Name: Codenitive CAPTCHA Security
Author: codenitive

Codenitive CAPTCHA Security helps protect WordPress, WooCommerce and Contact Form 7 forms from spam, bots and automated abuse.

Choose a single CAPTCHA provider from the plugin settings:

Google reCAPTCHA v2 Checkbox
Google reCAPTCHA v3
Cloudflare Turnstile
Disabled

Protect forms including:

WordPress Login
WordPress Registration
WordPress Lost Password
WordPress Comments
WooCommerce Login
WooCommerce Registration
WooCommerce Checkout
WooCommerce Product Reviews
Contact Form 7

Google reCAPTCHA v2 supports Light and Dark themes plus Normal and Compact sizes. Cloudflare Turnstile supports Managed, Non-Interactive and Invisible widget modes plus Auto, Light and Dark themes for visible widgets.

Features

Google reCAPTCHA v2 Checkbox support
Google reCAPTCHA v2 theme and size customization
Google reCAPTCHA v3 score-based support
Cloudflare Turnstile support
Single CAPTCHA provider selection
Option to completely disable CAPTCHA protection
Cloudflare Turnstile theme customization
Cloudflare Turnstile Managed, Non-Interactive and Invisible mode mapping
Cloudflare Turnstile appearance customization
Cloudflare Turnstile widget size customization
WordPress Login, Registration, Lost Password and Comments protection
WooCommerce Login, Registration, classic Checkout, Checkout Block and Product Reviews protection
Contact Form 7 integration
Hide CAPTCHA for logged-in users
CAPTCHA verification logs
Provider error reporting for failed verification attempts
Helps prevent spam, bots and brute-force attacks
Easy configuration through the WordPress admin settings panel
Compatible with most themes and caching plugins

Usage

After activating the plugin:

Go to Settings Codenitive CAPTCHA Security.
Select your preferred CAPTCHA provider.
Enter the Site Key and Secret Key for the selected provider.
Configure additional provider settings if required.
Open the Options tab and enable protection for the desired forms.
Save your settings.

To disable CAPTCHA protection completely, select Disabled as the CAPTCHA provider.

Google reCAPTCHA v2 Customization

When Google reCAPTCHA v2 is selected, the checkbox widget supports:

Theme

Light (default)
Dark

Size

Normal (default)
Compact

These options apply only to the visible reCAPTCHA v2 checkbox. reCAPTCHA v3 is score-based and has no checkbox theme or size setting.

Cloudflare Turnstile Customization

When Cloudflare Turnstile is selected as the CAPTCHA provider, the following widget customization options are available:

Widget Mode

Managed (recommended)
Non-Interactive
Invisible

The widget mode is bound to the Turnstile Site Key in Cloudflare. Select the same mode in the plugin so it can apply compatible presentation settings. The plugin does not send an unsupported mode value to the browser API.

Theme

Auto
Light
Dark

Appearance

Always
Execute
Interaction-only

Size

Normal
Compact
Flexible

Theme, appearance and size apply to Managed and Non-Interactive widgets. Invisible widgets have no visual footprint, so those display settings are omitted when Invisible mode is selected.

CAPTCHA Verification Logs

The plugin can record failed CAPTCHA verification attempts to help administrators troubleshoot CAPTCHA configuration and verification issues.

Verification logs may include information such as:

CAPTCHA provider
Protected form or integration
Verification result
Provider error codes
Date and time of the failed verification

Logs are intended for troubleshooting and monitoring CAPTCHA verification failures.

Privacy

This plugin connects to external CAPTCHA services to help prevent spam and automated abuse.

Data is sent to the currently selected CAPTCHA provider when CAPTCHA protection is used on a protected form.

Supported external services:

Google reCAPTCHA
Cloudflare Turnstile

If CAPTCHA is disabled, the plugin does not load or perform CAPTCHA verification through these providers.

External Services Used

This plugin uses one of the following third-party services depending on the CAPTCHA provider selected by the site administrator.

Google reCAPTCHA v2

Purpose: Helps prevent spam and automated abuse during protected form submissions.
Data Sent: Browser and interaction information may be sent to Google as part of the CAPTCHA verification process.
When Sent: When Google reCAPTCHA is selected and a visitor interacts with a protected form.
Service Provider: Google LLC
Terms of Service: https://policies.google.com/terms
Privacy Policy: https://policies.google.com/privacy

Google reCAPTCHA v3

Purpose: Provides score-based protection against spam and automated abuse without displaying a checkbox challenge.
Data Sent: Browser, interaction and form-action information may be sent to Google as part of CAPTCHA scoring and verification.
When Sent: When Google reCAPTCHA v3 is selected and a visitor submits a protected form.
Service Provider: Google LLC
Terms of Service: https://policies.google.com/terms
Privacy Policy: https://policies.google.com/privacy

Cloudflare Turnstile

Purpose: Helps prevent spam and automated abuse on protected forms.
Data Sent: Browser, network and other information required by the Turnstile verification service may be sent to Cloudflare.
When Sent: When Cloudflare Turnstile is selected and CAPTCHA protection is used on a protected form.
Service Provider: Cloudflare, Inc.
Terms of Service: https://www.cloudflare.com/website-terms/
Privacy Policy: https://www.cloudflare.com/privacypolicy/

If Invisible Turnstile mode is used, review Cloudflare’s Turnstile Privacy Addendum and reference it in your site’s privacy policy as required by Cloudflare:
https://www.cloudflare.com/turnstile-privacy-policy/

Feedback

If you like this plugin, please leave us a 5-star review:
https://wordpress.org/support/plugin/codenitive-captcha/reviews/#new-post

Need help or have a feature request? Use the Support Forum:
https://wordpress.org/support/plugin/codenitive-captcha/