Does VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA have any unpatched vulnerabilities?

No. All known vulnerabilities in VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA have been patched as of the latest data update. Always keep the plugin updated to the latest version.

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Security & Risk Analysis

wordpress.org/plugins/visualwp-cloudflare-turnstile

Increase security and protect against bots, spammers and hackers with Cloudflare Turnstile, a friendly, free CAPTCHA replacement

20 active installs v1.0.4 PHP 7.4+ WP 5.9+ Updated Feb 23, 2026

antispamcaptcharecaptchaspamturnstile

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Safe to Use in 2026?

Generally Safe

Score 100/100

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago

Risk Assessment

The 'visualwp-cloudflare-turnstile' plugin version 1.0.4 demonstrates a generally good security posture based on the static analysis. It has a small attack surface with only two AJAX entry points, both of which appear to have authentication checks, and no REST API routes, shortcodes, or cron events are exposed. The code also shows positive signs such as the absence of dangerous functions, no raw SQL queries, and a high percentage of properly escaped output. The presence of nonce and capability checks further strengthens its security. The plugin also has no recorded vulnerabilities, which is a significant positive indicator.

Key Concerns

One external HTTP request identified
81% of outputs properly escaped (19% potentially not)

Vulnerabilities

None known

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

35 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

81% escaped43 total outputs

Data Flows

All sanitized

Data Flow Analysis

2 flows

vwptn_turnstile_menu_options (visualwp-cloudflare-turnstile.php:350)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Attack Surface

Entry Points2

Unprotected0

AJAX Handlers 2

authwp_ajax_vwptn_turnstile_data_fetchvisualwp-cloudflare-turnstile.php:483

noprivwp_ajax_vwptn_turnstile_data_fetchvisualwp-cloudflare-turnstile.php:484

WordPress Hooks 16

actionlogin_enqueue_scriptsvisualwp-cloudflare-turnstile.php:119

actioninitvisualwp-cloudflare-turnstile.php:122

actionlogin_formvisualwp-cloudflare-turnstile.php:129

actionwp_authenticate_uservisualwp-cloudflare-turnstile.php:130

actionregister_formvisualwp-cloudflare-turnstile.php:133

actionregistration_errorsvisualwp-cloudflare-turnstile.php:134

actionlostpassword_formvisualwp-cloudflare-turnstile.php:137

actionlostpassword_postvisualwp-cloudflare-turnstile.php:138

actioncomment_form_logged_in_aftervisualwp-cloudflare-turnstile.php:141

actioncomment_form_after_fieldsvisualwp-cloudflare-turnstile.php:142

actionpreprocess_commentvisualwp-cloudflare-turnstile.php:143

filterninja_forms_register_fieldsvisualwp-cloudflare-turnstile.php:243

filterninja_forms_render_default_valuevisualwp-cloudflare-turnstile.php:269

filterninja_forms_submit_datavisualwp-cloudflare-turnstile.php:280

actionadmin_menuvisualwp-cloudflare-turnstile.php:344

filterscript_loader_tagvisualwp-cloudflare-turnstile.php:480

Maintenance & Trust

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedFeb 23, 2026

PHP min version7.4

Downloads1K

Community Trust

Rating0/100

Number of ratings0

Active installs20

Alternatives

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Alternatives

CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress

advanced-nocaptcha-recaptcha

Use CAPTCHA to stop spam and allow customers & users to interact with your website easily. Block fake accounts and orders. Avoid false positives.

100K 1 CVE

reCaptcha by BestWebSoft

google-captcha

Protect WordPress website forms from spam entries with Google reCAPTCHA.

100K 3 CVEs

Friendly Captcha for WordPress

friendly-captcha

100

Friendly Captcha is a privacy-first anti-bot solution that protects WordPress website forms from spam and abuse.

9K No CVEs

reCAPTCHA in WP comments form

recaptcha-in-wp-comments-form

reCAPTCHA in WP comments form is an ANTISPAM tool that adds a Google reCAPTCHA to the comments form and protects your site from the spam robots threat …

9K No CVEs

Anti-spam, Spam protection, ReCaptcha for all forms and GDPR-compliant

gdpr-compliant-recaptcha-for-all-forms

Anti-spam - CAPTCHA that protects all forms against spam and brute-force. Invisible and GDPR-compliant.

4K 1 CVE

Developer Profile

VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA Developer Profile

sightfactory

8 plugins · 190 total installs

trust score

Avg Security Score

98/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect VisualWP Cloudflare Turnstile – Easy Anti-Spam alternative to CAPTCHA

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/visualwp-cloudflare-turnstile/public/js/vwptn-turnstile.js/wp-content/plugins/visualwp-cloudflare-turnstile/public/css/vwp-turnstile.css/wp-content/plugins/visualwp-cloudflare-turnstile/admin/css/vwp.css

Script Paths

https://challenges.cloudflare.com/turnstile/v0/api.js

Version Parameters

visualwp-cloudflare-turnstile/public/js/vwptn-turnstile.js?ver=visualwp-cloudflare-turnstile/public/css/vwp-turnstile.css?ver=visualwp-cloudflare-turnstile/admin/css/vwp.css?ver=

HTML / DOM Fingerprints

CSS Classes

cf-turnstile

Data Attributes

data-sitekey

JS Globals

vwpscripts

FAQ