WP-Safety

Fancy Captcha Security & Risk Analysis

wordpress.org/plugins/wp-fancy-captcha

Fancy Captcha is a jQuery plugin that helps you protect your web pages from bots and spammers. 通过拖动解锁来实现评论验证。

20 active installs v1.5.2 PHP + WP 2.0+ Updated Jun 20, 2012
anti-spamcaptchafancyfancy-captchaspam
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Fancy Captcha Safe to Use in 2026?

Generally Safe

Score 85/100

Fancy Captcha has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 13yr ago
Risk Assessment

The "wp-fancy-captcha" plugin version 1.5.2 exhibits a generally strong security posture based on the provided static analysis. The absence of identified AJAX handlers, REST API routes, shortcodes, and cron events significantly limits the potential attack surface. Furthermore, the code does not appear to contain dangerous functions, file operations, or external HTTP requests, all of which are positive indicators. The fact that all SQL queries utilize prepared statements is excellent practice and mitigates common injection vulnerabilities.

Key Concerns

  • All output is unescaped
  • Bundled outdated jQuery library
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Fancy Captcha Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Fancy Captcha Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
13
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

jQuery1.6.2

Output Escaping

0% escaped13 total outputs
Attack Surface

Fancy Captcha Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actionadmin_initcaptcha.php:72
actionadmin_menucaptcha.php:174
actionwp_footercaptcha.php:176
actionwp_headcaptcha.php:177
actioncomment_formcaptcha.php:178
filterpreprocess_commentcaptcha.php:179
Maintenance & Trust

Fancy Captcha Maintenance & Trust

Maintenance Signals

WordPress version tested3.3.2
Last updatedJun 20, 2012
PHP min version
Downloads7K

Community Trust

Rating100/100
Number of ratings1
Active installs20
Alternatives

Fancy Captcha Alternatives

CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7

CF7 Apps – Honeypot, Database, Redirection, Webhook, and Addons for Contact Form 7

contact-form-7-honeypot

A
100

Addons for Contact Form 7 — Honeypot, Database Entries, Redirection, Spam Protection, Webhooks, ACF integration for Contact Form 7, and more.

300K No CVEs
reCaptcha by BestWebSoft

reCaptcha by BestWebSoft

google-captcha

A
98

Protect WordPress website forms from spam entries with Google reCAPTCHA.

100K 3 CVEs
Gravity Forms Zero Spam

Gravity Forms Zero Spam

gravity-forms-zero-spam

A
100

Enhance your Gravity Forms to include anti-spam measures originally based on the work of David Walsh's "Zero Spam" technique.

100K No CVEs
WPBruiser {no- Captcha anti-Spam}

WPBruiser {no- Captcha anti-Spam}

goodbye-captcha

A
85

An extremely powerful antispam plugin that blocks spam-bots without annoying captcha images.

10K No CVEs
ALTCHA Spam Protection

ALTCHA Spam Protection

altcha-spam-protection

A
100

ALTCHA offers a free, open-source Captcha alternative, ensuring robust spam protection while respecting user privacy and GDPR compliance.

7K No CVEs
Developer Profile

Fancy Captcha Developer Profile

leo108

4 plugins · 120 total installs

86
trust score
Avg Security Score
89/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Fancy Captcha

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-fancy-captcha/captcha/jquery-1.6.2.min.js/wp-content/plugins/wp-fancy-captcha/captcha/jquery-ui.min.js/wp-content/plugins/wp-fancy-captcha/captcha/jquery.captcha.js/wp-content/plugins/wp-fancy-captcha/captcha/captcha.css
Script Paths
/wp-content/plugins/wp-fancy-captcha/captcha/jquery-1.6.2.min.js/wp-content/plugins/wp-fancy-captcha/captcha/jquery-ui.min.js/wp-content/plugins/wp-fancy-captcha/captcha/jquery.captcha.js

HTML / DOM Fingerprints

CSS Classes
ajax-fc-container
Data Attributes
data-captcha-dirdata-captcha-urldata-captcha-form-iddata-captcha-lang
JS Globals
jQuery
Shortcode Output
<div class="ajax-fc-container">You must enable javascript to see captcha here!</div>
FAQ

Frequently Asked Questions about Fancy Captcha