Add Cloudflare Turnstile CAPTCHA to WordPress, WooCommerce, Elementor, and popular form plugins with privacy-first server-side verification.
As of April 2026, Kitgenix CAPTCHA for Cloudflare Turnstile is a WordPress captcha plugin with 300 active installations and a 5/5 rating from 5 reviews. It has been downloaded 2.6K+ times in total. Requires WordPress 6.0+ and PHP 8.1+. Available on WordPress.org since 2025. Actively maintained — updated within the last month. Support resolution rate: 100%. Top alternative: SiteGuard WP Plugin.
Spam is expensive: it wastes time, clogs inboxes, creates fake accounts, and on stores it can lead to abandoned checkout noise and fraudulent activity. Traditional CAPTCHA solutions can also hurt conversions by adding friction.
Cloudflare Turnstile is a modern, privacy-first CAPTCHA alternative designed to reduce friction for real people while still blocking bots.
Kitgenix CAPTCHA for Cloudflare Turnstile is a production-ready Turnstile integration for WordPress that focuses on reliability in real-world setups:
– Server-side token verification (using Cloudflare’s official endpoint)
– Fast, conditional loading (only where needed)
– Support for dynamic/AJAX forms and modern WooCommerce Blocks / Store API checkout
– Security features: replay protection, proxy-aware IP…
| WordPress | 6.0+ requiredTested up to 7.0 |
| PHP | 8.1+ required |
Update: Improved the Kitgenix admin header layout for better alignment and less clutter.
Update: Social links in admin headers now render as compact icon buttons (with accessible labels).
Update: Added responsive header helpers so titles/description and actions/links lay out consistently.
Update: Admin tables inside Kitgenix pages now use Kitgenix styling for a more consistent branded look.
Fix: Admin notices now display above the Kitgenix header using the WordPress standard notice area.
Fix: Removed custom notice moving/styling so core WordPress notices keep their default appearance.
Fix: Added defensive notice normalization to prevent notices being relocated into the header by other scripts.
Fix: Normalised settings page card spacing so it matches other Kitgenix plugins.
Fix: Added spacing between adjacent action links/buttons (e.g., Edit/Delete).
Improvement: Validate Store API POSTs early via a single REST pre-dispatch path; token accepted from X-Turnstile-Token header or canonical extensions payload (WooCommerce Blocks).
Cleanup: Normalised nonce verification and request handling across admin and validation flows for WordPress.org review compliance.
Maintenance: Updated the plugin Author URI to the public Kitgenix WordPress.org profile and replaced the old custom admin-menu icon CSS with the native Dashicons icon.
New: Added a dedicated WooCommerce Product Reviews integration toggle so store reviews can be protected independently of standard WordPress comments.
Fix: Split standard WordPress comments from WooCommerce product reviews so enabling blog comments protection no longer captures product review submissions unless the WooCommerce reviews toggle is enabled.
Improvement: WooCommerce product reviews now follow the WooCommerce Classic injection mode and error-message context while still using the shared comment form hooks internally.
Docs: Updated the bundled documentation and package readme to describe the new WooCommerce Product Reviews coverage and the kitgenix_turnstile_handle_comment_form routing filter.
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.