Title: Tech Dragon Divi Turnstile Nexus
Author: Tech Dragon
Published: <strong>November 1, 2026</strong>
Last modified: November 1, 2026

---

Search plugins

![](https://ps.w.org/tech-dragon-divi-turnstile-nexus/assets/banner-772x250.png?
rev=3777671)

![](https://ps.w.org/tech-dragon-divi-turnstile-nexus/assets/icon-256x256.png?rev
=3777671)

# Tech Dragon Divi Turnstile Nexus

 By [Tech Dragon](https://profiles.wordpress.org/thetechdragon/)

[Download](https://downloads.wordpress.org/plugin/tech-dragon-divi-turnstile-nexus.1.0.1.zip)

 * [Details](https://wordpress.org/plugins/tech-dragon-divi-turnstile-nexus/#description)
 * [Reviews](https://wordpress.org/plugins/tech-dragon-divi-turnstile-nexus/#reviews)
 *  [Installation](https://wordpress.org/plugins/tech-dragon-divi-turnstile-nexus/#installation)
 * [Development](https://wordpress.org/plugins/tech-dragon-divi-turnstile-nexus/#developers)

 [Support](https://wordpress.org/support/plugin/tech-dragon-divi-turnstile-nexus/)

## Description

**Protect your Divi-powered WordPress site with Cloudflare Turnstile.**

Tech Dragon Divi Turnstile Nexus brings Turnstile protection to supported Divi forms,
WordPress account and comment workflows, and WooCommerce customer and checkout flows.
Instead of treating every visual form or Divi module as a separate transaction, 
Nexus integrates with the platform that actually processes the submission.

**The Free edition includes the protection integrations.** You do not need Pro to
protect supported forms or enable server-side Turnstile verification. **Pro adds
centralized visibility, verification statistics, and precise management controls**
for sites with more forms and protection surfaces to oversee.

#### Protection included in Free

**Native Divi 4 and Divi 5 integration**

 * Divi Contact Form.
 * Divi Email Optin using a supported server-side provider path.
 * Turnstile enablement for individual supported Divi forms through Divi’s Spam 
   Protection settings.
 * Form-specific widget and token handling that preserves Divi’s native submission,
   validation, and feedback behavior.

**WordPress protection**

 * Login.
 * Registration.
 * Lost-password requests.
 * Interactive comments, including supported Divi Comments presentations.

**WooCommerce protection**

 * Customer login, registration, and lost-password requests.
 * Product reviews, including supported Divi Woo review presentations.
 * Classic Checkout and Checkout Block / Store API checkout.
 * Supported Divi Woo checkout layouts inherit the WooCommerce Checkout protection
   surface rather than adding separate checks for each layout module.

**Global settings and site-wide protection**

 * Configure and verify Cloudflare Turnstile credentials in one place.
 * Enable Core Protection for supported WordPress and WooCommerce transactions.
 * If WooCommerce is installed or reactivated later, explicitly enable its protection
   in Nexus Control Center.
 * Choose global widget theme, size, and language settings.
 * Control optional, conditional Cloudflare preconnect.
 * Access basic compatibility information and redacted support diagnostics.

Existing Divi Contact Form and Email Optin modules remain individually configured
in Divi. The global Core Protection setting does not override their per-form selections.

#### Why use Nexus?

 * **Server-side verification:** Cloudflare Siteverify validates submitted tokens
   before the supported transaction is accepted.
 * **Native submission ownership:** WordPress, WooCommerce, and Divi continue to
   handle their own account, checkout, form, and feedback lifecycles.
 * **Form and surface isolation:** A token for one protected form or transaction
   cannot simply be claimed by another.
 * **Fail-closed behavior:** Missing, invalid, expired, reused, or mismatched tokens
   are rejected for protected transactions.
 * **Careful privacy defaults:** Nexus does not send the visitor’s IP address in
   the optional Siteverify `remoteip` field, and does not collect submitted form
   content for verification statistics.
 * **No duplicate protection engines:** Supported Divi Login, Comments, and WooCommerce
   presentation modules inherit the underlying WordPress or WooCommerce transaction
   protection.

#### Go further with Nexus Pro

Nexus Pro is for administrators managing protection across multiple forms and site
workflows. It adds a centralized **Protection Surfaces** management experience while
using the same Core protection integrations as Free.

 * Discover supported Divi forms and view their protection status and locations.
 * Review WordPress and WooCommerce protection surfaces in one place.
 * Search, filter, and sort supported forms and surfaces.
 * Apply supported per-surface protection settings and presentation overrides.
 * Enable or disable selected eligible forms and surfaces through centralized and
   bulk controls.
 * Identify items that need attention without making unsafe changes to ambiguous
   forms.
 * See successful Turnstile verification counts and reset counters when needed.

A **Turnstile verification** is a protected submission attempt for which Cloudflare’s
server-side verification succeeded. It is **not** a count of completed checkouts,
emails delivered, leads, blocked bots, or conversions.

Pro is a separately offered paid edition. Free remains functional without a Pro 
license, including its supported protection integrations.

Learn more about the product and Pro edition at https://thetechdragon.dev/.

#### Compatibility and important boundaries

 * Supported Divi versions: Divi 4.27.4 or later in the Divi 4 series, and native
   Divi 5.x. Divi 4 modules embedded in Divi 5 are not the supported native Divi
   5 integration path.
 * Divi Email Optin protection requires a supported server-side provider flow. Browser-
   only FeedBurner submissions are not protected.
 * WooCommerce Checkout protection covers the supported classic and Checkout Block/
   Store API transaction paths. A third-party express wallet or payment method that
   bypasses those authoritative checkout paths is not automatically protected.
 * Payment callbacks, redirects, webhooks, and separate 3D Secure steps are not 
   challenged as new checkouts after the authoritative checkout submission.
 * A compatible custom login URL can work when it preserves WordPress’s native login
   lifecycle. Independent passwordless or magic-link login systems and separate 
   second-factor screens are not automatically covered.
 * WooCommerce Pay for Order, account-profile editing, Add to Cart, cart updates,
   coupon actions, and shipping calculators are not protected surfaces in this release.
 * Arbitrary Contact Form 7, Gravity Forms, or other third-party form submissions
   are not automatically protected because they appear in a Divi layout.
 * Nexus protects supported interactive comment and review submissions, not arbitrary
   REST/XML-RPC comment creation enabled through custom code or third-party plugins.

Site owners should test their live form, account, payment gateway, optimization,
and caching configurations before relying on protection in production.

#### External service and privacy

This plugin uses **Cloudflare Turnstile**, an external anti-bot service provided
by Cloudflare, Inc. A Cloudflare Turnstile site key and secret key are required.
Cloudflare’s own service terms and privacy documentation apply.

When an enabled Turnstile widget is displayed, the visitor’s browser loads and communicates
with Cloudflare’s challenge service at `https://challenges.cloudflare.com`. Cloudflare
may process browser, network, and device signals, including IP-related information,
as described in its own policies.

When a protected submission is checked, the WordPress server sends the Turnstile
response token and configured secret key to Cloudflare’s Siteverify endpoint at `
https://challenges.cloudflare.com/turnstile/v0/siteverify`. Nexus does not add the
visitor’s IP address through the optional `remoteip` parameter or send submitted
form fields to Siteverify.

The built-in credential verification test also uses Cloudflare Turnstile.

 * Turnstile documentation: https://developers.cloudflare.com/turnstile/
 * Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
 * Turnstile privacy addendum: https://www.cloudflare.com/turnstile-privacy-policy/
 * Cloudflare website terms: https://www.cloudflare.com/website-terms/

#### Freemius: optional connection, updates, and licensing

This plugin includes the Freemius SDK, provided by Freemius, Inc., for optional 
account connection, product updates and notifications, upgrades, and management 
of paid licenses. Free users see an optional Freemius connection screen and can 
select **Skip** without sharing their information with Freemius. The supported Free
protection features remain available if they skip.

If a site administrator opts in, Freemius may receive that administrator’s name 
and email address, website URL, plugin version and activation status, WordPress 
and PHP versions, site language, and optionally the site’s installed plugins and
themes, according to the permissions selected. Freemius uses this information to
provide the connected service, product communications, compatibility information,
and related account functions.

Paid purchases and Pro license activation use Freemius for payment, account and 
licensing services. Those transactions involve additional purchase, account and 
billing information under Freemius’s terms. The Free opt-in and skip options are
distinct from paid license activation.

 * Freemius data practices: https://freemius.com/privacy/data-practices/
 * Freemius terms of service: https://freemius.com/terms/

Tech Dragon Divi Turnstile Nexus is an independent third-party plugin. It is not
affiliated with or endorsed by Elegant Themes or Cloudflare.

## Installation

 1. Install and activate **Tech Dragon Divi Turnstile Nexus** in WordPress.
 2. Make sure your site uses PHP 8.2 or newer, WordPress 7.1 or newer, and a supported
    Divi version.
 3. Create a Cloudflare Turnstile widget and copy its **site key** and **secret key**.
 4. Open **Nexus Control Center** in your WordPress dashboard. Save your credentials
    and complete the built-in Turnstile connection verification.
 5. For Divi Contact Form and Email Optin modules, open the module’s Spam Protection
    settings and select Turnstile on each form you want to protect.
 6. Enable **Core Protection** in Nexus Control Center for supported WordPress and 
    WooCommerce workflows.
 7. Review global presentation settings, then test your site’s published forms, account
    pages, comments, product reviews, and checkout.

For support and documentation, visit https://thetechdragon.dev/plugins/divi-turnstile-
nexus/support/.

## FAQ

### Do I need Nexus Pro to protect my forms or checkout?

No. The Free edition includes the supported Divi, WordPress, and WooCommerce Turnstile
integrations. Pro adds centralized management, visibility, verification counts, 
bulk actions, and granular presentation options.

### What is the difference between individual Divi form protection and Core Protection?

Divi Contact Form and Email Optin protection is selected on each supported module
in Divi’s Spam Protection settings. The separate Core Protection setting controls
the global default for supported WordPress and WooCommerce transactions, including
logins, comments, customer accounts, reviews, and checkout.

### Does Nexus work with Divi 5?

Yes, with native Divi 5 Contact Form and Email Optin modules using supported server-
side submission paths. Legacy Divi 4 modules running inside Divi 5 are not part 
of the native Divi 5 support scope.

### Does Nexus protect WooCommerce Checkout Blocks?

Yes. Nexus includes adapters for both classic WooCommerce checkout and the WooCommerce
Checkout Block / Store API transaction. Specific third-party gateways and express-
wallet routes still need to pass through the supported authoritative checkout transaction
to be covered.

### Will I see more than one Turnstile challenge in a Divi WooCommerce checkout layout?

Nexus treats WooCommerce checkout as one protected transaction. Divi checkout presentation
modules inherit that protection instead of each registering their own independent
Turnstile engine.

### Does Nexus work with two-factor authentication or a custom WordPress login URL?

Nexus uses WordPress login lifecycle hooks rather than depending on a fixed `wp-
login.php` address. Compatibility has been tested with representative login relocation
and 2FA flows. Separate second-factor challenges and alternative login systems that
bypass WordPress’s native login transaction are outside its automatic protection
scope.

### Can I choose the appearance of the Turnstile widget?

Free includes global theme, size, and language options, along with optional preconnect.
Pro adds supported per-surface presentation overrides so selected forms or workflows
can differ from the global defaults.

### What do the Pro verification counters measure?

They count successful Cloudflare Siteverify checks associated with protected submission
attempts. They do not measure completed orders, delivered messages, conversions,
or the number of bots blocked.

### Does Nexus send visitor IP addresses to Cloudflare?

Nexus does not transmit the visitor’s IP address using Siteverify’s optional `remoteip`
parameter. The visitor’s browser still connects directly to Cloudflare Turnstile,
which processes data under Cloudflare’s own privacy terms.

### Does Nexus protect third-party forms placed inside Divi?

Not automatically. Forms managed by Contact Form 7, Gravity Forms, and other third-
party form systems are outside the protected integration set for this release.

### What happens if Cloudflare verification cannot be completed?

A protected submission is rejected rather than silently accepted. The visitor can
retry through the supported form’s normal flow when verification becomes available.

### Where can I get help?

See the plugin’s Help screen and support resources at https://thetechdragon.dev/
plugins/divi-turnstile-nexus/support/. Its diagnostics are designed to omit secret
keys, Turnstile tokens, and submitted form content.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Tech Dragon Divi Turnstile Nexus” is open source software. The following people
have contributed to this plugin.

Contributors

 *   [ Tech Dragon ](https://profiles.wordpress.org/thetechdragon/)

[Translate “Tech Dragon Divi Turnstile Nexus” into your language.](https://translate.wordpress.org/projects/wp-plugins/tech-dragon-divi-turnstile-nexus)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/tech-dragon-divi-turnstile-nexus/),
check out the [SVN repository](https://plugins.svn.wordpress.org/tech-dragon-divi-turnstile-nexus/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/tech-dragon-divi-turnstile-nexus/)
by [RSS](https://plugins.trac.wordpress.org/log/tech-dragon-divi-turnstile-nexus/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.1

 * Security hardening.

#### 1.0.0

 * Initial Release.

## Meta

 *  Version **1.0.1**
 *  Last updated **10 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 7.1 or higher **
 *  Tested up to **7.1.4**
 *  PHP version ** 8.2 or higher **
 * Tags
 * [cloudflare](https://wordpress.org/plugins/tags/cloudflare/)[divi](https://wordpress.org/plugins/tags/divi/)
   [spam](https://wordpress.org/plugins/tags/spam/)[turnstile](https://wordpress.org/plugins/tags/turnstile/)
   [woocommerce](https://wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://wordpress.org/plugins/tech-dragon-divi-turnstile-nexus/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/tech-dragon-divi-turnstile-nexus/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/tech-dragon-divi-turnstile-nexus/reviews/)

## Contributors

 *   [ Tech Dragon ](https://profiles.wordpress.org/thetechdragon/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/tech-dragon-divi-turnstile-nexus/)