SECURITY FINDING
Sensitive form with no captcha/bot protection
What it is
This page has a login, comment, registration or contact form with no captcha or antibot check (Cloudflare Turnstile, reCAPTCHA or hCaptcha) detected. Without one, bots can submit that form freely — for automated password-guessing against the login, spam comments, fake account sign-ups, or spam through a contact form.
How to fix it
Add a free captcha to the form — Cloudflare Turnstile (no cost, privacy-friendly) is the easiest to add yourself; install the WordPress Plugin and its Security tab lets you paste your own free Turnstile keys and turn it on for login, comments and registration independently.
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.