Joan Morci

Hi @otto42

And it’s appreciated. But you have to understand that not everyone has the Wordfence security plugin (I do, and recommend in the course, to my students and even configuration of email alerts).

But if now that you just closed 4 post, you put a post posted on the top… sure you save more post replies.

Because the questions that I ask myself and more people are…
1º. What will happen to this plugin? And the author? I mean… will not there be more new versions?
2º. Alternatives to this plugin? I only see this as the most similar:
‘Math Captcha‘ (By dFactory) although it has not been updated for 1 year… it works in WP 4.9.1

Greetings from Spain & Goodnight! 🙂
Pd.: I did read the article until the end, and that’s why I put it in all the other post, so that people would not have any doubt with the source where it is said.

• This reply was modified 8 years, 8 months ago by Joan Morci. Reason: I did read the article until the end

From Wordfence…

What We’ve Done So Far

As of this writing, we’ve created three firewall rules in total to protect our users’ sites from the backdoor installation. Premium customers received the first two rules on December 8th and the third one on the 14th. These rules also protect against the backdoor itself executing in Captcha as well as in the five other plugins available for download on simplywordpress.net. Free users will receive these rules 30 days from the original publish date via the community version of the Threat Defense Feed.

We have also been working with the WordPress.org plugins team to get out a patched version of Captcha (4.4.5) that is backdoor-free. The plugins team has used the automatic update to upgrade all backdoored versions (4.3.6 – 4.4.4) up to the new 4.4.5 version. Over the course of the weekend over 100,000 sites running versions 4.3.6 – 4.4.4 were upgraded to 4.4.5. They have also blocked the author from publishing updates to the plugin without their review.

Our Recommendations

We recommend that you uninstall the Captcha plugin immediately from your site. Based on the public data we’ve gathered, this developer does not have user safety in mind and is very likely a criminal actor attempting yet another supply chain attack. You should also ensure that you’ve enabled automatic updates within WordPress – that’s still one of the best ways to keep your site secure before disclosures like this take place. We also recommend using the Premium version of Wordfence, to proactively defend your site against threats like this one.

—

The most viable alternative seems: ‘Really Simple CAPTCHA‘ (By Takayuki Miyoshi, creator of ‘Contact Form 7’ and compatible with it)

Greetings!

From Wordfence…

What We’ve Done So Far

As of this writing, we’ve created three firewall rules in total to protect our users’ sites from the backdoor installation. Premium customers received the first two rules on December 8th and the third one on the 14th. These rules also protect against the backdoor itself executing in Captcha as well as in the five other plugins available for download on simplywordpress.net. Free users will receive these rules 30 days from the original publish date via the community version of the Threat Defense Feed.

We have also been working with the WordPress.org plugins team to get out a patched version of Captcha (4.4.5) that is backdoor-free. The plugins team has used the automatic update to upgrade all backdoored versions (4.3.6 – 4.4.4) up to the new 4.4.5 version. Over the course of the weekend over 100,000 sites running versions 4.3.6 – 4.4.4 were upgraded to 4.4.5. They have also blocked the author from publishing updates to the plugin without their review.

Our Recommendations

We recommend that you uninstall the Captcha plugin immediately from your site. Based on the public data we’ve gathered, this developer does not have user safety in mind and is very likely a criminal actor attempting yet another supply chain attack. You should also ensure that you’ve enabled automatic updates within WordPress – that’s still one of the best ways to keep your site secure before disclosures like this take place. We also recommend using the Premium version of Wordfence, to proactively defend your site against threats like this one.

—

The most viable alternative seems: ‘Really Simple CAPTCHA‘ (By Takayuki Miyoshi, creator of ‘Contact Form 7’ and compatible with it)

Greetings!

Hi @wpshopmart

I’m sorry to say that the partner is right.

I would have already given a 5 star note, because the plugin really deserves it. It is beautiful and very useful. I am using it on a website, but I have observed as an ugly detail that the text is not responsive. Do not you use FitText?

I show you capture to prove it. Here you will see that ‘Headline’ by default it is possible to change size in ‘px’. But I changed it to ’em'(Custom CSS) because it fits a bit better, not totally.

It is a defect for long words. Also words separated by slashes but attached to it.

And also link to my website, where I change the values of the ‘Headline’.

Custom CSS (Headline)

.color {
    font-size: 0.8em;
}

It also has the error of the white strip when downloading scroll on mobile. It’s a minor problem, but it really messes up the great work done in the plugin, maxime when it also claims to be responsive.

However, for the great work done and everything it offers I did a video tutorial in Spanish.

Will you solve this matter?

• This reply was modified 8 years, 8 months ago by Joan Morci. Reason: Detail the problem of the white strip when scrolling down in mobile version, and link to the tutorial in Spanish video of the plugin