by CleanTalk Inc 4.8 (3,211 reviews)

Spam protection, Honeypot, Anti-Spam by CleanTalk

Name: Spam protection, Honeypot, Anti-Spam by CleanTalk
Rating: 4.8 (3211 reviews)
Author: CleanTalk Inc

Top-rated antispam for contact forms, comments, WooCommerce, eCommerce, and login. No CAPTCHAs, no friction, just background anti spam protection.

Spam protection, Honeypot, Anti-Spam by CleanTalk ranks #240 among WordPress.org plugins with 200,000+ active installations, is #21 of 3,342 in the Communication category, a 4.8/5 rating from 3,211 reviews, and was last updated Sep 2, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v6.87 Current Version v6.87

Updated 1 week ago Last Update on 02 Sep, 2026

Refreshed 11 hours ago Last Refreshed on

#21 of 3,342 in Communication Top 1% by installs Downloads -85.2% this week Actively maintained

View on WordPress.org

Rank

#240

— No change

Active Installs

200K+

-21.8%

KW Avg Position

— No change

Downloads

23.2M

+2,252 today

Support Resolved

96%

— No change

Rating

96%

Review 4.8 out of 5

4.8 (3,211 reviews)

Next Milestone 300K

Total Progress 57%

200K+ 300K+

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 43,038 more installs to reach 300K+

Rank Changes

Current #240

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.8

3,211 reviews

Overall 96%

2,966 (92%)

40 (1%)

20 (1%)

26 (1%)

159 (5%)

Support Threads Overview

Resolved

Unresolved

100

Total Threads

Resolved

Unresolved

96%

Resolution Rate

Security History

Source: WPVulnerability

19 known vulnerabilities on record · 6 in the last 24 months · checked 1 week ago

Jul 27, 2026

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.87

CVE-2026-77830 · Fixed in v6.87
Jun 11, 2026

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.83

CVE-2026-65437 · Fixed in v6.83
Jun 10, 2026

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.79

CVE-2026-8071 · Fixed in v6.79
Feb 14, 2026

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.72

CVE-2026-1490 · Fixed in v6.72
Nov 25, 2024

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.44

CVE-2024-10542 · Fixed in v6.44
Nov 25, 2024

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.45

CVE-2024-10781 · Fixed in v6.45
Dec 27, 2023

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.21

CVE-2023-51535 · Fixed in v6.21
Dec 27, 2023

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.21

CVE-2023-51696 · Fixed in v6.21
Jun 22, 2023

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 6.11

CVE-2023-33996 · Fixed in v6.11
Oct 3, 2022

Spam protection, Honeypot, Anti-Spam by CleanTalk [cleantalk-spam-protect] < 5.185.1

CVE-2022-3302 · Fixed in v5.185.1

Showing the 10 most recent of 19 records.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 6.87
Last Updated: Sep 02, 2026
Requires WP: 4.7+
Tested Up To: 7.1
PHP Version: 7.2 or higher
Author: CleanTalk Inc

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.8
Reviews: 3,211
Support Threads: 100
Resolved: 96%

Keywords

antispam bot captcha honeypot spam

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

WP Mail SMTP by WPForms - The Most Popular SMTP and Email Log Plugin

4M+ installs

#12

MC4WP: Mailchimp for WordPress

1M+ installs

#34

Hostinger Reach – AI-Powered Email Marketing for WordPress

1M+ installs

#44

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation

Joinchat - Enhanced "click to chat"

700K+ installs

#88

Click to Chat - HoliThemes

600K+ installs

#92

View all Communication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners running contact forms, comments, WooCommerce stores, and user registrations. It blocks spam comments, fake orders, spam registrations, and spam contact submissions without using CAPTCHAs.

Stops spam comments
Stops spam registrations and logins
Stops fake orders in WooCommerce
Antispam for bookings and subscriptions
Real-time email validation
Bulk spam comment removal
Bulk spam user removal
Spam FireWall bot blocking

Frequently Asked Questions

Common questions about Spam protection, Honeypot, Anti-Spam by CleanTalk

Spammers want to get backlinks from your site to improve their site's PageRank or redirect your visitors to malicious sites.This level of spam can damage your reputation with readers and commentators if you fail to tackle it. It is not uncommon for some WordPress websites to receive hundreds or even thousands of comments every week. However, by using a CleanTalk plugin, spam can be easily handled by your WordPress website.

Yes, it is. The plugin doesn't block mobile visitors as well as desktop website visitors. It uses several independent anti-spam tests to decrease the number of false outcomes and to have as low false-positive rate as possible. Multiple anti-spam tests help to avoid false/positive blocks for real website visitors even if one of the tests failed.

Spam comments are being moved to SPAM folder by default or you can set the option to ban spam comments silently.

Please use the email stop_email@example.com for comments, contacts or signups to see how the anti-spam protection works. Also, you can see the logs for the last 7 days in the Dashboard or look at the folder "Spam" for banned comments.

Please, note - administrator's actions are NOT being checked. The plugin uses several simple tests to stop spammers: JavaScript anti-spam test. 99% of spam bots don't have full JavaScript functions support. So, the plugin has the code which can be run by normal visitor and can't be run by the spam bot. Email, IP, domain spam activity list entries check. The plugin uses spam activity database online at cleantalk.org, consisting of more than 20 billion spam activity records of IPs, Emails, Domains and ASN. If the sender's IP or Email is in the database, the sender gets some spam scores. To reduce false/positive rate the plugin not only uses the blacklist test to ban spammers, the sender will be banned when and only when multiple spam tests have been failed. Comment submit time. Spam bots usually submit the info immediately after the page has been loaded, this happens because spam bots don't actually fill the web form, they just send $_POST data to the blog. The normal visitor sends the data after several seconds or minutes.

The plugin does not filter trackbacks or pingbacks, but it can disable them using WordPress core functionality. To enable this option, go to: WordPress Dashboard → Settings → Anti-Spam by CleanTalk → Advanced Settings → "Disable Pingbacks and Trackbacks".

Yes, you can. The plugin has the option to test all pending comments via database of spam active IP/Email, found spam comments will be moved to Trash folder.

The plugin checks all non-spam comments in the blacklist database and shows you those senders who have spam activity on other websites. There are some differences between blacklist database and API to protect you from spam bot registrations/comments online. Blacklists show all history of spam activity, but our API (which is used in spam tests) relies on other parameters too: last day of activity, number of spam attacks during the last days etc. These mechanisms help us to reduce the number of false outcomes. So, there is nothing strange, if some emails/IPs are not found by bulk comments/accounts test. To check comments please go here: WordPress console -> Comments -> Find spam comments To check users please go here: WordPress console -> Users -> Find spam users

Yes, the plugin is compatible with WordPress MultiUser. Each blog in multisite environment has individual anti-spam options for the protection from spam bots. After the installation I noticed that the number of spam attacks has been increased in the stats There are a few reasons for this: With the indexing of your web-site by the search systems, appearance of external links and better search results position, your web-site attracts more and more spambots. Non-transparent protection systems like CAPTCHA or question/answer, that don't have spam attacks stats, don't let you see the whole picture, or the picture is incomplete. Counting methods for spam attacks and spam bots are different for different systems, thus the diversity appears. We seek to provide detailed stats.

The plugin has several options to detect spam bots and humans. If you just post spammy text like this: "I want to sell something", "Buy something here.." and etc the comments will be passed, because the plugin detects sender as a human. So, use special email stop_email@example.com to test the anti-spam functionality or wait a few days to see how the plugin works.