, spam can be easily handled by your WordPress website.

\nIs the anti-spam protection safe for mobile visitors?\n\n

Yes, it is. The plugin doesn’t block mobile visitors as well as desktop website visitors. It uses several independent anti-spam tests to decrease the number of false outcomes and to have as low false-positive rate as possible. Multiple anti-spam tests help to avoid false/positive blocks for real website visitors even if one of the tests failed.

\nWhat does the plugin do with spam comments?\n\n

Spam comments are being moved to SPAM folder by default or you can set the option to ban spam comments silently.

\nHow can I test the anti-spam protection?\n\n

Please use the email stop_email@example.com for comments, contacts or signups to see how the anti-spam protection works. Also, you can see the logs for the last 7 days in the Dashboard or look at the folder “Spam” for banned comments.

\nHow does the plugin stop spam?\n\n

Please, note – administrator’s actions are NOT being checked.

The plugin uses several simple tests to stop spammers:

JavaScript anti-spam test. 99% of spam bots don’t have full JavaScript functions support. So, the plugin has the code which can be run by normal visitor and can’t be run by the spam bot.
Email, IP, domain spam activity list entries check. The plugin uses spam activity database online at cleantalk.org, consisting of more than 20 billion spam activity records of IPs, Emails, Domains and ASN. If the sender’s IP or Email is in the database, the sender gets some spam scores. To reduce false/positive rate the plugin not only uses the blacklist test to ban spammers, the sender will be banned when and only when multiple spam tests have been failed.
Comment submit time. Spam bots usually submit the info immediately after the page has been loaded, this happens because spam bots don’t actually fill the web form, they just send $_POST data to the blog. The normal visitor sends the data after several seconds or minutes.

\nWhat about pingback, trackback spam?\n\n

The plugin passes pingbacks without any checks by default. All trackbacks will be blocked if the sender had spam activity.

\nCan I use CleanTalk to remove pending spam comments?\n\n

Yes, you can. The plugin has the option to test all pending comments via database of spam active IP/Email, found spam comments will be moved to Trash folder.

\nHow does the plugin find spam in pending comments or registered accounts?\n\n

The plugin checks all non-spam comments in the blacklist database and shows you those senders who have spam activity on other websites.
\nThere are some differences between blacklist database and API to protect you from spam bot registrations/comments online. Blacklists show all history of spam activity, but our API (which is used in spam tests) relies on other parameters too: last day of activity, number of spam attacks during the last days etc. These mechanisms help us to reduce the number of false outcomes. So, there is nothing strange, if some emails/IPs are not found by bulk comments/accounts test.

To check comments please go here:

\n
WordPress console -> Comments -> Find spam comments
\n

To check users please go here:

\n
WordPress console -> Users -> Find spam users
\n

\nIs the plugin compatible with WordPress MultiUser (WPMU or WordPress network)?\n\n

Yes, the plugin is compatible with WordPress MultiUser. Each blog in multisite environment has individual anti-spam options for the protection from spam bots.

\nAfter the installation I noticed that the number of spam attacks has been increased in the stats\n\n

There are a few reasons for this:

With the indexing of your web-site by the search systems, appearance of external links and better search results position, your web-site attracts more and more spambots.
Non-transparent protection systems like CAPTCHA or question/answer, that don’t have spam attacks stats, don’t let you see the whole picture, or the picture is incomplete.
Counting methods for spam attacks and spam bots are different for different systems, thus the diversity appears. We seek to provide detailed stats.

\nWhy my dummy “spam” comment passed to the WordPress?\n\n

The plugin has several options to detect spam bots and humans. If you just post spammy text like this:

\"I want to sell something\", \"Buy something here..\" and etc\n

the comments will be passed, because the plugin detects sender as a human. So, use special email stop_email@example.com to test the anti-spam functionality or wait a few days to see how the plugin works.

\nIs it free or paid?\n\n

The plugin is free and distributed under the GPLv2 license.

CleanTalk anti-spam plugin works with a cloud base anti-spam service and this plugin is a Software as a service (SaaS).
\nCleanTalk it’s a free plugin that works with premium Cloud Anti-Spam service.
\nhttps://en.wikipedia.org/wiki/Software_as_a_service

The fact that the plugin works with a premium type service is mentioned in the plugin annotation and in its WordPress catalog description.

We are ready to help you with any issue regarding CleanTalk. There are hundreds of environment compositions and we do our best to cover as many as possible.

\nCan I use CleanTalk with cache plugins?\n\n

Anti-spam by CleanTalk doesn’t use static HTML code in its templates, so all anti-spam functions work correctly with any WordPress cache plugins.

\nDoes the plugin protect from spam bots if I use forms with third-party services?\n\n

Yes, it does. Plugin protects web-forms on your websites which send data to third-party servers (like MailChimp). To enable this protection set the option ‘Protect external forms’ in the plugin settings.

\nDoes CleanTalk compatible with Cloudflare?\n\n

CleanTalk is fully compatible with CloudFlare. Service doesn’t filter CloudFlares IP’s (AS13335) through blacklists database, so in this case plugin/service filters spam bots using other anti-spam tests.

\nIs CleanTalk compatible with a content delivery network (CDN)?\n\n

Yes, it is. CleanTalk works with any CDN system, i.e. CloudFlare, MaxCDN, Akamai.

\nCan I use CleanTalk functionality in my plugins?\n\n

Yes, you can. Follow this guide https://cleantalk.org/help/api-check-message

\nI see two loads of script cleantalk_nocache.js. Why do you use it twice?\n\n

This script is used for AJAX JavaScript checking. Different themes use different mechanisms of loading, so we use two methods for loading our script. If you absolutely know what you are doing, you can switch one of the methods off by defining constants in your wp-config.php file:

define('CLEANTALK_AJAX_USE_BUFFER', false); //false - don't use output buffering to include AJAX script, true - use it\n

define('CLEANTALK_AJAX_USE_FOOTER_HEADER', false); //false - don't use wp_footer() and wp_header() for including AJAX script, true - use it\n

\nCan I add exclusions for some pages of my site?\n\n

Yes, you can. There is a special setting in plugin settings.
\nYou could use this guide to learn more: https://cleantalk.org/help/exclusion-from-anti-spam-checking#wordpress

\nCan I not send my personal data to CleanTalk servers?\n\n

Yes, you can exclude your data. There is a special setting in plugin settings.
\nYou could use this guide to learn more: https://cleantalk.org/help/exclusion-from-anti-spam-checking#WordPress_field_exclusions

\nHow to test Spam FireWall?\n\n

Use special IP 10.10.10.10 in URL to test Spam FireWall. For example,

https://cleantalk.org/blog/?sfw_test_ip=10.10.10.10\n

Attention! The incognito mode should be enabled in your browser when you do a test. To enable incognito mode press Ctrl+Shift+N for Chrome, Opera и Safari browsers; press Ctrl+Shift+P for Firefox, Internet Explorer and Microsoft Edge. A full guide to enable Incognito mode is here: https://www.wikihow.com/Activate-Incognito-Mode

\nHow can I enter access key in WPMU version?\n\n

To set up global CleanTalk access key for all websites in WPMU, define constant in your wp-config.php file before defining database constants:

define('CLEANTALK_ACCESS_KEY', 'place your key here');\n

Now, all subsites will have this access key.

\nDoes the plugin work with Varnish?\n\n

CleanTalk works with Varnish, it protects WordPress against spam, but by default the plugin generates a few cookies for the protection from spam bots and it also disables Varnish cache on pages where CleanTalk’s cookies have been stored. To get rid of the issue with cache turn off the option ‘Set cookies’ in the plugin settings.

WordPress console -> Settings -> CleanTalk -> Advanced settings\n

Now the plugin will protect WordPress comments, registrations and most of popular contact forms, but will not protect some of rarely used contact forms.

\nDoes the anti-spam plugin work with Accelerated Mobile Pages (AMP)?\n\n

Yes, it does. But you have to turn off the SpamFireWall and the option ‘Use AJAX for JavaScript check’ in Advanced settigns of the plugin to be fully compatible with Accelerated Mobile Pages.

\nShould I change anything in the plugin’s settings or in my CleanTalk Dashboard when I switch my website from HTTP to HTTPS or vice versa?\n\n

No. You don’t need to change anything in the plugin’s settings or in your CleanTalk Dashboard. The plugin will work regardless of the protocol.

\nSpam Comment Management\n\n

By default, all spam comments are placed in the spam folder, now you can change the way the plugin deals with spam comments:

Move to the Spam folder. All spam comments will be placed to the folder “Spam” in the WordPress Comments section except comments with Stop-Words. Stop-Word comments will be always stored in the “Pending” folder.

You can prevent the proliferation of Spam folder. It can be cleaned automatically using the option “Keep spam comments for 15 days.” Enable this option in the settings of the plugin: WordPress Admin Page -> Settings -> Antispam by CleanTalk -> Advanced settings -> enable “Keep spam comments for 15 days” -> Save Changes.

\n
Move to Trash. All spam comments will be placed to the folder “Trash” in the WordPress Comments section except comments with Stop-Words. Stop-Word comments will be always stored in the “Pending” folder.
\n
\n
Ban comments without moving to WordPress backend. All spam comments will be deleted permanently without going to the WordPress backend except comments with Stop-Words. Stop-Word comments will be always stored in the “Pending” folder.
\n

What comments were blocked and banned can be seen in the Anti-Spam Log here: https://cleantalk.org/my/show_requests?int=week

To manage the actions with spam comments, go to the Control Panel, select the website you want to change the actions for and go to “Settings” under the name of the website.

Please, read more here:
\nhttps://cleantalk.org/help/spam-comment-management

\nIs the plugin EU GDPR compatible?\n\n

Yes, it is. Please read this article,
\nhttps://cleantalk.org/publicoffer#cleantalk_gdpr_compliance

\n\n","homepage":"https://cleantalk.org","icons":[{"type":"1x","url":"https://ps.w.org/cleantalk-spam-protect/assets/icon-128x128.png?rev=3154504"},{"type":"2x","url":"https://ps.w.org/cleantalk-spam-protect/assets/icon-256x256.png?rev=1637702"}],"installation":"

Installation instructions

\n
Download, install and activate ‘Anti-spam by CleanTalk’.
\n
\n
Get Access key https://cleantalk.org/register
\n
\n
Enter Access key in the settings: WordPress console -> Settings -> Antispam by CleanTalk
\n
\n
Do dummy spam comment (registration or contact message) with email stop_email@example.com. You should see notice: Forbidden. Sender blacklisted.
\n
\n
Done! The plugin is ready to use.
\n

Video guide – Anti-Spam Plugin Installation in WordPress.

\n\n

Important! To test spam protection you must post a dummy submissions as website visitor (use must logged out from WordPress console), because the plugin doesn’t filter submissions from WordPress administrators.

How can setup plugin in WPMU version?

In WordPress multisite version you can switch the plugin to use Global Access key. In this way the plugin doesn’t show any options to enter Access key in plugin settings and doesn’t show Trial banner in WordPress backend. To setup global CleanTalk access key for all websites in WPMS, define constant in your wp-config.php file before defining database constants:

define('CLEANTALK_ACCESS_KEY', 'place your key here');\n

Make it before you activated the plugin. If the plugin already activated, deactivate it and add the code and active it again.
\nNow, all subsites will have this access key.

Manage and control spam protection

Go to Dashboard at the cleantalk.org or use Android, iPhone anti-spam app to manage and control spam protection.

\n","internal_ranking":0,"languages":[{"slug":"es_ES","label":"Spanish (Spain)","count":32360},{"slug":"nl_NL","label":"Dutch","count":30206},{"slug":"ru_RU","label":"Russian","count":27196},{"slug":"fr_FR","label":"French (France)","count":20849},{"slug":"de_DE","label":"German","count":19853},{"slug":"it_IT","label":"Italian","count":15565},{"slug":"sv_SE","label":"Swedish","count":14890},{"slug":"ja","label":"Japanese","count":14019},{"slug":"pt_BR","label":"Portuguese (Brazil)","count":13276},{"slug":"nl_NL_formal","label":"Dutch (Formal)","count":11736},{"slug":"nl_BE","label":"Dutch (Belgium)","count":10363},{"slug":"de_DE_formal","label":"German (Formal)","count":9953},{"slug":"zh_CN","label":"Chinese (China)","count":9700},{"slug":"pl_PL","label":"Polish","count":9087},{"slug":"es_CL","label":"Spanish (Chile)","count":8024},{"slug":"da_DK","label":"Danish","count":6292},{"slug":"nb_NO","label":"Norwegian (Bokmål)","count":6152},{"slug":"pt_PT","label":"Portuguese (Portugal)","count":5491},{"slug":"ca","label":"Catalan","count":4308},{"slug":"de_CH","label":"German (Switzerland)","count":2934},{"slug":"de_CH_informal","label":"German (Switzerland, Informal)","count":2913},{"slug":"sq","label":"Albanian","count":2280},{"slug":"es_CR","label":"Spanish (Costa Rica)","count":1678},{"slug":"de_AT","label":"German (Austria)","count":1522},{"slug":"ckb","label":"Kurdish (Sorani)","count":436}],"last_seen":{"timestamp":1765173884.676,"timezone":"UTC"},"last_updated":{"timestamp":1764916020,"timezone":"UTC"},"last_wordpress_compatible_version":"6.9","latest_num_ratings":10,"latest_rating":4.6000000000000005,"latest_ratings":{"1":1,"2":0,"3":0,"4":0,"5":9,"links":{"1":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=1","alt":"View all 1 one star reviews"},"2":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=2","alt":"View all 0 two star reviews"},"3":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=3","alt":"View all 0 three star reviews"},"4":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=4","alt":"View all 0 four star reviews"},"5":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=5","alt":"View all 9 five star reviews"},"all":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/","alt":"View all 10 reviews"}}},"minimum_php_version":"5.6","minimum_wordpress_version":"4.7","name":"Spam protection, Honeypot, Anti-Spam by CleanTalk","num_ratings":3139,"pluginid":"cleantalk-spam-protect","rating":4.8,"ratings":{"1":154,"2":26,"3":18,"4":37,"5":2904,"links":{"1":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=1","alt":"View all 154 one star reviews"},"2":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=2","alt":"View all 26 two star reviews"},"3":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=3","alt":"View all 18 three star reviews"},"4":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=4","alt":"View all 37 four star reviews"},"5":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/?filter=5","alt":"View all 2904 five star reviews"},"all":{"url":"https://wordpress.org/support/plugin/cleantalk-spam-protect/reviews/","alt":"View all 3139 reviews"}}},"reviews":[{"reviewer":"Wintercorn","title":"Good but watch out for their sharp payment practices.","content":"The plugin is good and stops almost all spam. However upgrading to the premium version requires care. The upgrade form automatically selects the three website, three year, extra package with auto-renew. So your £11 plugin could become £55 if you assume clicking the single website option will just work honestly. It's not much cost but I wouldn't continue with this plugin but the client liked it so it stays.","rating":0.25,"created":{"timestamp":1664150400,"timezone":"UTC"}},{"reviewer":"paluh","title":"Great","content":"Great for spam protection, works awesome thanks","rating":0.25,"created":{"timestamp":1668902400,"timezone":"UTC"}},{"reviewer":"Rhizome Networks","title":"I recommend","content":"\nUsing ClanTalk for few years already. Easy to install, easy to manage instances. Do the work. Therefore, I recommend\n","rating":0.25,"created":{"timestamp":1676246400,"timezone":"UTC"}},{"reviewer":"Masum Billah","title":"Awesome","content":"One of the best spam protection plugin","rating":0.25,"created":{"timestamp":1682208000,"timezone":"UTC"}},{"reviewer":"Venutius","title":"It works!","content":"\nI was getting 50 spam registrations a day. This plugin stopped them dead! Fantastic!\n","rating":0.25,"created":{"timestamp":1682812800,"timezone":"UTC"}},{"reviewer":"Krzysztof Planeta","title":"Good but not for WooCommerce","content":"\nThis was my client's second attempt to CleanTalk. The first time we had false positives and even we were sometimes locked in from the store. After 2 or 3 years we started dealing with a ton of spam again, so we gave cleantalk another chance. Today one of our clients messages us saying that they were locked in from making an order. I have no idea how many other orders like that we missed because cleantalk log on their website goes back only 7 days. I think cleantalk is a good overall solution but not if you take any sort of payments on your website. Otherwise your visitors may not be able to make orders. This is occassional, but if an order value ranges from 200 to 10000 euro, this can sometimes hurt.\n","rating":0.1,"created":{"timestamp":1684108800,"timezone":"UTC"}},{"reviewer":"Janine","title":"Comment Spam comments after trial","content":"\nI installed this plugin as I was attacked by spammers in contact form. I never had an issue with spam comments (only contact form).\n\n\n\nAfter the trial phase ended, I got instantly comment spam (that I didn't get before installing the plugin).\n\n\n\n\n\n\n\nAdditionally, I am not even sure if it is aligned with the WordPress guidelines to make registration mandatory (to get key) that is then only limited for some days.\n","rating":0.05,"created":{"timestamp":1687824000,"timezone":"UTC"}},{"reviewer":"-","title":"Reduce my website spam","content":"\nFantastic plugin to reduce website spam. Affordable. But I only use it to stop spam registrations. Would love to have a plugin just for spam registrations so my site doesn't get bloated.\n","rating":0.25,"created":{"timestamp":1694131200,"timezone":"UTC"}},{"reviewer":"Andy","title":"Does what it says it does","content":"\nDoes what it says it will do and does it well. A much better plugin than that other one that I'll not mention.\n","rating":0.25,"created":{"timestamp":1696291200,"timezone":"UTC"}},{"reviewer":"Adam Kotala","title":"Amazing","content":"\nWorks without any hassles. My favorite solution for spam protection.\n","rating":0.25,"created":{"timestamp":1719964800,"timezone":"UTC"}},{"reviewer":"Web V8","title":"Amazing quality plugin","content":"\nWell built, seemless. The only bad reviews are the cheap skates who do not realise you have to spend to get a decent plugin like this. \n\n\n\nWe actively use CleanTalk on ALL hosting plans in Web V8 :) \n","rating":0.25,"created":{"timestamp":1739664000,"timezone":"UTC"}},{"reviewer":"andy_moyle","title":"Fast support","content":"\nCleanTalk stops spam registrations dead. But it had an issue I reported yesterday. Fixed super fast. Recommended!\n","rating":0.25,"created":{"timestamp":1744761600,"timezone":"UTC"}},{"reviewer":"elialum","title":"Works perfectly with very low system resources","content":"\nWorks perfectly with very low system resources\n","rating":0.25,"created":{"timestamp":1746403200,"timezone":"UTC"}},{"reviewer":"TKServer","title":"Fantastic","content":"\nVery responsive. Works well. \n","rating":0.25,"created":{"timestamp":1752883200,"timezone":"UTC"}}],"screenshots":"

$\"AntiSpam$
AntiSpam settings are easy to use to protect any contact forms. For example - Ninja forms, Fluent forms and etc.
$\"AntiSpam$
AntiSpam plugin rejected a spam bot at the CAPTCHA less registration form. The plugin provides explanation to visitor and websites about each rejected comment/registration or contact message.
$\"Use$
Use AntiSpam analytics tool for each website in service Dashboard to have information about spam/legitimate stats.
$\"Special$
Special interface to find spam comments.
$\"Special$
Special interface to find spammers in users.
$\"Prevent$
Prevent WooCommerce checkout from spammers.
$\"Prevent$
Prevent spam contact occurs in your life.
$\"Prevent$
Prevent any other spamers, from any other forms, for example from WPForms.
$\"\"$
$\"\"$

","short_description":"Blocks spam comments, fake users, contact form spam and more. No impact on SEO. Privacy focused. CAPTCHA free, premium Antispam plugin.","support_threads":125,"support_threads_resolved":117,"tags":[{"slug":"seo","label":"seo","count":1636},{"slug":"comments","label":"comments","count":1337},{"slug":"email","label":"email","count":1198},{"slug":"spam","label":"spam","count":707},{"slug":"contact-form","label":"contact form","count":667},{"slug":"captcha","label":"captcha","count":273},{"slug":"anti-spam","label":"anti-spam","count":184},{"slug":"antispam","label":"antispam","count":142},{"slug":"firewall","label":"firewall","count":103}],"tags_count":6247,"languages_count":281083,"age_days":5022.527985791817,"installs_per_rating":63.71455877668047,"downloads_per_rating":6977.1159604969735,"installs_per_day":39.8205844876879,"downloads_per_day":4360.586354512311,"reviews_per_day":0.6249840735342617,"activation_rate":0.009131933471855633,"version":"6.68","marketplace":"wordpress","marketplace_url":"https://wordpress.org/plugins/cleantalk-spam-protect","price":null,"wordpress_link":{"alt":"WordPress","url":"https://wordpress.org/plugins/cleantalk-spam-protect"}}

WordPress Visitors vs Spam protection, Honeypot, Anti-Spam by CleanTalk