CAPTCHA 4WP
Healthy: maintained, last release 25 Aug 2026, 3 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 95 |
| Support | No data |
| Reputation | No data |
Quick answers
- Is CAPTCHA 4WP still maintained?
- Yes. Last release 25 Aug 2026, 3 releases in the last 24 months. 25 Aug 2026 · wordpress.org
- Who owns CAPTCHA 4WP, and has it changed hands?
- Changed. New committer skustrimovic made a first commit on 18 Aug 2026. 18 Aug 2026 · SVN log
- Was CAPTCHA 4WP removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is CAPTCHA 4WP safe?
- 4 known vulnerabilities, all fixed (latest in 7.6.1). Not on the exploited list. 6 Aug 2026 · Wordfence Intelligence
- Is the latest CAPTCHA 4WP update safe to install?
- Caution. Ownership change before 7.6.2: new committer skustrimovic made a first commit on 18 Aug 2026. No one-star spike after it. 25 Aug 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| shamim51 | 27 Apr 2015 to 18 Oct 2020, 95 commits |
|---|---|
| WPWhiteSecurity | 7 Sep 2021 to 20 Dec 2023, 68 commits |
| melapress | 9 Aug 2023 to 11 Jun 2025, 21 commits |
| skustrimovic | 18 Aug 2026 to 25 Aug 2026, 4 commits |
New committer skustrimovic made a first commit on 18 Aug 2026.
Maintenance
- Last release
- 2 months ago
- Releases, 24 months
- 3
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 25 Aug 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 3.2.
| Q4 2023 | 4.0 |
|---|---|
| Q1 2024 | 5.0 |
| Q2 2024 | 5.0 |
| Q1 2025 | 1.0 |
| Q2 2025 | 5.0 |
| Q3 2025 | 5.0 |
| Q3 2026 | 5.0 |
Average rating rose from 4.0 to 5.0 between Q4 2023 and Q3 2026.
| 5 star | 138 |
|---|---|
| 4 star | 6 |
| 3 star | 6 |
| 2 star | 8 |
| 1 star | 111 |
- Not working · 1 star · 25 Mar 2025
- Don’t work · 1 star · 27 Dec 2023
- Great Plugin · 2 stars · 1 Jul 2023
Security record
1 vulnerability in 24 months (4 on record), patched (latest fixed in 7.6.1).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 6 Aug 2026 | CAPTCHA 4WP - Antispam CAPTCHA solution for WordPress <= 7.6.0 - CAPTCHA Bypass | 5.3 | <= 7.6.0 | 7.6.1 | 12 |
| 18 Jul 2023 | Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get | 6.1 | <= 7.0.5 | 7.0.6 | Patched before disclosure |
| 29 Jun 2022 | CAPTCHA 4WP <= 7.0.6.1 - Cross-Site Request Forgery to Local File Inclusion | 8.8 | <= 7.0.6.1 | 7.1.0 | 2 |
| 4 Mar 2022 | Freemius SDK <= 2.4.2 - Missing Authorization Checks | 6.3 | < 7.0.5 | 7.0.5 | Patched before disclosure |
Changelog mentions of security fixes: 7.6.1 (vulnerability).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
0% of 1 support threads resolved in the last 2 months.
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 472 |
|---|---|
| 11 May 2026 | 1,318 |
| 18 May 2026 | 1,337 |
| 25 May 2026 | 1,223 |
| 1 Jun 2026 | 1,253 |
| 8 Jun 2026 | 1,222 |
| 15 Jun 2026 | 1,235 |
| 22 Jun 2026 | 1,084 |
| 29 Jun 2026 | 1,105 |
| 6 Jul 2026 | 1,092 |
| 13 Jul 2026 | 1,057 |
| 20 Jul 2026 | 1,177 |
| 27 Jul 2026 | 1,204 |
| 3 Aug 2026 | 1,508 |
| 10 Aug 2026 | 1,983 |
| 17 Aug 2026 | 44,987 |
| 24 Aug 2026 | 42,172 |
| 31 Aug 2026 | 7,575 |
| 7 Sep 2026 | 4,819 |
| 14 Sep 2026 | 6,383 |
| 21 Sep 2026 | 4,926 |
| 28 Sep 2026 | 3,461 |
| 5 Oct 2026 | 3,399 |
| 12 Oct 2026 | 2,706 |
| 19 Oct 2026 | 4,825 |
| 26 Oct 2026 | 3,321 |
| 2 Nov 2026 | 433 |
Weekly downloads over the last 4 weeks are 48% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 7.6.2 |
|---|---|
| Author | WPKube |
| Added | 27 Apr 2015 |
| Last updated | 25 Aug 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 5.5 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | captcha, hcaptcha, recaptcha, antispam protection, Cloudflare turnstile |
Other plugins by this author: Advanced Excerpt, Title and Nofollow For Links (Classic Editor), Authors List, Social Sharing Plugin - Kiwi, Go Redirects URL Forwarder, About Author Box
Questions
Is CAPTCHA 4WP still maintained?
Yes. Last release 25 Aug 2026, 3 releases in the last 24 months.
Who owns CAPTCHA 4WP, and has it changed hands?
Changed. New committer skustrimovic made a first commit on 18 Aug 2026.
Was CAPTCHA 4WP removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is CAPTCHA 4WP safe?
4 known vulnerabilities, all fixed (latest in 7.6.1). Not on the exploited list.
Is the latest CAPTCHA 4WP update safe to install?
Caution. Ownership change before 7.6.2: new committer skustrimovic made a first commit on 18 Aug 2026. No one-star spike after it.