Skip to content
PluginCanary

Invisible Anti-Spam & CAPTCHA

by Matthias Nordwig · 5,000+ active installs · Checked 5 Nov 2026
Healthy

Healthy: released yesterday, tested with WordPress 7.1, no open vulnerabilities.

91/ 100Healthy
Canary Score

Based on 4 of 5 areas

Sub-scores for Invisible Anti-Spam & CAPTCHA
Ownership100
Maintenance100
Security70
Support100
ReputationNo data

How the score works

Active signals

Open issues right now, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 5 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.

Quick answers

Is Invisible Anti-Spam & CAPTCHA still maintained?
Yes. Last release 4 Nov 2026, 24 releases in the last 24 months. 4 Nov 2026 · wordpress.org
Who owns Invisible Anti-Spam & CAPTCHA, and has it changed hands?
No change recorded. Main committer matthiasnordwig since Nov 2022. 5 Nov 2026 · SVN log
Was Invisible Anti-Spam & CAPTCHA removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
Is Invisible Anti-Spam & CAPTCHA safe?
5 known vulnerabilities, all fixed (latest in 5.1.1). Not on the exploited list. 15 Sep 2026 · Wordfence Intelligence
Is the latest Invisible Anti-Spam & CAPTCHA update safe to install?
No ownership change before 6.3.1. No one-star spike after it. 4 Nov 2026 · Release history

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master16 Nov 2022 to 16 Nov 2022, 1 commits
matthiasnordwig17 Nov 2022 to 4 Nov 2026, 147 commits

2 committers recorded. No ownership changes recorded since 2022.

Maintenance

Last release
yesterday
Releases, 24 months
24
Tested up to
7.1 current
Requires PHP
7.1 supported 8.2+
Releases per quarter
Releases per quarter for Invisible Anti-Spam & CAPTCHA
Q1 20247
Q2 20243
Q3 20244
Q4 20240
Q1 20250
Q2 20256
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 202615
Q4 20263

Last release 4 Nov 2026. Tested with WordPress 7.1 (current).

Support

Resolved, last 2 months
100%
Threads, last 2 months
5

Trend appears after 8 weekly snapshots.

Security record

5 vulnerabilities in 24 months, all patched (latest fixed in 5.1.1).

Show 5 patched vulnerabilities
DateIssueCVSSAffectedFixed inDays to patch
15 Sep 2026Missing Authorization4.3<= 5.1.05.1.1Before disclosure
14 Aug 2026Unauthenticated Stored Cross-Site Scripting via 'action' Parameter7.2<= 5.15.1.1Before disclosure
14 Aug 2026Authenticated (Editor+) SQL Injection via Pattern JSON Keys/Values4.9<= 5.15.1.1Before disclosure
14 Aug 2026Authenticated (Editor+) SQL Injection via 'key' Parameter4.9<= 5.15.1.1Before disclosure
5 Jun 2025Cross-Site Request Forgery4.3<= 4.1.14.1.2Before disclosure

Changelog mentions of security fixes: 5.0 (security, CSRF, nonce); 5.1.1 (security, vulnerability, XSS, CSRF, SQL injection, nonce, escaping, sanitize); 5.3.0 (security); 5.3.4 (security); 6.1.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Last 90 days vs lifetime average rating for Invisible Anti-Spam & CAPTCHA
Last 90 daysNo reviews
Lifetime4.8
Rating distribution
5 star48
4 star0
3 star0
2 star0
1 star2

Momentum

Active installs
5,000+
Downloads, last full week
3,002
Weekly downloads, last 26 complete weeks
Weekly downloads for Invisible Anti-Spam & CAPTCHA
4 May 202628
11 May 202664
18 May 202677
25 May 202688
1 Jun 202684
8 Jun 202679
15 Jun 2026103
22 Jun 2026142
29 Jun 202698
6 Jul 202675
13 Jul 20262,099
20 Jul 2026675
27 Jul 2026484
3 Aug 20266,166
10 Aug 20266,872
17 Aug 20264,625
24 Aug 20262,654
31 Aug 2026658
7 Sep 2026507
14 Sep 2026520
21 Sep 20262,583
28 Sep 2026910
5 Oct 20262,682
12 Oct 2026922
19 Oct 2026996
26 Oct 20263,002

Weekly downloads over the last 4 weeks are 33% above the 26-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Akismet Anti-spamScore 95 · 5,000,000+Antispam BeeScore 95 · 700,000+Really Simple CAPTCHAScore 95 · 300,000+

Facts

Full name
Invisible Anti-Spam & CAPTCHA - reCAPTCHA Alternative for All Forms
Version
6.3.1
Author
Matthias Nordwig
Added
17 Nov 2022
Last updated
4 Nov 2026
Active installs
5,000+
Requires WordPress
4.8
Tested up to
7.1.4
Requires PHP
7.1
Category
Security & Privacy > Spam & Bot Protection
Tags
spam, captcha, anti-spam, recaptcha, spam protection

Questions about Invisible Anti-Spam & CAPTCHA

Is Invisible Anti-Spam & CAPTCHA still maintained?

Yes. Last release 4 Nov 2026, 24 releases in the last 24 months.

Who owns Invisible Anti-Spam & CAPTCHA, and has it changed hands?

No change recorded. Main committer matthiasnordwig since Nov 2022.

Was Invisible Anti-Spam & CAPTCHA removed from wordpress.org?

No. Listed on wordpress.org as of 5 Nov 2026.

Is Invisible Anti-Spam & CAPTCHA safe?

5 known vulnerabilities, all fixed (latest in 5.1.1). Not on the exploited list.

Is the latest Invisible Anti-Spam & CAPTCHA update safe to install?

No ownership change before 6.3.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 5 Nov 2026.Report a data issue