Changelog

What changed, and when

CaptchaFlow follows semantic versioning. Anything that could change behaviour on your site is called out here before it is called out in your inbox.

1.0.0

Initial release

The first public version. Everything below is in the free plugin unless marked otherwise.

  • Protection for WordPress core forms — login, registration, password reset and comments.
  • Adapters for Contact Form 7, WPForms, Fluent Forms, Forminator, Ninja Forms, Gravity Forms and Elementor Pro.
  • WooCommerce account forms: login, registration and password reset.
  • Any other form by CSS selector, with no code required.
  • Six challenge types: Cloudflare Turnstile, reCAPTCHA v2, reCAPTCHA v3, hCaptcha, and self-hosted Math and Question challenges.
  • Honeypot and timing pre-checks run on every submission, before the provider is contacted.
  • Cache-safe challenge delivery — no visitor-specific data is ever written into page HTML.
  • Setup wizard, one-click diagnostics with a text export, and a theme compatibility checker.
  • Dashboard with blocked-spam counters and a 30-day trend, backed by daily rollups.
  • Provider secrets encrypted at rest, log writes deferred until after the response, automatic log retention.
  • Privacy: IP addresses shortened to their network before logging, privacy-policy wording generated from your own configuration, and export and erase handlers wired into the WordPress privacy tools.

Updates arrive through WordPress in the usual way — Dashboard → Updates, or automatically if you have that enabled. Pro sites need an active licence to be offered updates; an expired licence keeps protecting the site, it just stops receiving new versions. See the FAQ or write to [email protected].