{"id":310718,"date":"2026-06-21T11:52:48","date_gmt":"2026-06-21T11:52:48","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/captchala\/"},"modified":"2026-06-21T11:52:10","modified_gmt":"2026-06-21T11:52:10","slug":"captchala","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/captchala\/","author":23496452,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.0","stable_tag":"1.0.0","tested":"7.0","requires":"6.0","requires_php":"8.0","requires_plugins":null,"header_name":"CaptchaLa","header_author":"CaptchaLa","header_description":"Smart privacy-first CAPTCHA + anti-spam. Protects WordPress core, WooCommerce, and 14+ third-party form plugins. Mandatory server-token anti-replay.","assets_banners_color":"10192e","last_updated":"2026-06-21 11:52:10","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/captcha.la\/integrations\/wordpress","header_author_uri":"https:\/\/captcha.la\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":30,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.0":{"tag":"1.0.0","author":"captchala","date":"2026-06-21 11:52:10"}},"upgrade_notice":{"1.0.0":"<p>First public release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3580608,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3580608,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3580608,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3580608,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Settings page \u2014 credentials section with \"Test connection\" button.","2":"Settings page \u2014 integration toggles auto-detected from your install.","3":"WordPress login form with the CaptchaLa widget rendered.","4":"WooCommerce checkout with the CaptchaLa widget above the Place Order button."}},"plugin_section":[],"plugin_tags":[2656,166108,362,600,2419],"plugin_category":[44,54],"plugin_contributors":[268209],"plugin_business_model":[],"class_list":["post-310718","plugin","type-plugin","status-publish","hentry","plugin_tags-anti-spam","plugin_tags-bot-protection","plugin_tags-captcha","plugin_tags-security","plugin_tags-spam-protection","plugin_category-discussion-and-community","plugin_category-security-and-spam-protection","plugin_contributors-captchala","plugin_committers-captchala"],"banners":{"banner":"https:\/\/ps.w.org\/captchala\/assets\/banner-772x250.png?rev=3580608","banner_2x":"https:\/\/ps.w.org\/captchala\/assets\/banner-1544x500.png?rev=3580608","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/captchala\/assets\/icon-128x128.png?rev=3580608","icon_2x":"https:\/\/ps.w.org\/captchala\/assets\/icon-256x256.png?rev=3580608","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p><strong>Homepage:<\/strong> <a href=\"https:\/\/captcha.la\/\">https:\/\/captcha.la\/<\/a> \u00b7 <strong>Dashboard:<\/strong> <a href=\"https:\/\/dash.captcha.la\/\">https:\/\/dash.captcha.la\/<\/a> \u00b7 <strong>Pricing:<\/strong> <a href=\"https:\/\/captcha.la\/pricing\">https:\/\/captcha.la\/pricing<\/a><\/p>\n\n<p><strong>CaptchaLa<\/strong> is a privacy-first CAPTCHA and anti-spam service. This plugin is the official WordPress integration \u2014 it ships built-in protection for WordPress core forms, WooCommerce, and the most popular third-party form plugins, with one mandatory mode: server-issued tokens that can't be replayed.<\/p>\n\n<h4>Why CaptchaLa?<\/h4>\n\n<ul>\n<li><strong>Privacy-first.<\/strong> No personal-data harvesting, no behavioural ad signals, no tracking.<\/li>\n<li><strong>Stronger token contract.<\/strong> Every page render issues a server-side <code>sct_<\/code> token bound to action + IP; the browser only ever ships back a single-use <code>pt_<\/code> token. Replays, action mismatches, and IP changes are rejected at the SDK boundary.<\/li>\n<li><strong>Free tier<\/strong> for small sites. Paid plans for high-volume traffic and the optional content-moderation add-on.<\/li>\n<li><strong>No hand-coded image CAPTCHAs.<\/strong> The challenge is solved entirely by the CaptchaLa service \u2014 this plugin is thin glue.<\/li>\n<li><strong>Auto-detected form integrations.<\/strong> Drop the plugin in and the settings page lights up with the form plugins it found on your site.<\/li>\n<\/ul>\n\n<h4>Built-in protection points<\/h4>\n\n<ul>\n<li>WordPress core: login, registration, lost-password, comments<\/li>\n<li>WooCommerce: classic + block checkout, pay-for-order, account creation, my-account login \/ register \/ lost-password<\/li>\n<li>Third-party form plugins (auto-detected): Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable Forms, Fluent Forms, Elementor Pro Forms, Divi Builder forms, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet<\/li>\n<\/ul>\n\n<p>More integrations land in v1.1. See <a href=\"https:\/\/captcha.la\/integrations\/wordpress\">https:\/\/captcha.la\/integrations\/wordpress<\/a> for the full target list.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>captchala<\/code> directory to <code>\/wp-content\/plugins\/<\/code>, or install via the WordPress plugin browser.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Sign up at <a href=\"https:\/\/dash.captcha.la\/\">https:\/\/dash.captcha.la\/<\/a> and copy your <strong>App Key<\/strong> and <strong>App Secret<\/strong>.<\/li>\n<li>Open <strong>Settings \u2192 CaptchaLa<\/strong>, paste the keys, click <strong>Test connection<\/strong>, and save.<\/li>\n<li>Toggle the integrations you want protected.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"is%20captchala%20free%3F\"><h3>Is CaptchaLa free?<\/h3><\/dt>\n<dd><p>A free tier covers small sites. High-volume traffic and content-moderation features require a paid plan \u2014 see <a href=\"https:\/\/captcha.la\/pricing\">https:\/\/captcha.la\/pricing<\/a>.<\/p><\/dd>\n<dt id=\"do%20i%20need%20to%20install%20the%20sdk%20separately%3F\"><h3>Do I need to install the SDK separately?<\/h3><\/dt>\n<dd><p>No. The PHP SDK is bundled in the plugin's <code>vendor\/<\/code> directory by the build pipeline, so you don't need Composer.<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20my%20form%20plugin%3F\"><h3>Does it work with my form plugin?<\/h3><\/dt>\n<dd><p>CaptchaLa ships first-class integrations for the 14 most-used form plugins on wordpress.org. See <a href=\"https:\/\/captcha.la\/integrations\/wordpress\">https:\/\/captcha.la\/integrations\/wordpress<\/a> for the full list and the v1.1 roadmap.<\/p><\/dd>\n<dt id=\"does%20it%20work%20with%20woocommerce%20block%20checkout%3F\"><h3>Does it work with WooCommerce Block Checkout?<\/h3><\/dt>\n<dd><p>Yes. The Checkout integration covers both the classic shortcode-based checkout and the new block-based checkout.<\/p><\/dd>\n<dt id=\"will%20it%20block%20logged-in%20admins%3F\"><h3>Will it block logged-in admins?<\/h3><\/dt>\n<dd><p>No. By default the plugin skips CAPTCHA for users with <code>manage_options<\/code> or <code>edit_others_posts<\/code>. The toggle is on the settings page.<\/p><\/dd>\n<dt id=\"how%20does%20the%20server_token%20flow%20work%3F\"><h3>How does the server_token flow work?<\/h3><\/dt>\n<dd><p>On every page render the plugin issues a one-shot <code>sct_<\/code> token from your CaptchaLa account, scoped to the action (login \/ register \/ checkout \/ \u2026) and bound to the visitor's IP. The browser SDK exchanges that token for a <code>pt_<\/code> token after the human challenge passes. The plugin validates the <code>pt_<\/code> token server-side on form submit. Replays, action-mismatches, and IP changes are all rejected.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<li>WordPress core: login, register, lost-password, comment.<\/li>\n<li>WooCommerce: checkout (classic + block), pay-for-order, account creation, login, register, lost-password.<\/li>\n<li>Third-party: Contact Form 7, WPForms, Gravity Forms, Forminator, Formidable, Fluent Forms, Elementor Pro Forms, Divi, BuddyPress, bbPress, Ultimate Member, MemberPress, Easy Digital Downloads, MailPoet.<\/li>\n<\/ul>","raw_excerpt":"Smart privacy-first CAPTCHA for WordPress, WooCommerce, and 14+ form plugins. Mandatory server-token anti-replay.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/310718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=310718"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/captchala"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=310718"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=310718"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=310718"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=310718"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=310718"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=310718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}