No captcha/bot protection on login, comments or registration

What it is

No captcha or antibot check (a plugin, or Cloudflare Turnstile/reCAPTCHA/hCaptcha) protects the login page, and comments and/or registration are open — leaving those forms free for bots to submit automatically.

How to fix it

Install the WordPress Plugin: its Security tab lets you paste your own free Cloudflare Turnstile keys and turn on protection for login, comments and registration independently, with no lock-out risk.