Anti-Spam, Spam FireWall by CleanTalk
by CleanTalk Inc 4.8 (3,220 reviews)

Anti-Spam, Spam FireWall by CleanTalk

Advanced antispam for comments, registrations & contact forms. No CAPTCHA, plus email validation and honeypot. We catch spam others miss!

Anti-Spam, Spam FireWall by CleanTalk ranks #239 among WordPress.org plugins with 200,000+ active installations, is #21 of 3,634 in the Communication category, a 4.8/5 rating from 3,220 reviews, and was last updated Oct 29, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1
v6.91 Current Version v6.91
Updated 1 week ago Last Update on 29 Oct, 2026
Refreshed 1 week ago Last Refreshed on
#21 of 3,634 in Communication Top 1% by installs Downloads -70.1% this week Actively maintained
View on WordPress.org
Rank
#239
— No change
Active Installs
200K+
-22.7%
KW Avg Position
1.2
— No change
Downloads
23.2M
+1,102 today
Support Resolved
97%
— No change
Rating
96%
Review 4.8 out of 5
4.8 (3,220 reviews)

Next Milestone 300K

Total Progress 52.5%
200K+ 300K+
38
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 47,500 more installs to reach 300K+

Rank Changes

219 229 239 249 259 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026
217 228 238 249 259 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026
Current #239
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10K 20K 30K 40K 50K 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026
0 10K 20K 30K 40K 50K 60K 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.8
3,220 reviews
Overall 96%
5
2,975 (92%)
4
40 (1%)
3
20 (1%)
2
26 (1%)
1
159 (5%)

Support Threads Overview

Resolved
Unresolved
64
Total Threads
62
Resolved
2
Unresolved
97%
Resolution Rate

Security History

Source: WPVulnerability

21 known vulnerabilities on record · 8 in the last 24 months · checked 2 weeks ago

  1. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.89

    CVE-2026-103424 · Fixed in v6.89

  2. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.87

    CVE-2026-19855 · Fixed in v6.87

  3. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.87

    CVE-2026-77830 · Fixed in v6.87

  4. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.83

    CVE-2026-65437 · Fixed in v6.83

  5. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.79

    CVE-2026-8071 · Fixed in v6.79

  6. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.72

    CVE-2026-1490 · Fixed in v6.72

  7. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.45

    CVE-2024-10781 · Fixed in v6.45

  8. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.44

    CVE-2024-10542 · Fixed in v6.44

  9. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.21

    CVE-2023-51535 · Fixed in v6.21

  10. Spam Protection for Forms & Comments. Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.21

    CVE-2023-51696 · Fixed in v6.21

Showing the 10 most recent of 21 records.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners running contact forms, comments, WooCommerce stores, and user registrations. It blocks spam comments, fake orders, spam registrations, and spam contact submissions without using CAPTCHAs.

  • Stops spam comments
  • Stops spam registrations and logins
  • Stops fake orders in WooCommerce
  • Antispam for bookings and subscriptions
  • Real-time email validation
  • Bulk spam comment removal
  • Bulk spam user removal
  • Spam FireWall bot blocking

Frequently Asked Questions

Common questions about Anti-Spam, Spam FireWall by CleanTalk

Yes, CleanTalk stops spam in contact forms, registration forms, comments, and other forms on your website. It uses a combination of algorithms and a cloud-based database to identify and block spam submissions in real-time.
Yes, CleanTalk protects WooCommerce from fake orders and spam registrations. It checks all incoming orders and registrations against its anti-spam database and algorithms to ensure that only legitimate users can place orders or register on your site.
CleanTalk protects all WordPress forms, including but not limited to: * Comments * Registration forms * Contact forms * Sign-up forms * Search forms * Subscription forms
Spammers want to get backlinks from your site to improve their site's PageRank or redirect your visitors to malicious sites.This level of spam can damage your reputation with readers and commentators if you fail to tackle it. It is not uncommon for some WordPress websites to receive hundreds or even thousands of comments every week. However, by using a CleanTalk plugin, spam can be easily handled by your WordPress website.
Yes, it is. The plugin doesn't block mobile visitors as well as desktop website visitors. It uses several independent anti-spam tests to decrease the number of false outcomes and to have as low false-positive rate as possible. Multiple anti-spam tests help to avoid false/positive blocks for real website visitors even if one of the tests failed.
Please use the email stop_email@example.com for comments, contacts or signups to see how the anti-spam protection works. Also, you can see the logs for the last 7 days in the Dashboard or look at the folder "Spam" for banned comments.
Please, note - administrator's actions are NOT being checked. The plugin uses several simple tests to stop spammers: JavaScript anti-spam test. 99% of spam bots don't have full JavaScript functions support. So, the plugin has the code which can be run by normal visitor and can't be run by the spam bot. Email, IP, domain spam activity list entries check. The plugin uses spam activity database online at cleantalk.org, consisting of more than 20 billion spam activity records of IPs, Emails, Domains and ASN. If the sender's IP or Email is in the database, the sender gets some spam scores. To reduce false/positive rate the plugin not only uses the blacklist test to ban spammers, the sender will be banned when and only when multiple spam tests have been failed. Comment submit time. Spam bots usually submit the info immediately after the page has been loaded, this happens because spam bots don't actually fill the web form, they just send $_POST data to the blog. The normal visitor sends the data after several seconds or minutes.
The plugin does not filter trackbacks or pingbacks, but it can disable them using WordPress core functionality. To enable this option, go to: WordPress Dashboard → Settings → Anti-Spam by CleanTalk → Advanced Settings → "Disable Pingbacks and Trackbacks".
Yes, you can. The plugin has the option to test all pending comments via database of spam active IP/Email, found spam comments will be moved to Trash folder.
The plugin checks all non-spam comments in the blacklist database and shows you those senders who have spam activity on other websites. There are some differences between blacklist database and API to protect you from spam bot registrations/comments online. Blacklists show all history of spam activity, but our API (which is used in spam tests) relies on other parameters too: last day of activity, number of spam attacks during the last days etc. These mechanisms help us to reduce the number of false outcomes. So, there is nothing strange, if some emails/IPs are not found by bulk comments/accounts test. To check comments please go here: WordPress console -> Comments -> Find spam comments To check users please go here: WordPress console -> Users -> Find spam users

Sign In / Register

You need to sign in or register to use this feature.