Description
Homepage: https://captcha.la/ · Dashboard: https://dash.captcha.la/ · Pricing: https://captcha.la/pricing
CaptchaLa is a privacy-first CAPTCHA and anti-spam service. This plugin is the official WordPress integration — it ships built-in protection for WordPress core forms, WooCommerce, and the most popular third-party form plugins, with one mandatory mode: server-issued tokens that can’t be replayed.
Why CaptchaLa?
- Privacy-first. No personal-data harvesting, no behavioural ad signals, no tracking.
- Stronger token contract. Every page render issues a server-side
sct_token bound to action + IP; the browser only ever ships back a single-usept_token. Replays, action mismatches, and IP changes are rejected at the SDK boundary. - Free tier for small sites. Paid plans for high-volume traffic and the optional content-moderation add-on.
- No hand-coded image CAPTCHAs. The challenge is solved entirely by the CaptchaLa service — this plugin is thin glue.
- Auto-detected form integrations. Drop the plugin in and the settings page lights up with the form plugins it found on your site.
Built-in protection points
- WordPress core: login, registration, lost-password, comments
- WooCommerce: classic + block checkout, pay-for-order, account creation, my-account login / register / lost-password
- Third-party form plugins (auto-detected): Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable Forms, Fluent Forms, Elementor Pro Forms, Divi Builder forms, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet
More integrations land in v1.1. See https://captcha.la/integrations/wordpress for the full target list.
Installation
- Upload the
captchaladirectory to/wp-content/plugins/, or install via the WordPress plugin browser. - Activate the plugin.
- Sign up at https://dash.captcha.la/ and copy your App Key and App Secret.
- Open Settings CaptchaLa, paste the keys, click Test connection, and save.
- Toggle the integrations you want protected.
FAQ
-
Is CaptchaLa free?
-
A free tier covers small sites. High-volume traffic and content-moderation features require a paid plan — see https://captcha.la/pricing.
-
Do I need to install the SDK separately?
-
No. The PHP SDK is bundled in the plugin’s
vendor/directory by the build pipeline, so you don’t need Composer. -
Does it work with my form plugin?
-
CaptchaLa ships first-class integrations for the 14 most-used form plugins on wordpress.org. See https://captcha.la/integrations/wordpress for the full list and the v1.1 roadmap.
-
Does it work with WooCommerce Block Checkout?
-
Yes. The Checkout integration covers both the classic shortcode-based checkout and the new block-based checkout.
-
Will it block logged-in admins?
-
No. By default the plugin skips CAPTCHA for users with
manage_optionsoredit_others_posts. The toggle is on the settings page. -
How does the server_token flow work?
-
On every page render the plugin issues a one-shot
sct_token from your CaptchaLa account, scoped to the action (login / register / checkout / …) and bound to the visitor’s IP. The browser SDK exchanges that token for apt_token after the human challenge passes. The plugin validates thept_token server-side on form submit. Replays, action-mismatches, and IP changes are all rejected.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“CaptchaLa” is open source software. The following people have contributed to this plugin.
Contributors
Translate “CaptchaLa” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.0
- Initial release.
- WordPress core: login, register, lost-password, comment.
- WooCommerce: checkout (classic + block), pay-for-order, account creation, login, register, lost-password.
- Third-party: Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable, Fluent Forms, Elementor Pro Forms, Divi, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet.