Wbcom Designs
Contact Tell us about your project
Release notes / reCaptcha for BuddyPress
BuddyPress Add-on Plugin

reCaptcha for BuddyPress

Spam registrations and bot submissions hit every public form on a WordPress site, from WP login to BuddyPress registration to WooCommerce checkout. Wbcom Captcha Manager adds reCaptcha to all of them in one plugin: WP login, WP registration, WP lost password, BuddyPress registration, WooCommerce login, WooCommerce registration, WooCommerce order pages, and bbPress topic and reply forms. Each form has its own on/off toggle.

19 releases
v2.2.2 latest
September 19, 2026 shipped
View product → View on store GitHub releases →

v2.2.2 Latest

September 19, 2026
Fix 1

Fix

  • Renamed the admin layout partial away from a filename that web application firewalls (Cloudflare, ModSecurity, Imunify360) block on upload, so the plugin ZIP installs on hosts with upload scanning enabled.

v2.2.1

September 19, 2026
New 1 Improve 1 Fix 4 Dev 2

New

  • Added a "Comments: Skip for Logged-in Users" setting under Protection. New installs start with it on; sites that update keep showing the comment CAPTCHA to members until you change it.

Improve

  • Admins and editors no longer see the CAPTCHA on comment forms, since they can approve any comment.

Fix

  • Sending a password reset from Users or Edit User reported "0 password reset emails sent" when the Lost Password CAPTCHA was on. Admin screens show no CAPTCHA, so the reset was always rejected. The front-end Lost Password form stays protected.
  • Replying to a comment from the Comments screen or the Dashboard failed with "Security verification failed" when the Comment Form CAPTCHA was on. Front-end comment forms stay protected.
  • The "disable submit until the CAPTCHA is solved" option did nothing on the WordPress login, registration and lost password screens with reCAPTCHA v2 or hCaptcha. The button now stays disabled until the check is completed.
  • With reCAPTCHA v3, logging in from the login widget or CAPTCHA Login block could fail with "Security verification failed" when Log In was clicked before the security check finished loading, and the login was sent twice. It now waits for the check and sends once.

Dev

  • Added the wbc_captcha_error_message filter to change the CAPTCHA error text for any protected form, such as a different message on checkout than on comments.
  • The wbc_should_render_captcha filter is now honoured by every provider, not only reCAPTCHA v3, so skipping a CAPTCHA with it and wbc_should_verify_captcha hides the widget and skips the check together.

v2.2.0

August 11, 2026
Fix 8 Dev 2

Fix

  • reCAPTCHA v3 never issued a token, so every protected form failed verification and reloaded with the entered values cleared. The script that requests the token ran before the reCAPTCHA API had loaded and stopped with an error.
  • Logging in from a Login/Logout block, a login widget or a theme login form always failed with "Security verification failed". These forms are built by wp_login_form(), which never received the CAPTCHA, while every login attempt was still being checked.
  • The IP Whitelist hid the CAPTCHA but still required it, locking out the listed addresses on reCAPTCHA v2, hCaptcha, Turnstile and ALTCHA. Only reCAPTCHA v3 honoured the list.
  • A form submitted before reCAPTCHA v3 finished loading is now held for a moment and submitted with a valid token, instead of being rejected.
  • reCAPTCHA v3 now loads on forms placed on any page, including the front page, and on BuddyPress group creation and Easy Digital Downloads checkout.
  • reCAPTCHA v3 forms that render after the page footer no longer lose their token.
  • reCAPTCHA v3 no-conflict mode had no effect on sites upgraded from an earlier version, so a competing CAPTCHA script from another plugin was never removed.
  • The settings screen scrolled sideways by two pixels on phones.

Dev

  • Added the wbc_recaptcha_v3_is_captcha_page filter to preload the reCAPTCHA v3 script on pages the plugin cannot detect.
  • The wbc_should_verify_captcha filter is now honoured by every provider, not only reCAPTCHA v3.

v2.1.0

July 1, 2026
New 2 Improve 6 Fix 14 Security 6 Dev 5 Compat 1

New

  • Added a Discover tab to the admin with curated free Wbcom Designs tools.
  • Added German, Spanish, French, Italian and Portuguese (Brazil) translations.

Improve

  • Refreshed the settings screen with a modern card-based layout.
  • reCAPTCHA and Turnstile scripts now load deferred on all browsers, improving page load speed and Core Web Vitals.
  • More reliable ALTCHA spam detection.
  • Automatic updates ship preactivated - there is no license key to enter and no account step.
  • Section headings on Quick Setup, Protection and Advanced match the Overview tab instead of using a different blue and type size.
  • Protection toggle cards are the same width in every section; the BuddyPress group no longer stretches wider than the WordPress group.

Fix

  • Italian admin labels were shifted by one, so menu items read as the wrong thing - "Settings" showed as "Account", "Save Changes" as "Plugin Updates". Realigned every affected entry and restored the seven translations that had been dropped.
  • The Italian block editor sidebar for the CAPTCHA Login block carried the same shift and is now correct.
  • Text fields on Quick Setup and Advanced rendered at the browser default width and cut off their own values, so a saved error message could not be read back. They now fill the field column.
  • The IP Whitelist box is a full-width monospace field instead of a single narrow line.
  • The CAPTCHA language setting now applies correctly for hCaptcha and reCAPTCHA v2.
  • Corrected the language selector display on the Advanced settings tab.
  • The reCAPTCHA v3 score threshold set in the admin now takes effect.
  • Removed unnecessary debug entries from the server error log.
  • Prevented a fatal error on every failed hCaptcha verification.
  • Prevented a rare fatal error when another plugin or theme uses the same generic class names.
  • Prevented a fatal error on the front end when ALTCHA is the active provider.
  • The plugin never registered its text domain, so bundled translations could never load.
  • Block editor translations could never resolve, because the editor script was never told where this plugin keeps its translation files.
  • Around thirty admin strings had no translatable source and always rendered in English.

Security

  • Comment forms are now protected on every site, not only sites running WooCommerce.
  • Lost-password submissions are now verified on every site, not only sites running WooCommerce.
  • BuddyPress group creation is now blocked when the CAPTCHA is not completed.
  • The login widget now resets its CAPTCHA after a failed attempt, closing a token-reuse window.
  • The login form can no longer be submitted without completing the CAPTCHA on sites that do not use WooCommerce.
  • The setup wizard is now restricted to administrators.

Dev

  • Corrected the minimum supported WordPress version metadata.
  • Settings-field styles are scoped to the card-panel shell, which had orphaned them.
  • Admin content styles now consume the shared admin design tokens; five competing accent blues consolidated to one.
  • Removed an unused appearance-cards stylesheet that was still being loaded on every admin screen.
  • PHPStan level 5 runs clean against the plugin's own config.

Compat

  • Tested with WordPress 7.0.

v2.0.2

Fix 5 Compat 1

Fix

  • WordPress Coding Standards compliance across all PHP files
  • Plugin Check compatibility improvements
  • Removed deprecated load_plugin_textdomain calls
  • Added direct file access protection to all files
  • Replaced external Font Awesome CDN with WordPress built-in dashicons

Compat

  • WordPress 6.9

v2.0.1

Fix 2 Compat 1

Fix

  • Fatal error caused by undefined WooCommerce hook callbacks (woo_verify_wp_register_captcha, woo_verify_wp_lostpassword_captcha, woo_remove_no_conflict)
  • PHP 8+ TypeError in settings migration when captcha version option is not set (strtolower on non-string)

Compat

  • WordPress 6.7.2

v2.0.0

New 15 Improve 15 Fix 1

New

  • Contact Form 7 integration with CAPTCHA protection
  • WPForms integration for drag & drop form builder
  • Gravity Forms integration for advanced form solution
  • Ninja Forms integration for flexible form creator
  • Forminator integration for versatile form builder
  • Elementor Pro Forms integration with native support
  • Divi Builder Contact Forms integration
  • Easy Digital Downloads integration for checkout and registration protection
  • MemberPress integration for membership signups and login
  • Ultimate Member integration for member registration and login
  • BuddyPress group creation form protection
  • AJAX Login Widget for secure login anywhere on your site
  • Gutenberg Login Block with CAPTCHA protection
  • ALTCHA service support - self-hosted CAPTCHA with no external dependencies
  • Plugin update system for automatic update notifications

Improve

  • Complete plugin revamp with extensive new integrations
  • Complete UI/UX overhaul with modern, intuitive admin interface
  • Quick Setup Wizard for 3-step configuration
  • Unified Protection Tab with all form settings in one location
  • Advanced Settings with consolidated appearance and security options
  • Navigation with tab icons and reduced from 7+ tabs to 4 streamlined tabs
  • Modular settings architecture - settings appear only when relevant plugins are active
  • Code organization with 50% codebase reduction
  • Security with strengthened nonce verification across all forms
  • Input validation and sanitization throughout plugin
  • CAPTCHA loading and validation performance
  • IP whitelisting functionality for trusted IPs
  • Modern card-based design layout throughout admin interface
  • Better performance with faster load times
  • Comprehensive developer documentation

Fix

  • Compatibility issues with latest WordPress, WooCommerce, and BuddyPress versions

v1.7.0

Improve 2 Fix 3

Improve

  • Added filters and removed escaping functions.
  • Renamed the menu "Post Comment Form" for better usability.

Fix

  • Manage bbPress topic's reply button not disabling before captcha validation.
  • Plugin content-related issues.
  • reCAPTCHA issue with WooCommerce integration.

v1.6.3

Fix 3

Fix

  • (#73) Issue with BuddyBoss Registration button
  • (#71) Added admin topic and reply icons
  • (#70) Fatal error

v1.6.2

Fix 1

Fix

  • Fixed Plugin redirect issue when multi plugin activate the same time

v1.6.1

Fix 1

Fix

  • (#68)Fixed lost password captcha issue

v1.6.0

Fix 2

Fix

  • (#67) Fixed single group forum reply in captcha not showing
  • Fixed buddyboss admin notice issue

v1.5.0

Fix 7

Fix

  • Fixed reCaptcha V3 admin UI
  • Hide admin notices and update admin theme extension & support title
  • Added faq section style
  • Remove unused icons code and update prefix
  • Update admin backend UI
  • Added support for Bp Lock, Bp private community pro plugin
  • Fixed ip resctriction warning issue

v1.4.1

Fix 1

Fix

  • (#56) Fixed ip restriction not working

v1.4.0

Fix 4

Fix

  • (#52)fixed admin setting UI issue
  • (#55)Fixed need to add notice in default buddypress message
  • (#53)Fixed string replace is not working in error message
  • (#54)Fixed bbpress reply captcha is not working

v1.3.0

Fix 3

Fix

  • (#43,#44,#45,#46)Fixed v3 recaptcha issue
  • Removed install plugin button from wrapper
  • phpcs fixes

v1.2.0

Fix 2

Fix

  • Add recaptcha support for buddyx-pro and reign theme
  • (#39)Fixed welcome page redirection issue

v1.1.0

Fix 5

Fix

  • Fixed phpcs errors
  • (#27, #28) Managed UI with post comment form
  • (#26) Fixed recaptcha field title not showing in post comment form
  • (#23) Managed UI with twenty-twenty theme
  • (#25)Fixed changed typo error on plugin welcome page

v1.0.0

Note 1

Note

  • first version.

WBComDesigns is amazing!

WBComDesigns is amazing. The WP plugins and themes are of top notch quality with lots of features and updated very frequently. Supports are very responsive and helpful. I use Reign with TutorLMS, and the experience is surprisingly smooth.…

Hoang Phan VN