Skip to content
PluginCanary

Simple CAPTCHA with Cloudflare Turnstile

by Elliot Sowersby / RelyWP · 200,000+ active installs · Checked 3 Nov 2026
Healthy5 Warnings

Healthy: vulnerability published 3 Nov 2026, fixed in 1.44.4.

81/ 100 Canary Score
Sub-scores for Simple CAPTCHA with Cloudflare Turnstile
Ownership100
Maintenance100
Security65
Support59
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 3 Nov 2026, fixed in 1.44.4. Update to version 1.44.4 or later.3 Nov 2026Evidence
  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 1.44.1. Update to version 1.44.1 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Sep 2026, fixed in 1.42.3. Update to version 1.42.3 or later.9 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 1.42.3. Update to version 1.42.3 or later.8 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 8 Sep 2026, fixed in 1.42.3. Update to version 1.42.3 or later.8 Sep 2026Evidence
  • InfoSEC-37 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master15 Oct 2022 to 15 Oct 2022, 1 commits
Elliotvs15 Oct 2022 to 31 Oct 2026, 325 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 days ago
Releases, 24 months
42
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for Simple CAPTCHA with Cloudflare Turnstile
Q1 20240
Q2 20240
Q3 20248
Q4 20242
Q1 20253
Q2 20251
Q3 20256
Q4 20257
Q1 20261
Q2 202610
Q3 20267
Q4 20265

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Support

59% of 39 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
3 Nov 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.44.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 1.44.31.44.40
29 Oct 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.44.0 - Missing Authorization5.3<= 1.44.01.44.10
9 Sep 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Unauthenticated Arbitrary Shortcode Execution6.5<= 1.42.11.42.30
8 Sep 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Captcha Bypass5.3<= 1.42.11.42.30
8 Sep 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.42.1 - Unauthenticated Arbitrary Shortcode Execution6.1<= 1.42.11.42.30
3 Aug 2026Simple CAPTCHA with Cloudflare Turnstile <= 1.41.0 - Unauthenticated CAPTCHA Bypass5.3<= 1.41.01.42.00
8 May 2026Simple CAPTCHA Alternative with Cloudflare Turnstile <= 1.38.0 - Broken Authorization5.3<= 1.38.01.38.10
22 Sep 2023Simple Cloudflare Turnstile <= 1.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 1.23.11.23.214

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Simple CAPTCHA with Cloudflare Turnstile
Q2 20264.6
Q3 20264.2
Q4 20265.0

Average rating rose from 4.6 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star228
4 star9
3 star7
2 star4
1 star14
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Simple CAPTCHA with Cloudflare Turnstile
4 May 202611,813
11 May 202617,985
18 May 202615,478
25 May 202661,187
1 Jun 202633,336
8 Jun 202615,803
15 Jun 202663,746
22 Jun 202687,973
29 Jun 202621,650
6 Jul 202617,148
13 Jul 202614,169
20 Jul 202623,338
27 Jul 2026121,153
3 Aug 202626,603
10 Aug 202614,488
17 Aug 202613,283
24 Aug 202611,961
31 Aug 202610,789
7 Sep 2026212,868
14 Sep 2026109,410
21 Sep 202637,783
28 Sep 2026100,717
5 Oct 202632,449
12 Oct 202618,301
19 Oct 202623,227
26 Oct 2026289,283
2 Nov 202618,078

Weekly downloads over the last 4 weeks are 65% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

hCaptcha for WPScore 94 · 70,000+ActiveLayer Anti-Spam: Spam Protection for Forms & CommentsScore 93 · 10,000+SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce)Score 93 · 10,000+Akismet Anti-spam: Spam ProtectionScore 92 · 5,000,000+CryptXScore 92 · 10,000+

Facts

Version1.44.5
AuthorElliot Sowersby / RelyWP
Added15 Oct 2022
Last updated31 Oct 2026
Active installs200,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHPnot stated
CategoryE-commerce & Shopping
Tagsspam, captcha, protect, turnstile, cloudflare

Other plugins by this author: reCAPTCHA for WooCommerce, Coupon Affiliates - Affiliate Plugin for WooCommerce, Tax Exemption for WooCommerce, Simple Points and Rewards for WooCommerce - Create a Loyalty Program, AI Text to Speech - TTS Plugin For WordPress, Advanced Customer Reports for WooCommerce, RelyWP: Simple Store Credit - Wallet System for WooCommerce

Questions

Is Simple CAPTCHA with Cloudflare Turnstile still maintained?

Simple CAPTCHA with Cloudflare Turnstile was last updated on 31 Oct 2026. Its Canary status is Healthy.

Is Simple CAPTCHA with Cloudflare Turnstile safe?

Simple CAPTCHA with Cloudflare Turnstile has no open unpatched vulnerabilities on record. 7 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Simple CAPTCHA with Cloudflare Turnstile?

The wordpress.org author is Elliot Sowersby / RelyWP. Recent committers: Elliotvs, plugin-master. We have recorded no ownership change.

What can I use instead of Simple CAPTCHA with Cloudflare Turnstile?

Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, CryptX.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue