Captcha Code
Healthy: vulnerability published 23 Sep 2026, fixed in 3.33.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 23 Sep 2026, fixed in 3.33. Update to version 3.33 or later.23 Sep 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| vinoj.cardoza | 17 Jul 2012 to 4 Nov 2022, 127 commits |
|---|---|
| WebFactory | 22 Dec 2023 to 21 Sep 2026, 29 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 43 days ago
- Releases, 24 months
- 4
- Tested up to
- 7.1 current
- Requires PHP
- 5.2 supported 8.2+
| Q1 2024 | 2 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 2 |
| Q4 2026 | 0 |
Last release 21 Sep 2026. Tested with WordPress 7.1 (current).
Support
100% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 23 Sep 2026 | Captcha Code <= 3.32 - Unauthenticated Login Captcha Protection Bypass | 5.3 | <= 3.32 | 3.33 | 0 |
| 24 Nov 2023 | Captcha Code <= 2.9 - Captcha Bypass | 5.3 | <= 2.9 | 3.0 | 68 |
| 1 Sep 2022 | Captcha Code <= 2.7 - Cross-Site Request Forgery to Plugin Settings Update | 8.8 | <= 2.7 | 2.8 | 64 |
Source: Wordfence Intelligence.
Reputation
| Q1 2024 | 5.0 |
|---|---|
| Q3 2024 | 5.0 |
| Q1 2025 | 1.0 |
| Q3 2025 | 1.0 |
| Q1 2026 | 1.0 |
| Q2 2026 | 5.0 |
Average rating stayed at 5.0 between Q1 2024 and Q2 2026.
| 5 star | 24 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 9 |
- invalid code · 1 star · 14 Feb 2026
- They doing spam · 1 star · 23 Jul 2025
- Not good · 1 star · 15 Jan 2025
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,634 |
|---|---|
| 11 May 2026 | 3,267 |
| 18 May 2026 | 3,202 |
| 25 May 2026 | 2,873 |
| 1 Jun 2026 | 2,742 |
| 8 Jun 2026 | 2,803 |
| 15 Jun 2026 | 2,631 |
| 22 Jun 2026 | 2,400 |
| 29 Jun 2026 | 2,409 |
| 6 Jul 2026 | 2,650 |
| 13 Jul 2026 | 2,804 |
| 20 Jul 2026 | 2,689 |
| 27 Jul 2026 | 24,351 |
| 3 Aug 2026 | 4,694 |
| 10 Aug 2026 | 4,219 |
| 17 Aug 2026 | 3,734 |
| 24 Aug 2026 | 3,291 |
| 31 Aug 2026 | 3,062 |
| 7 Sep 2026 | 2,937 |
| 14 Sep 2026 | 2,728 |
| 21 Sep 2026 | 25,091 |
| 28 Sep 2026 | 4,509 |
| 5 Oct 2026 | 3,799 |
| 12 Oct 2026 | 3,023 |
| 19 Oct 2026 | 3,523 |
| 26 Oct 2026 | 2,803 |
| 2 Nov 2026 | 393 |
Weekly downloads over the last 4 weeks are 47% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 3.33 |
|---|---|
| Author | WebFactory |
| Added | 17 Jul 2012 |
| Last updated | 21 Sep 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 3.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.2 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | captcha, recaptcha, form captcha, comments spam, login captcha |
Other plugins by this author: Maintenance, Under Construction, 301 Redirects - Redirect Manager, WP Reset, Advanced Google reCAPTCHA, Minimal Coming Soon - Coming Soon Page, Custom Sidebars - Dynamic Sidebar Classic Widget Area Manager, Login Lockdown & Protection, Simple Author Box, Sticky Menu & Sticky Header, Email Log, WP Force SSL & HTTPS SSL Redirect
Questions
Is Captcha Code still maintained?
Captcha Code was last updated on 21 Sep 2026. Its Canary status is Healthy.
Is Captcha Code safe?
Captcha Code has no open unpatched vulnerabilities on record. 1 vulnerability was published in the last 24 months. Its Canary status is Healthy.
Who owns Captcha Code?
The wordpress.org author is WebFactory. Recent committers: WebFactory, vinoj.cardoza, plugin-master. We have recorded no ownership change.
What can I use instead of Captcha Code?
Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, CryptX.