Add Google re captcha in WordPress Forms Security & Risk Analysis

wordpress.org/plugins/wp-google-recaptcha

Added Google re-CAPTCHA in Wordpress in any form like comment form, login form, forgot password form, woocommerce form etc.

600 active installs v1.4 PHP 5.6+ WP 4.8+ Updated Jan 6, 2025
commentsgooglerecptchaspamwordpress-form
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Add Google re captcha in WordPress Forms Safe to Use in 2026?

Generally Safe

Score 92/100

Add Google re captcha in WordPress Forms has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The wp-google-recaptcha plugin v1.4 exhibits a mixed security posture. On the positive side, the code analysis reveals no dangerous functions, all SQL queries utilize prepared statements, and there are no file operations or bundled libraries that could pose a risk. Furthermore, the plugin has no recorded vulnerability history, indicating a stable past. However, several concerns are raised by the static analysis. The complete absence of nonce checks and capability checks across all entry points, including the single shortcode, presents a significant risk. Additionally, a concerning 0% of output escaping suggests that user-supplied data rendered on the frontend could be vulnerable to cross-site scripting (XSS) attacks. The presence of external HTTP requests without further context on their sanitization also warrants caution. While the plugin appears to have avoided past vulnerabilities, the identified weaknesses in output escaping and lack of authorization checks represent tangible security risks that need to be addressed.

Key Concerns

  • Output not properly escaped
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

Add Google re captcha in WordPress Forms Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Add Google re captcha in WordPress Forms Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
4
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

0% escaped4 total outputs
Attack Surface

Add Google re captcha in WordPress Forms Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[google_recaptcha] inc.php:102
WordPress Hooks 7
actionadmin_menuinc.php:20
actionadmin_initinc.php:48
actionplugins_loadedinc.php:53
filterwpcf7_form_elementsinc.php:108
actionlogin_enqueue_scriptsinc.php:112
actionwp_enqueue_scriptsinc.php:113
actioninitinc.php:127
Maintenance & Trust

Add Google re captcha in WordPress Forms Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11
Last updatedJan 6, 2025
PHP min version5.6
Downloads12K

Community Trust

Rating0/100
Number of ratings0
Active installs600
Developer Profile

Add Google re captcha in WordPress Forms Developer Profile

Ravi Makwana

1 plugin · 600 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Add Google re captcha in WordPress Forms

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/wp-google-recaptcha/style.css/wp-content/plugins/wp-google-recaptcha/main.js
Script Paths
https://www.google.com/recaptcha/api.js
Version Parameters
wp-google-recaptcha/main.js?v=2.9wp-google-recaptcha/style.css?v=2.9

HTML / DOM Fingerprints

CSS Classes
google_recaptcha-recaptcha
JS Globals
google_recaptcha_recaptcha
Shortcode Output
<div class="google_recaptcha-recaptcha"></div>
FAQ

Frequently Asked Questions about Add Google re captcha in WordPress Forms