Hello,
If you have recaptcha on, it’s possible you have another plugin that allows registrations. Do you have another plugin that allows account creation? For example WooCommerce allows that and our recaptcha is not being applied there.
Also, please check that the setting WordPress -> Settings -> General -> “Anyone can register” is NOT checked. That allows the default WordPress form to accept registrations.
Hiya,
My site is set up to redirect all registration/login traffic to my PB pages, you can’t get to WooCommerce login or registration or wp-login.php, and my server logs do show the spam registrations are happening on the PB URLs.
I will try turning off that checkbox though, I assumed that allowed the Pb registrations but clearly not.
Thanks for your reply!
In that case it looks like it’s getting over the recaptha… which is definitely weird and should not happen.
Do you have any javascript errors in the browser console?
If you try and create a test account from incognito (so you’re not logged in google) does recaptcha work?
Yeah it’s really strange but I’ve had this problem on other sites too, had to put in several different measures (recaptcha, honeypot AND stopforumspam list checkers) before it stopped.
No JS errors relating to the form at all, and trying to register without ticking the Captcha doesn’t work either.
Looking at my Captcha console it definitely is blocking *some* of them but I’m still getting so many registrations that are clearly spam judging from username & emails.