What it is

This page has a login, comment, registration or contact form with no captcha or antibot check (Cloudflare Turnstile, reCAPTCHA or hCaptcha) detected. Without one, bots can submit that form freely — for automated password-guessing against the login, spam comments, fake account sign-ups, or spam through a contact form.

How to fix it

Add a free captcha to the form — Cloudflare Turnstile (no cost, privacy-friendly) is the easiest to add yourself; install the WordPress Plugin and its Security tab lets you paste your own free Turnstile keys and turn it on for login, comments and registration independently.

In depth

Our security scan found that one or more forms on your website, such as your login, comment, or contact page, do not have anti-bot protection. Without this protection, automated programs called bots can submit your forms repeatedly to spam your inbox, create fake accounts, or attempt to break into your site. To fix this, you need to add CAPTCHA protection to your forms. We recommend Cloudflare Turnstile, which is free and blocks bots without showing puzzle challenges to your real visitors. Install a WordPress plugin like WPForms, Gravity Forms, or Ninja Forms that supports Turnstile, then sign up for a free Cloudflare account, copy your Turnstile keys, and paste them into the plugin settings. This takes about fifteen minutes and will immediately stop most automated form abuse on your site.