GDPR compatible captcha anti-spam protection for login form, comments form, registration form & lost password form. Eliminate spam with captcha.
As of April 2026, Captcha Code is a WordPress captcha plugin with 100K+ active installations and a 3.8/5 rating from 34 reviews. It has been downloaded 685K+ times in total. Requires WordPress 3.0+ and PHP 5.2+. Available on WordPress.org since 2012. Downloads are down 11% this week. Top alternative: SiteGuard WP Plugin.
Adds GDPR compatible captcha code anti-spam protection to WordPress forms – comments form, registration form, lost password form, and login form. In order to post comments or register, users have to type in the code shown on the image. This prevents spam from automated bots & adds security. No external services (like Google ReCaptcha) are used. No API keys are needed, and no user-identifiable data is used so it’s GDPR compatible.
seems to produce the same code nearly every time and fails. if I change from numeric code to alphanumeric code it still produces the same numeric code. and it still fails.
I got surprised that, my fresh website sudden installed this plugin automatically. Even i never seen their name ever. They hide the plugin from WP Plugin list and uses as core plugin and uses option on WP Setting. Offering premium plan and doing huge spam. I recommend WP to remove their plugin for doing spam marketing and fraud install.
Waste of time,
A PHP session was created by a session_start() function call. This interferes with REST API and loopback requests. The session should be closed by session_write_close() before making any HTTP requests.
on the file wpcaptcha.php you should fix line 40 to 44 with this
if ( !session_id() )
{ session_start( [ ‘read_and_close’ => true, ] ); }
I had to find it my way out
I hope it’s harder to get around
| WordPress | 3.0+ requiredTested up to 6.9.4 |
| PHP | 5.2+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.