[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7QhfvXJCm0TZGwEt3xEye7A-J3uioRD0Zs4Rtm01fuY":3,"$fBDg01Jp8M9aN-C3Zop8L4r_Y3natLCGjmj8E6K3OIqc":408,"$fjtncFU0sn45ThYjZlz1FTAmWEcgiDibFB0ju5bbNTJk":412},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":143,"fingerprints":385},"highpots-spam-protection","HighPots Spam Protection","1.2.0","HighPots GmbH","https:\u002F\u002Fprofiles.wordpress.org\u002Fhighpots4webdev\u002F","\u003Cp>HighPots Spam Protection provides comprehensive, multi-layer spam protection for WordPress forms without relying on external services or user interaction. It works seamlessly with popular form plugins and uses advanced techniques to detect and block spam submissions.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multi-Layer Protection\u003C\u002Fstrong>: Combines multiple spam detection methods for maximum effectiveness\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure Token Validation\u003C\u002Fstrong>: Unique tokens prevent automated bot submissions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Honeypot Fields\u003C\u002Fstrong>: Hidden fields that trap bots while remaining invisible to users\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rate Limiting\u003C\u002Fstrong>: Prevents rapid-fire submissions from the same visitor\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Timing Analysis\u003C\u002Fstrong>: Detects suspiciously fast or slow form submissions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User Agent Validation\u003C\u002Fstrong>: Blocks submissions with suspicious or missing browser identification\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Referrer Validation\u003C\u002Fstrong>: Blocks submissions that do not originate from your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Writing System Detection\u003C\u002Fstrong>: Blocks submissions containing unwanted character sets (Cyrillic, Arabic, Chinese, etc.)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy-Focused\u003C\u002Fstrong>: IP addresses are automatically masked for GDPR compliance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No External Dependencies\u003C\u002Fstrong>: Works entirely within your WordPress installation – no third-party services needed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual Support\u003C\u002Fstrong>: Fully translated interface in 6 languages\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Developer Friendly\u003C\u002Fstrong>: Clean code structure with hooks for customization\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Supported Form Plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>WPForms\u003C\u002Fli>\n\u003Cli>Elementor Pro Forms\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>Formidable Forms\u003C\u002Fli>\n\u003Cli>Bricks Builder Forms\u003C\u002Fli>\n\u003Cli>JetFormBuilder\u003C\u002Fli>\n\u003Cli>Crocoblock JetEngine Forms\u003C\u002Fli>\n\u003Cli>Generic HTML forms (automatic protection)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Need support for another form plugin? Contact us at support@highpots.com\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Multilingual Support:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin interface is fully translated and available in:\u003Cbr \u002F>\n* English (default)\u003Cbr \u002F>\n* German (Deutsch)\u003Cbr \u002F>\n* French (Français)\u003Cbr \u002F>\n* Spanish (Español)\u003Cbr \u002F>\n* Italian (Italiano)\u003Cbr \u002F>\n* Chinese Simplified (简体中文)\u003C\u002Fp>\n\u003Cp>All admin interfaces, settings pages, error messages, and user notifications automatically adapt to your WordPress language setting.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose HighPots Spam Protection?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Easy Setup\u003C\u002Fstrong>: Install, activate, and your forms are protected – no complex configuration needed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Compliant\u003C\u002Fstrong>: Built with GDPR in mind – IP masking and configurable data retention\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fast & Lightweight\u003C\u002Fstrong>: Won’t slow down your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Monthly Fees\u003C\u002Fstrong>: No subscriptions or API limits\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Logs\u003C\u002Fstrong>: Track spam attempts and export data for analysis\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Customizable\u003C\u002Fstrong>: Fine-tune protection levels to match your needs\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Need Help or Have Suggestions?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Visit our website at \u003Ca href=\"https:\u002F\u002Fhighpots.com\u002Fprodukte\u002Fwordpress-plugins\u002Fanti-spam-protection\u002F\" rel=\"nofollow ugc\">highpots.com\u003C\u002Fa> for support, documentation, and feature requests.\u003C\u002Fp>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>This plugin is designed with privacy in mind:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>IP Address Masking\u003C\u002Fstrong>: IP addresses can be masked (e.g., 192.168.xxx.xxx) when displayed in logs\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Minimal Data Collection\u003C\u002Fstrong>: Only stores data necessary for spam protection\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Configurable Logging\u003C\u002Fstrong>: All logging can be adjusted or completely disabled\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Retention\u003C\u002Fstrong>: Configure how long logs are kept, or disable retention entirely\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No External Services\u003C\u002Fstrong>: No data is sent to external services or third parties\u003C\u002Fli>\n\u003Cli>\u003Cstrong>GDPR Compliant\u003C\u002Fstrong>: Designed to meet GDPR requirements out of the box\u003C\u002Fli>\n\u003C\u002Ful>\n","Multi-layer spam protection for WordPress forms with honeypot, rate limiting, token validation & comprehensive bot detection.",0,456,"2026-07-01T09:08:00.000Z","7.0.2","5.0","7.4",[18,19,20,21,22],"anti-spam","forms","protection","security","spam","https:\u002F\u002Fhighpots.com\u002Fwordpress-plugins\u002Fanti-spam-protection\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhighpots-spam-protection.1.2.0.zip",100,null,"2026-07-22T17:31:50.256Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"highpots4webdev",1,30,94,"2026-08-29T04:32:12.039Z",[37,61,81,97,117],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":14,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":56,"download_link":57,"security_score":58,"vuln_count":59,"unpatched_count":11,"last_vuln_date":60,"fetched_at":27},"oopspam-anti-spam","OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)","1.2.75","OOPSpam Team","https:\u002F\u002Fprofiles.wordpress.org\u002Foopspam\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.oopspam.com\u002F\" rel=\"nofollow ugc\">OOPSpam\u003C\u002Fa> is a modern anti-spam solution that uses advanced AI and machine learning to protect your WordPress forms and comments from spam. Our system has blocked over 1 billion spam attempts across 3.5M+ websites, maintaining 99.9% accuracy without compromising user privacy or accessibility.\u003C\u002Fp>\n\u003Cp>Unlike traditional CAPTCHA solutions that can hurt your conversion rates, OOPSpam works silently in the background, analyzing submissions against our extensive database of 500M+ malicious IPs and emails to catch both bot and human spammers.\u003C\u002Fp>\n\u003Ch3>Why Choose OOPSpam?\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Protect forms without CAPTCHA, JavaScript challenges, or tracking.\u003C\u002Fli>\n\u003Cli>Catch bot and human spam with AI-powered analysis and contextual checks.\u003C\u002Fli>\n\u003Cli>Keep control of privacy with optional IP and email analysis, with logs stored in your WordPress database.\u003C\u002Fli>\n\u003Cli>Filter submissions by country and language, and block VPNs and other high-risk sources.\u003C\u002Fli>\n\u003Cli>Use rate limiting, manual controls, detailed logs, and exports to manage spam effectively.\u003C\u002Fli>\n\u003Cli>Protect WooCommerce checkouts from spam and card testing, and use one API key across unlimited websites.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>What Our Users Say\u003C\u002Fh3>\n\u003Cblockquote>\n\u003Cp>“It’s eliminated all spam, and even the need for CAPTCHA. Setup is quick and the interface is intuitive.” – @gotmick\u003C\u002Fp>\n\u003Cp>“Very responsive support and dev team. Customer support was amazing, response time was immediate and issues were solved instantly.” – @viv18germany\u003C\u002Fp>\n\u003Cp>“Pricing is perfect for agencies as they do tiers by actual # of API calls and no limit on the number of sites you can install this on.” – @squarecandy\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch3>By the Numbers\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>3.5M+\u003C\u002Fstrong> websites protected daily\u003C\u002Fli>\n\u003Cli>\u003Cstrong>1B+\u003C\u002Fstrong> spam attempts blocked\u003C\u002Fli>\n\u003Cli>\u003Cstrong>99.9%\u003C\u002Fstrong> detection accuracy\u003C\u002Fli>\n\u003Cli>\u003Cstrong>24\u002F7\u003C\u002Fstrong> customer support\u003C\u002Fli>\n\u003Cli>\u003Cstrong>500M+\u003C\u002Fstrong> malicious IPs and emails in our database\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Supported form & comment solutions:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress Login, Registration, and Lost Password\u003C\u002Fli>\n\u003Cli>WooCommerce Order & Registration\u003C\u002Fli>\n\u003Cli>BuddyPress\u003C\u002Fli>\n\u003Cli>Elementor Forms\u003C\u002Fli>\n\u003Cli>Elementor Atomic Forms\u003C\u002Fli>\n\u003Cli>Ninja Forms\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>Kadence Form Block and Form (Adv) Block\u003C\u002Fli>\n\u003Cli>Fluent Forms\u003C\u002Fli>\n\u003Cli>Breakdance Forms\u003C\u002Fli>\n\u003Cli>WS Form\u003C\u002Fli>\n\u003Cli>WPDiscuz\u003C\u002Fli>\n\u003Cli>Forminator\u003C\u002Fli>\n\u003Cli>WPForms\u003C\u002Fli>\n\u003Cli>Formidable Forms\u003C\u002Fli>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>Bricks Forms\u003C\u002Fli>\n\u003Cli>Toolset Forms\u003C\u002Fli>\n\u003Cli>Piotnet Forms \u003C\u002Fli>\n\u003Cli>GiveWP Donation Forms\u003C\u002Fli>\n\u003Cli>MailPoet\u003C\u002Fli>\n\u003Cli>Beaver Builder Contact Form\u003C\u002Fli>\n\u003Cli>Ultimate Member\u003C\u002Fli>\n\u003Cli>MemberPress\u003C\u002Fli>\n\u003Cli>Paid Memberships Pro\u003C\u002Fli>\n\u003Cli>Jetpack Forms\u003C\u002Fli>\n\u003Cli>MC4WP: Mailchimp for WordPress\u003C\u002Fli>\n\u003Cli>SureForms\u003C\u002Fli>\n\u003Cli>SureCart\u003C\u002Fli>\n\u003Cli>QuForm\u003C\u002Fli>\n\u003Cli>HappyForms Pro\u003C\u002Fli>\n\u003Cli>Avada Forms\u003C\u002Fli>\n\u003Cli>MetForm\u003C\u002Fli>\n\u003Cli>ACF Frontend Forms\u003C\u002Fli>\n\u003Cli>Newsletters by Tribulant\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>OOPSpam Anti-Spam WordPress plugin requires minimal configuration. Check out our \u003Ca href=\"https:\u002F\u002Fhelp.oopspam.com\u002Fwordpress\u002F\" rel=\"nofollow ugc\">comprehensive WordPress guide\u003C\u002Fa> for detailed setup instructions. To get started quickly, \u003Ca href=\"https:\u002F\u002Fapp.oopspam.com\u002FIdentity\u002FAccount\u002FRegister\" rel=\"nofollow ugc\">get a key\u003C\u002Fa> and paste it into the appropriate setting field under \u003Cem>Settings=>OOPSpam Anti-Spam\u003C\u002Fem>. If you have a contact form plugin, make sure you enable spam protection on the settings page.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Please note\u003C\u002Fstrong>: This is a premium plugin. You need an \u003Ca href=\"https:\u002F\u002Fapp.oopspam.com\u002FIdentity\u002FAccount\u002FRegister\" rel=\"nofollow ugc\">OOPSpam Anti-Spam API key\u003C\u002Fa> to use the plugin. Each account comes with 40 free spam checks per month.\u003Cbr \u002F>\nIf you already use OOPSpam on other platforms, you can use the same API key for this plugin.\u003C\u002Fp>\n","Protect your forms from spam with 99.9% accuracy - no CAPTCHA, no JavaScript, no tracking. Trusted by 3.5M+ websites.",6000,279241,98,48,"2026-07-10T15:30:00.000Z","3.6","",[18,53,54,21,55],"contact-forms","form-protection","spam-blocker","https:\u002F\u002Fwww.oopspam.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Foopspam-anti-spam.1.2.75.zip",93,4,"2026-03-23 00:00:00",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":16,"tags":76,"homepage":79,"download_link":80,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"universal-honey-pot","Universal Honey Pot","6.0.0","Ludwig You","https:\u002F\u002Fprofiles.wordpress.org\u002Fludwigyou\u002F","\u003Cp>Universal Honey Pot is a powerful and user-friendly WordPress plugin that provides a plug-and-play solution for protecting your forms against unwanted spam. It automatically adds honey pots to all supported form plugins, such as Contact Form 7, Formidable Forms, Forminator, Elementor Pro, Divi and WPforms. With Universal Honey Pot, you can safeguard your WordPress site from spam without any manual configuration.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy to use: Simply install and activate the plugin, and it will start adding honey pots to supported form plugins.\u003C\u002Fli>\n\u003Cli>Plug-and-play: No manual configuration required. Universal Honey Pot seamlessly integrates with compatible form plugins.\u003C\u002Fli>\n\u003Cli>Wide compatibility: Supports popular form plugins like Contact Form 7, Formidable Forms, Forminator, Elementor Pro, Divi and WPforms, with more to be added in future updates.\u003C\u002Fli>\n\u003Cli>Effective spam protection: Honey pots act as a hidden trap for spambots, reducing the amount of unwanted submissions.\u003C\u002Fli>\n\u003Cli>Lightweight and optimized: Universal Honey Pot is designed to be resource-friendly and ensures smooth performance on your website.\u003C\u002Fli>\n\u003Cli>Behavioral Spam Filter (Beta): This new feature uses behavioral analysis to detect and block spam submissions. It is currently in beta testing and will be improved in future updates.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Supported Form Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>Elementor Pro\u003C\u002Fli>\n\u003Cli>Formidable Forms\u003C\u002Fli>\n\u003Cli>Forminator\u003C\u002Fli>\n\u003Cli>Divi\u003C\u002Fli>\n\u003Cli>WPforms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Coming Soon\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Fluent Form\u003C\u002Fli>\n\u003Cli>Jetpack\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>Everest Forms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Other plugin by Webdeclic\u003C\u002Fh3>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwebdeclic.com\" rel=\"nofollow ugc\">Webdeclic\u003C\u002Fa> is a French web agency based in Paris. We are specialized in the creation of websites and e-commerce sites. We are also the creator of the following plugins:\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmentions-legales-par-webdeclic\u002F\" rel=\"ugc\">Mentions Legales Par Webdeclic\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcookie-dough-compliance-and-consent-for-gdpr\u002F\" rel=\"ugc\">Cookie Dough Compliance and Consent for GDPR\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fquickwebp\u002F\" rel=\"ugc\">QuickWebP – Compress \u002F Optimize Images & Convert WebP | SEO Friendly\u003C\u002Fa>\u003Cbr \u002F>\n* \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsearch\u002Fwebdeclic\u002F\" rel=\"ugc\">Show all plugins on WordPress.org\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Support us\u003C\u002Fh3>\n\u003Cp>⭐️ If you like this plugin, please give us a 5 star rating on WordPress.org. This will motivate us to develop new features and write other plugins. ⭐️\u003C\u002Fp>\n\u003Cp>☕️ If you want buy me a coffee, you can do it here : \u003Ca href=\"https:\u002F\u002Fbmc.link\u002Fludwig\" rel=\"nofollow ugc\">Buy me a coffee\u003C\u002Fa> ☕️\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>This plugin is licensed under the GNU General Public License v2 or later. For more details, see http:\u002F\u002Fwww.gnu.org\u002Flicenses\u002Fgpl-2.0.html.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For any support requests or inquiries, please visit the plugin’s WordPress.org support forum: Plugin Support Forum.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Developed by \u003Ca href=\"https:\u002F\u002Fwebdeclic.com\" rel=\"nofollow ugc\">Webdeclic\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Universal Honey Pot is a powerful and user-friendly WordPress plugin that provides a plug-and-play solution for protecting your forms against unwanted …",1000,9950,74,3,"2025-10-08T11:56:00.000Z","6.8.6","4.0.0",[18,19,77,21,78],"honey-pot","spam-protection","https:\u002F\u002Fwebdeclic.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funiversal-honey-pot.6.0.0.zip",{"slug":82,"name":83,"version":6,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":11,"num_ratings":11,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":16,"tags":93,"homepage":95,"download_link":96,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"formshield","FormShield","GDimitrov","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpsupporting\u002F","\u003Cp>FormShield is a powerful form protection plugin that uses advanced pattern matching, behavioral analysis, and IP tracking to protect your WordPress forms from spam and bots without requiring users to solve annoying captchas.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>No License Restrictions\u003C\u002Fstrong> – Protect unlimited forms for free\u003C\u002Fli>\n\u003Cli>\u003Cstrong>No Captcha Required\u003C\u002Fstrong> – Seamless user experience\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Advanced Bot Detection\u003C\u002Fstrong> – Uses pattern matching, behavioral analysis, and IP tracking to identify bots\u003C\u002Fli>\n\u003Cli>\u003Cstrong>14 Form Integrations\u003C\u002Fstrong> – Works with all major form plugins\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Real-time Protection\u003C\u002Fstrong> – Blocks spam in real-time\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy Setup\u003C\u002Fstrong> – Works out of the box\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Form Location Tracking\u003C\u002Fstrong> – See exactly where your forms are located (pages, posts, etc.)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Supported Form Plugins:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Contact Form 7\u003C\u002Fli>\n\u003Cli>Gravity Forms\u003C\u002Fli>\n\u003Cli>WPForms\u003C\u002Fli>\n\u003Cli>Elementor Forms\u003C\u002Fli>\n\u003Cli>Ninja Forms\u003C\u002Fli>\n\u003Cli>Formidable Forms\u003C\u002Fli>\n\u003Cli>Happy Forms\u003C\u002Fli>\n\u003Cli>Fluent Forms\u003C\u002Fli>\n\u003Cli>WeForms\u003C\u002Fli>\n\u003Cli>WSForm\u003C\u002Fli>\n\u003Cli>QuForm\u003C\u002Fli>\n\u003Cli>Divi Contact Forms\u003C\u002Fli>\n\u003Cli>WordPress Comments\u003C\u002Fli>\n\u003Cli>And more coming soon!\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>FormShield analyzes user behavior patterns, content patterns, IP history, email validation, and submission frequency to determine if a submission is from a real human or a bot. This multi-layered approach is more effective than traditional captchas and provides a better user experience.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Privacy & Security:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Core spam protection runs entirely on your server — no data is sent offsite\u003C\u002Fli>\n\u003Cli>Optional AbuseIPDB integration: if you enter an API key, the submitter’s IP address is sent to api.abuseipdb.com to check its abuse reputation. This is disabled by default and requires a user-configured API key\u003C\u002Fli>\n\u003Cli>All other features are fully self-contained\u003C\u002Fli>\n\u003Cli>GDPR compliant\u003C\u002Fli>\n\u003Cli>No user data collection beyond standard WordPress logging\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>FormShield’s core spam protection runs entirely on your server. No data is transmitted offsite by default.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Optional AbuseIPDB integration:\u003C\u002Fstrong> If you configure an AbuseIPDB API key in Settings, the IP address of each form submitter will be sent to \u003Ccode>api.abuseipdb.com\u003C\u002Fcode> to check for known abuse. This feature is opt-in and disabled unless you provide a key. See https:\u002F\u002Fwww.abuseipdb.com\u002Fprivacy-policy for their privacy policy.\u003C\u002Fp>\n\u003Cp>All other processing — honeypot checks, content analysis, behavioral scoring, rate limiting — happens entirely on your WordPress installation.\u003C\u002Fp>\n","FormShield protects your forms from bot spam using advanced pattern matching and behavioral analysis. No annoying captchas, unlimited forms.",10,949,"2026-04-24T17:13:00.000Z","6.9.5","4.7",[18,94,54,19,21],"bot-protection","https:\u002F\u002Fwpsupporting.com\u002Fplugins\u002Fformshield\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fformshield.1.2.0.zip",{"slug":98,"name":99,"version":100,"author":101,"author_profile":102,"description":103,"short_description":104,"active_installs":105,"downloaded":106,"rating":107,"num_ratings":108,"last_updated":109,"tested_up_to":14,"requires_at_least":15,"requires_php":15,"tags":110,"homepage":112,"download_link":113,"security_score":114,"vuln_count":115,"unpatched_count":11,"last_vuln_date":116,"fetched_at":27},"stop-spammer-registrations-plugin","Stop Spammers Classic","2026.6","Web Guy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebguyio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebguyio\u002Fdam-spam\u002Fissues\" rel=\"nofollow ugc\">💬 Ask Question\u003C\u002Fa> | \u003Ca href=\"mailto:webguywork@gmail.com\" rel=\"nofollow ugc\">📧 Email Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Stop Spammers is now \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fdam-spam\u002F\" rel=\"ugc\">Dam Spam\u003C\u002Fa>. Switching is easy. All of your settings migrate over automatically in the background.\u003C\u002Fp>\n\u003Cp>Stop Spammers Classic is legacy code that will receive security patches only moving forward.\u003C\u002Fp>\n\u003Cp>🥪 \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fsponsors\u002Fwebguyio\" rel=\"nofollow ugc\">Buy me a sandwich\u003C\u002Fa> to help preserve Stop Spammers Classic or further project development in Dam Spam if you rely on either of them.\u003C\u002Fp>\n","A simplified, restored, and preserved version of the original Stop Spammers plugin.",30000,2647705,88,243,"2026-07-18T01:38:00.000Z",[18,111,21,22,78],"no-spam","https:\u002F\u002Fdamspam.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fstop-spammer-registrations-plugin.zip",86,9,"2026-06-01 00:00:00",{"slug":118,"name":119,"version":120,"author":121,"author_profile":122,"description":123,"short_description":124,"active_installs":125,"downloaded":126,"rating":127,"num_ratings":128,"last_updated":129,"tested_up_to":74,"requires_at_least":130,"requires_php":131,"tags":132,"homepage":138,"download_link":139,"security_score":140,"vuln_count":141,"unpatched_count":11,"last_vuln_date":142,"fetched_at":27},"wp-contact-form-7-spam-blocker","Spam Protect for Contact Form 7","1.2.10","NYSL","https:\u002F\u002Fprofiles.wordpress.org\u002Fnysl\u002F","\u003Cp>Spam Protect for Contact Form 7, the ultimate solution to shield your website from the nuisance of spam and intrusive bots. With this incredible, user-friendly WordPress plugin, bid farewell to the hassle of sifting through irrelevant and unsolicited form submissions.\u003C\u002Fp>\n\u003Cp>Gone are the days of wasting precious time on spammy data, advertisements, and unwanted contact details cluttering your inbox. Our plugin empowers you to take control effortlessly. Simply navigate to the Contact Form 7 edit screen and discover the all-new tab, exclusively designed to combat spam.\u003C\u002Fp>\n\u003Cp>Customize your defense strategy by effortlessly adding emails, domains, or specific words and phrases to the block settings. As spammers and bots often employ consistent email domains and commonly used words for their marketing endeavors, you can now proactively prevent their mischief. Watch as their attempts to submit forms are thwarted, replaced by a sleek, custom error message of your choosing.\u003C\u002Fp>\n\u003Cp>But worry not about blocking genuine visitors inadvertently! Our innovative log file system provides you with insightful monitoring, allowing you to identify and understand each blocked attempt. Stay confident that you’re preserving the engagement of your valued audience while keeping the disruptive elements at bay.\u003C\u002Fp>\n\u003Cp>Experience the unrivaled convenience and effectiveness of Spam Protect for Contact Form 7 today. Streamline your website’s communication, protect your time, and bid farewell to spam like never before.\u003C\u002Fp>\n\u003Ch3>A brief Markdown Example\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Manually email block.\u003C\u002Fli>\n\u003Cli>Email domain block.\u003C\u002Fli>\n\u003Cli>Words and phrases block.\u003C\u002Fli>\n\u003Cli>Top level domains block.\u003C\u002Fli>\n\u003Cli>Protect form from messages that contain shortlinks.\u003C\u002Fli>\n\u003Cli>Protect from blank text submitions.\u003C\u002Fli>\n\u003Cli>Log the failed messages.\u003C\u002Fli>\n\u003C\u002Fol>\n","Spam Protect for Contact-Form7 protects from spam and bots. Customize defense strategies and monitor blocked attempts. Protect your time effectively!",10000,136347,82,12,"2026-02-06T21:29:00.000Z","5.2","5.4",[133,134,135,136,137],"anti-spam-plugin","contact-form-7-security","form-spam-prevention","website-form-protection","wordpress-form-security","https:\u002F\u002Fnysoftwarelab.com\u002Fspam-protect-for-contact-form7\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-contact-form-7-spam-blocker.1.2.10.zip",96,2,"2026-03-20 00:00:00",{"attackSurface":144,"codeSignals":280,"taintFlows":308,"riskAssessment":375,"analyzedAt":384},{"hooks":145,"ajaxHandlers":257,"restRoutes":277,"shortcodes":278,"cronEvents":279,"entryPointCount":230,"unprotectedCount":141},[146,152,156,160,165,169,173,176,181,185,187,190,194,196,201,206,211,214,220,224,228,232,235,238,242,245,247,250,253],{"type":147,"name":148,"callback":149,"file":150,"line":151},"action","admin_menu","add_pages","includes\u002Fadmin\u002Fclass-hpsp-admin-manager.php",23,{"type":147,"name":153,"callback":154,"file":150,"line":155},"admin_init","init",24,{"type":147,"name":157,"callback":158,"file":150,"line":159},"admin_enqueue_scripts","enqueue_admin_notice_scripts",25,{"type":147,"name":161,"callback":162,"priority":163,"file":150,"line":164},"admin_notices","display_installation_notice",998,252,{"type":147,"name":161,"callback":166,"priority":167,"file":168,"line":33},"show_missing_salts_notice",999,"includes\u002Fadmin\u002Fclass-hpsp-salt-admin-notice.php",{"type":147,"name":170,"callback":171,"file":168,"line":172},"admin_post_hpsp_generate_salts","handle_generate_salts",31,{"type":147,"name":157,"callback":174,"file":168,"line":175},"enqueue_scripts",32,{"type":147,"name":177,"callback":178,"priority":88,"file":179,"line":180},"plugins_loaded","plugins_loaded_handler","includes\u002Fclass-hpsp-plugin.php",76,{"type":147,"name":177,"callback":182,"priority":183,"file":179,"line":184},"render_admin_pages",20,77,{"type":147,"name":154,"callback":154,"file":179,"line":186},78,{"type":147,"name":157,"callback":188,"file":179,"line":189},"enqueue_admin_scripts",79,{"type":147,"name":191,"callback":192,"file":179,"line":193},"wp_enqueue_scripts","enqueue_frontend_scripts",80,{"type":147,"name":153,"callback":195,"file":179,"line":107},"initialize_admin_components",{"type":147,"name":197,"callback":198,"file":199,"line":200},"rest_api_init","register_routes","includes\u002Fclass-hpsp-rest-api.php",45,{"type":147,"name":202,"callback":203,"file":204,"line":205},"hpsp_logging_setting_changed","handle_logging_change","includes\u002Fclass-hpsp-scheduler.php",22,{"type":147,"name":207,"callback":208,"priority":88,"file":209,"line":210},"hpsp_token_reused","closure","includes\u002Fclass-hpsp-token-manager.php",54,{"type":147,"name":212,"callback":208,"priority":88,"file":209,"line":213},"hpsp_token_replay_blocked",59,{"type":215,"name":216,"callback":217,"priority":88,"file":218,"line":219},"filter","wpcf7_form_elements","inject_fields","includes\u002Fintegrations\u002Fclass-hpsp-contact-form7.php",38,{"type":147,"name":221,"callback":222,"priority":115,"file":218,"line":223},"wpcf7_submit","validate_submission",41,{"type":215,"name":225,"callback":217,"priority":88,"file":226,"line":227},"elementor\u002Fwidget\u002Frender_content","includes\u002Fintegrations\u002Fclass-hpsp-elementor-form.php",37,{"type":147,"name":229,"callback":222,"priority":230,"file":226,"line":231},"elementor_pro\u002Fforms\u002Fvalidation",5,40,{"type":215,"name":233,"callback":217,"priority":88,"file":234,"line":172},"frm_filter_final_form","includes\u002Fintegrations\u002Fclass-hpsp-formidable.php",{"type":215,"name":236,"callback":222,"priority":88,"file":234,"line":237},"frm_validate_entry",34,{"type":147,"name":239,"callback":240,"file":241,"line":231},"template_redirect","handle_form_submission","includes\u002Fintegrations\u002Fclass-hpsp-generic-form.php",{"type":215,"name":243,"callback":217,"priority":88,"file":244,"line":172},"gform_form_tag","includes\u002Fintegrations\u002Fclass-hpsp-gravity-forms.php",{"type":215,"name":246,"callback":222,"priority":88,"file":244,"line":237},"gform_validation",{"type":215,"name":248,"callback":249,"priority":88,"file":244,"line":227},"gform_entry_is_spam","validate_spam",{"type":147,"name":251,"callback":217,"priority":88,"file":252,"line":227},"wpforms_display_submit_before","includes\u002Fintegrations\u002Fclass-hpsp-wp-forms.php",{"type":147,"name":254,"callback":255,"priority":256,"file":252,"line":231},"wpforms_process","validate_ajax_submission",50,[258,264,268,271,274],{"action":259,"nopriv":260,"callback":261,"hasNonce":262,"hasCapCheck":262,"file":150,"line":263},"hpsp_dismiss_installation_notice",false,"dismiss_installation_notice",true,33,{"action":265,"nopriv":260,"callback":266,"hasNonce":260,"hasCapCheck":260,"file":267,"line":231},"hpsp_get_spam_log_data","hpsp_get_spam_log_data_ajax","includes\u002Fadmin\u002Fclass-hpsp-log-controller.php",{"action":269,"nopriv":260,"callback":270,"hasNonce":260,"hasCapCheck":260,"file":267,"line":223},"hpsp_export_spam_log_csv","hpsp_export_spam_log_csv_ajax",{"action":272,"nopriv":260,"callback":273,"hasNonce":262,"hasCapCheck":262,"file":168,"line":263},"hpsp_dismiss_salt_notice","dismiss_salt_notice",{"action":275,"nopriv":260,"callback":276,"hasNonce":262,"hasCapCheck":262,"file":168,"line":237},"hpsp_generate_salts_ajax","handle_generate_salts_ajax",[],[],[],{"dangerousFunctions":281,"sqlUsage":282,"outputEscaping":284,"fileOperations":59,"externalRequests":11,"nonceChecks":306,"capabilityChecks":286,"bundledLibraries":307},[],{"prepared":172,"raw":11,"locations":283},[],{"escaped":285,"rawEcho":286,"locations":287},447,8,[288,291,294,296,298,300,302,304],{"file":267,"line":289,"context":290},154,"raw output",{"file":292,"line":293,"context":290},"includes\u002Fadmin\u002Fclass-hpsp-settings.php",753,{"file":292,"line":295,"context":290},771,{"file":292,"line":297,"context":290},785,{"file":292,"line":299,"context":290},803,{"file":292,"line":301,"context":290},820,{"file":292,"line":303,"context":290},835,{"file":252,"line":305,"context":290},64,7,[],[309,326,334,361],{"entryPoint":310,"graph":311,"unsanitizedCount":11,"severity":325},"render_logs_page (includes\u002Fadmin\u002Fclass-hpsp-log-controller.php:47)",{"nodes":312,"edges":323},[313,318],{"id":314,"type":315,"label":316,"file":267,"line":317},"n0","source","$_GET (x3)",69,{"id":319,"type":320,"label":321,"file":267,"line":47,"wp_function":322},"n1","sink","echo() [XSS]","echo",[324],{"from":314,"to":319,"sanitized":262},"low",{"entryPoint":327,"graph":328,"unsanitizedCount":11,"severity":325},"\u003Cclass-hpsp-log-controller> (includes\u002Fadmin\u002Fclass-hpsp-log-controller.php:0)",{"nodes":329,"edges":332},[330,331],{"id":314,"type":315,"label":316,"file":267,"line":317},{"id":319,"type":320,"label":321,"file":267,"line":47,"wp_function":322},[333],{"from":314,"to":319,"sanitized":262},{"entryPoint":335,"graph":336,"unsanitizedCount":32,"severity":325},"\u003Cclass-hpsp-settings> (includes\u002Fadmin\u002Fclass-hpsp-settings.php:0)",{"nodes":337,"edges":357},[338,341,345,348,352],{"id":314,"type":315,"label":339,"file":292,"line":340},"$_POST",888,{"id":319,"type":320,"label":342,"file":292,"line":343,"wp_function":344},"call_user_func() [RCE]",905,"call_user_func",{"id":346,"type":315,"label":339,"file":292,"line":347},"n2",914,{"id":349,"type":350,"label":351,"file":292,"line":347},"n3","transform","→ update_setting()",{"id":353,"type":320,"label":354,"file":292,"line":355,"wp_function":356},"n4","update_option() [Settings Manipulation]",428,"update_option",[358,359,360],{"from":314,"to":319,"sanitized":262},{"from":346,"to":349,"sanitized":260},{"from":349,"to":353,"sanitized":260},{"entryPoint":362,"graph":363,"unsanitizedCount":141,"severity":374},"process_form_submission (includes\u002Fadmin\u002Fclass-hpsp-settings.php:859)",{"nodes":364,"edges":370},[365,366,367,368,369],{"id":314,"type":315,"label":339,"file":292,"line":340},{"id":319,"type":320,"label":342,"file":292,"line":343,"wp_function":344},{"id":346,"type":315,"label":339,"file":292,"line":347},{"id":349,"type":350,"label":351,"file":292,"line":347},{"id":353,"type":320,"label":354,"file":292,"line":355,"wp_function":356},[371,372,373],{"from":314,"to":319,"sanitized":260},{"from":346,"to":349,"sanitized":260},{"from":349,"to":353,"sanitized":260},"high",{"summary":376,"deductions":377},"The \"highpots-spam-protection\" plugin v1.1.0 exhibits a generally positive security posture with several good practices in place. The plugin utilizes prepared statements for all SQL queries and has a high percentage of properly escaped output, significantly mitigating risks associated with SQL injection and XSS vulnerabilities. The presence of nonce and capability checks further strengthens its defenses.  However, there are notable areas of concern. The static analysis reveals two AJAX handlers without authentication checks, presenting a direct attack vector. Additionally, taint analysis indicates two flows with unsanitized paths, one of which is classified as high severity, suggesting a potential for privilege escalation or data compromise if exploited.\n\nThe plugin's vulnerability history is clean, with zero recorded CVEs. This, combined with the strong SQL and output escaping practices, suggests that the developers have a good understanding of core security principles. However, the presence of two unprotected AJAX endpoints and the high-severity taint flow are significant weaknesses that could be exploited by a determined attacker. While the lack of past vulnerabilities is reassuring, it doesn't negate the identified risks in the current version. The plugin's strengths lie in its robust data handling, but its primary weakness is the insufficient access control on specific entry points.",[378,380,382],{"reason":379,"points":88},"Unprotected AJAX handlers",{"reason":381,"points":128},"High severity taint flow",{"reason":383,"points":230},"Flows with unsanitized paths","2026-04-16T13:21:57.195Z",{"wat":386,"direct":395},{"assetPaths":387,"generatorPatterns":390,"scriptPaths":391,"versionParams":392},[388,389],"\u002Fwp-content\u002Fplugins\u002Fhighpots-spam-protection\u002Fassets\u002Fjs\u002Fhpsp-admin-settings.js","\u002Fwp-content\u002Fplugins\u002Fhighpots-spam-protection\u002Fassets\u002Fcss\u002Fhpsp-admin-styles.css",[],[388],[393,394],"highpots-spam-protection\u002Fassets\u002Fjs\u002Fhpsp-admin-settings.js?ver=","highpots-spam-protection\u002Fassets\u002Fcss\u002Fhpsp-admin-styles.css?ver=",{"cssClasses":396,"htmlComments":398,"htmlAttributes":400,"restEndpoints":403,"jsGlobals":405,"shortcodeOutput":407},[397],"hpsp-settings-page",[399],"\u003C!-- HighPots Spam Protection Settings Page -->",[401,402],"data-hpsp-field-id","data-hpsp-section-id",[404],"\u002Fwp-json\u002Fhpsp\u002Fv1\u002Fsettings",[406],"HPSP_Admin_Settings",[],{"error":262,"url":409,"statusCode":410,"statusMessage":411,"message":411},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fhighpots-spam-protection\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":72,"versions":413},[414,419,426],{"version":6,"download_url":24,"svn_tag_url":415,"released_at":26,"has_diff":260,"diff_files_changed":416,"diff_lines":26,"trac_diff_url":417,"vulnerabilities":418,"is_current":262},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhighpots-spam-protection\u002Ftags\u002F1.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhighpots-spam-protection%2Ftags%2F1.1.0&new_path=%2Fhighpots-spam-protection%2Ftags%2F1.2.0",[],{"version":420,"download_url":421,"svn_tag_url":422,"released_at":26,"has_diff":260,"diff_files_changed":423,"diff_lines":26,"trac_diff_url":424,"vulnerabilities":425,"is_current":260},"1.1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhighpots-spam-protection.1.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhighpots-spam-protection\u002Ftags\u002F1.1.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fhighpots-spam-protection%2Ftags%2F1.0.0&new_path=%2Fhighpots-spam-protection%2Ftags%2F1.1.0",[],{"version":427,"download_url":428,"svn_tag_url":429,"released_at":26,"has_diff":260,"diff_files_changed":430,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":431,"is_current":260},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhighpots-spam-protection.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fhighpots-spam-protection\u002Ftags\u002F1.0.0\u002F",[],[]]