توضیحات
Protect Contact Form 7 forms from spam with Google reCAPTCHA v2, reCAPTCHA v3, hCaptcha or Cloudflare Turnstile.
تغییرات این نسخه
0.2.0
Fix: reCAPTCHA v3 token is now refreshed after every form submission, preventing “Invalid captcha” errors when resubmitting a form after a validation error.
Fix: reCAPTCHA v3 script is no longer added multiple times when several forms are on the same page.
0.1.9
Security fix: A vulnerability allowed an unauthenticated visitor to trigger execution of shortcode content when submitting a form. Reported responsibly by Jakub Herman via WPScan/Jetpack (Automattic). All users are strongly encouraged to update immediately.
0.1.8
Fix: Updated “Requires at least” version to match plugin headers and readme.
Fix: Reduced tags list to comply with the 5-tag limit.
Improvement: Documented third-party services (Google reCAPTCHA, hCaptcha, Cloudflare Turnstile) in the readme.
Improvement: Revised plugin description to remove unverifiable marketing claims.
Security: Added proper output escaping to shortcode callbacks to prevent XSS.
0.1.7
New: Introduced [cf7sr-insights] tag – easily collect sender’s IP, Source Page, and Browser info.
New: Added support for Google reCAPTCHA v3 Invisible
Improvement: Security upgrade – Switched CAPTCHA verification to POST method.
Improvement: Enhanced bot detection by including ‘remoteip’ in API verification calls.
Improvement: Performance boost – Optimized form validation to bypass expensive shortcode rendering.
Improvement: Cleaned up and consolidated language files for a smaller plugin footprint.
Fix: Modernized script enqueuing syst
Fix: reCAPTCHA v3 token is now refreshed after every form submission, preventing “Invalid captcha” errors when resubmitting a form after a validation error.
Fix: reCAPTCHA v3 script is no longer added multiple times when several forms are on the same page.
0.1.9
Security fix: A vulnerability allowed an unauthenticated visitor to trigger execution of shortcode content when submitting a form. Reported responsibly by Jakub Herman via WPScan/Jetpack (Automattic). All users are strongly encouraged to update immediately.
0.1.8
Fix: Updated “Requires at least” version to match plugin headers and readme.
Fix: Reduced tags list to comply with the 5-tag limit.
Improvement: Documented third-party services (Google reCAPTCHA, hCaptcha, Cloudflare Turnstile) in the readme.
Improvement: Revised plugin description to remove unverifiable marketing claims.
Security: Added proper output escaping to shortcode callbacks to prevent XSS.
0.1.7
New: Introduced [cf7sr-insights] tag – easily collect sender’s IP, Source Page, and Browser info.
New: Added support for Google reCAPTCHA v3 Invisible
Improvement: Security upgrade – Switched CAPTCHA verification to POST method.
Improvement: Enhanced bot detection by including ‘remoteip’ in API verification calls.
Improvement: Performance boost – Optimized form validation to bypass expensive shortcode rendering.
Improvement: Cleaned up and consolidated language files for a smaller plugin footprint.
Fix: Modernized script enqueuing syst