reCAPTCHA V3 for Jetpack vs XMLRPC Lockdown by AO Digital

reCAPTCHA V3 for Jetpack enhances your WordPress site’s security by integrating Google reCAPTCHA v3—an invisible, score-based spam filter—with Jetpack contact forms, comments, and WooCommerce registration. Designed for block-based themes (e.g., Full Site Editing), it uses behavioral scoring to block bots seamlessly. Key features: Invisible Protection: Analyzes user behavior (e.g., mouse movements, session duration) to assign a score (0.0–1.0) for contact forms, comments, and WooCommerce registration. Customizable Threshold: Set a score threshold (default 0.5) to balance spam blocking and user access for all forms. Conditional Loading: Control where reCAPTCHA loads: on all pages, specific page types (e.g., front page, single posts), or specific slugs. Improves performance by skipping unnecessary pages. Debug Mode: Toggle console.log output for debugging purposes; disable for production to reduce browser console clutter. Skip for Logged-in Users (new in 1.17): New checkbox to bypass reCAPTCHA entirely for any logged-in user (admins, customers, members, etc.). Perfect for membership sites where only guests need protection. Automatic Spam Handling: Form submissions with scores below the threshold are reliably blocked and moved to the Jetpack Feedback CPT spam folder in the admin interface. Comments with scores below the threshold are automatically moved to the spam folder without triggering approval emails. New in 1.13 / 1.14: Blocks bot account creation on WooCommerce registration form (including the My Account page). Submission Stats & Logging (improved in 1.19): Tracks total submissions and logs the last 20 submissions (forms, comments, registration) with scores, status, and now the client IP address. Includes a secure “Clear Log” button and cleaner, shorter messages for better readability. Jetpack Integration: Requires Jetpack for contact form and comment protection, fully compatible with block-based forms and Jetpack forums. Email Enhancements: Appends reCAPTCHA scores to form submission emails and comment notification/moderation emails for transparency. Admin Feedback: Displays reCAPTCHA scores to admins on form success pages and logs detailed debug info for failed submissions. Customizable User Notices (new in 1.21): Change the messages shown to users when a reCAPTCHA token is missing or when the score falls below your threshold. Supports {score} and {threshold} placeholders. Perfect for modern WordPress sites, this plugin provides robust spam prevention with insightful analytics, ensuring a seamless user experience while keeping your forms, comments, and registrations spam-free. External Services This plugin uses Google reCAPTCHA v3, a service provided by Google to verify user interactions and prevent spam on contact forms, comments, and WooCommerce registration. Purpose: Google reCAPTCHA v3 analyzes user behavior to assign a score (0.0–1.0) indicating the likelihood of a user being a bot. This score determines whether form submissions, comments, or registrations are blocked (moved to spam). Data Sent: When a user submits a form, comment, or registers, the plugin sends a reCAPTCHA token to Google’s API (https://www.google.com/recaptcha/api/siteverify). The request includes only the secret key and response token. When Data is Sent: Data is sent to Google’s API on every Jetpack contact form, comment, or WooCommerce registration submission. Service Provider: Google LLC. Terms of Service: https://www.google.com/recaptcha/about/ Privacy Policy: https://policies.google.com/privacy Users must agree to Google’s terms of service when setting up reCAPTCHA keys. No user consent is required for reCAPTCHA v3, as it operates invisibly without challenges. License This plugin is licensed under the GPLv2 or later. See https://www.gnu.org/licenses/gpl-2.0.html for details.

XMLRPC Lockdown by AO Digital is an advanced security plugin for WordPress. It blocks access to xmlrpc.php for all requests except those explicitly allowed, such as requests from Jetpack, the WordPress mobile app, and other specified services. With the latest enhancements, users can customize the list of allowed services and create custom allowances for specific IPs, URLs, or referrers directly from the WordPress admin dashboard. Key Features: – Blocks unauthorized access to xmlrpc.php, enhancing WordPress security. – Allows specific services like Jetpack and the WordPress mobile app to work seamlessly. – New settings page for managing allowed plugins and custom allowances. – AJAX-powered options saving for a smooth user experience. – Fully compatible with PHP 8.0+ and tested up to WordPress 6.7.2. Whether you’re looking to secure your site or fine-tune xmlrpc.php access, XMLRPC Lockdown by AO Digital offers a robust, user-friendly solution. Support For assistance with XMLRPC Lockdown by AO Digital, please visit AO Digital Support or email us at [email protected].