Thank you for the report. We’ve prepared hCaptcha 5.4.1 RC1 with changes to form registration and verification that may address this error. Could you try it on a staging copy of your site?
Please keep your Wordfence, WPS Hide Login, WP Rocket, and hCaptcha settings the same, clear the WP Rocket cache after installing the ZIP, and try logging in from a new private browser window.
Let us know whether the error persists. If it does, please tell us whether it appears on the login form or on a separate 403 page, and what value you have set for “Login Attempts Before hCaptcha.” Please don’t share credentials or hCaptcha keys.
Thank you for helping us verify the fix before the final release.
Error on the login page above the login box: Bad hCaptcha signature!
Also used wp-cli to disable the plugin and able to login again Plugin actually had wordpress login toggle disabled so it’s strange to block the entire wp-login with a hcaptcha error.
This reply was modified 3 weeks, 3 days ago by kjandrews.
Even with the provided RC it does not work and it kind of stresses me out that I had to disable hCaptcha now since we use it at very important contact forms and for all logins.
I have experienced this issue with logging in as well. I am not going to use the RC version I can wait for an update. Right now I am using the web host management software to log in to my website.
