WP Clinic
Log in Sign up

SECURITY FINDING

Sensitive form with no captcha/bot protection

What it is

This page has a login, comment, registration or contact form with no captcha or antibot check (Cloudflare Turnstile, reCAPTCHA or hCaptcha) detected. Without one, bots can submit that form freely — for automated password-guessing against the login, spam comments, fake account sign-ups, or spam through a contact form.

How to fix it

Add a free captcha to the form — Cloudflare Turnstile (no cost, privacy-friendly) is the easiest to add yourself; install the WordPress Plugin and its Security tab lets you paste your own free Turnstile keys and turn it on for login, comments and registration independently.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.