WP-Safety

OhmTang CFT Security & Risk Analysis

wordpress.org/plugins/ohmtang-cft

Integrate Cloudflare Turnstile CAPTCHA for WordPress & WooCommerce forms with custom error messages, each form controlled individually

0 active installs v1.0.0 PHP 7.4+ WP 6.7+ Updated Jan 2, 2026
captchacloudflarespam-protectionturnstileverification
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is OhmTang CFT Safe to Use in 2026?

Generally Safe

Score 100/100

OhmTang CFT has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The 'ohmtang-cft' plugin v1.0.0 exhibits a generally strong security posture based on the provided static analysis. The absence of any recorded CVEs, coupled with a complete lack of critical or high-severity taint flows, suggests robust development practices. Furthermore, the plugin demonstrates excellent adherence to secure coding standards, with 100% of SQL queries using prepared statements, all output properly escaped, and no file operations performed. The presence of both nonce and capability checks further bolsters its defense against common web vulnerabilities.

Key Concerns

  • One external HTTP request detected
Vulnerabilities
None known

OhmTang CFT Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

OhmTang CFT Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 17, 2026

OhmTang CFT Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
290 escaped
Nonce Checks
11
Capability Checks
3
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

100% escaped290 total outputs
Attack Surface

OhmTang CFT Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 46
actionadmin_menuincludes\Admin\Settings.php:12
actionadmin_enqueue_scriptsincludes\Admin\Settings.php:39
actionadmin_menuincludes\Admin\SettingsForms.php:13
actionadmin_menuincludes\Admin\SettingsOthers.php:13
actioninitincludes\Core\OhmTang.php:11
actionohmtang_rfq_before_contact_fromincludes\Integration\OhmTangRFQ\Clients.php:29
actionohmtang_rfq_contact_from_before_submitincludes\Integration\OhmTangRFQ\Clients.php:31
actionohmtang_rfq_before_contact_fromincludes\Integration\OhmTangRFQ\Clients.php:47
actionohmtang_rfq_contact_from_before_submitincludes\Integration\OhmTangRFQ\Clients.php:49
actionohmtang_rfq_after_contact_fromincludes\Integration\OhmTangRFQ\Clients.php:53
filterohmtang_cft_x_forms_optionsincludes\Integration\OhmTangRFQ\Options.php:12
filterOhmTang_rfq_validationincludes\Integration\OhmTangRFQ\Servers.php:15
actionwoocommerce_login_formincludes\Integration\Woocommerce\Clients.php:35
actionwoocommerce_login_formincludes\Integration\Woocommerce\Clients.php:37
actionwoocommerce_register_formincludes\Integration\Woocommerce\Clients.php:46
actionwoocommerce_register_formincludes\Integration\Woocommerce\Clients.php:48
actionwoocommerce_before_lost_password_formincludes\Integration\Woocommerce\Clients.php:57
actionwoocommerce_lostpassword_formincludes\Integration\Woocommerce\Clients.php:59
actionwp_headincludes\Integration\Woocommerce\Clients.php:75
actionwoocommerce_review_order_before_submitincludes\Integration\Woocommerce\Clients.php:82
actionwp_footerincludes\Integration\Woocommerce\Clients.php:85
filterrender_block_woocommerce/checkout-actions-blockincludes\Integration\Woocommerce\Clients.php:128
filterohmtang_cft_x_forms_optionsincludes\Integration\Woocommerce\Options.php:11
filterwoocommerce_process_login_errorsincludes\Integration\Woocommerce\Servers.php:20
filterwoocommerce_process_registration_errorsincludes\Integration\Woocommerce\Servers.php:24
filterlostpassword_postincludes\Integration\Woocommerce\Servers.php:28
actionwoocommerce_checkout_processincludes\Integration\Woocommerce\Servers.php:32
actionrest_authentication_errorsincludes\Integration\Woocommerce\Servers.php:34
actionlogin_enqueue_scriptsincludes\Integration\Wordpress\Clients.php:70
actionlogin_enqueue_scriptsincludes\Integration\Wordpress\Clients.php:73
actionlogin_formincludes\Integration\Wordpress\Clients.php:83
actionlogin_formincludes\Integration\Wordpress\Clients.php:92
actionregister_formincludes\Integration\Wordpress\Clients.php:106
actionregister_formincludes\Integration\Wordpress\Clients.php:116
actionlostpassword_formincludes\Integration\Wordpress\Clients.php:130
actionlostpassword_formincludes\Integration\Wordpress\Clients.php:139
actioncomment_form_beforeincludes\Integration\Wordpress\Clients.php:150
filtercomment_form_submit_fieldincludes\Integration\Wordpress\Clients.php:153
actioncomment_form_beforeincludes\Integration\Wordpress\Clients.php:164
actioncomment_form_submit_fieldincludes\Integration\Wordpress\Clients.php:166
actioncomment_form_afterincludes\Integration\Wordpress\Clients.php:173
filterohmtang_cft_x_forms_optionsincludes\Integration\Wordpress\Options.php:11
filterwp_authenticate_userincludes\Integration\Wordpress\Servers.php:21
filterregistration_errorsincludes\Integration\Wordpress\Servers.php:28
filterlostpassword_postincludes\Integration\Wordpress\Servers.php:35
filterpre_comment_on_postincludes\Integration\Wordpress\Servers.php:48
Maintenance & Trust

OhmTang CFT Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedJan 2, 2026
PHP min version7.4
Downloads121

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

OhmTang CFT Alternatives

CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress

CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress

advanced-nocaptcha-recaptcha

A
99

Use CAPTCHA to stop spam and allow customers & users to interact with your website easily. Block fake accounts and orders. Avoid false positives.

100K 1 CVE
Enable Turnstile (Cloudflare) for Gravity Forms

Enable Turnstile (Cloudflare) for Gravity Forms

enable-turnstile-cloudflare-for-gravity-forms

A
100

A lightweight plugin to enable Cloudflare's Turnstile alternative CAPTCHA on your Gravity Forms.

600 No CVEs
Bot Protection with Turnstile

Bot Protection with Turnstile

bot-protection-turnstile

A
100

A lightweight plugin that protects core WordPress forms and selected third‑party plugins from spam and bot attacks using Cloudflare Turnstile CAPTCHA.

80 No CVEs
Simple CAPTCHA Alternative with Cloudflare Turnstile

Simple CAPTCHA Alternative with Cloudflare Turnstile

simple-cloudflare-turnstile

A
98

Add Cloudflare Turnstile to WordPress, WooCommerce, Contact Forms & more. The user-friendly, privacy-preserving reCAPTCHA alternative. 100% free!

100K 2 CVEs
DoLogin Security

DoLogin Security

dologin

A
98

Easy Login. 2FA login. Passwordless login. Cloudflare Turnstile reCAPTCHA. GeoLocation (Continent/Country/City)/IP range to limit login attempts.

7K 4 CVEs
Developer Profile

OhmTang CFT Developer Profile

Ohm·Tang

2 plugins · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect OhmTang CFT

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ohmtang-cft/assets/css/admin-dashboard.css/wp-content/plugins/ohmtang-cft/assets/img/ohmtang-r-grey.png/wp-content/plugins/ohmtang-cft/assets/css/admin-settings.css/wp-content/plugins/ohmtang-cft/assets/js/admin-settings.js
Script Paths
https://challenges.cloudflare.com/turnstile/v0/api.js
Version Parameters
/wp-content/plugins/ohmtang-cft/assets/css/admin-dashboard.css?ver=/wp-content/plugins/ohmtang-cft/assets/css/admin-settings.css?ver=/wp-content/plugins/ohmtang-cft/assets/js/admin-settings.js?ver=

HTML / DOM Fingerprints

CSS Classes
cf-turnstile
Data Attributes
data-sitekeydata-themedata-actiondata-sizedata-callbackdata-expired-callback+6 more
JS Globals
turnstile
Shortcode Output
wp_nonce_field( $widget_id . '_ohmtang_nonce', $widget_id . '_ohmtang_nonce' )
FAQ

Frequently Asked Questions about OhmTang CFT