by
byabdalla
0 (0 reviews)
FormGhost
Invisible 9-layer spam protection — the spam never happened. Zero CAPTCHAs. Zero cloud. 100% free. GDPR-compliant by design.
FormGhost ranks #59,086 among WordPress.org plugins with 0+ active installations, is #3,514 of 4,596 in the Security category, and was last updated Sep 18, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.2
v1.2.4
Current Version v1.2.4
Updated 5 days ago
Last Update on 18 Sep, 2026
Refreshed 7 hours ago
Last Refreshed on
#3,514 of 4,596 in Security
Actively maintained
Rank
#59,086
—
No change
Active Installs
0+
-1%
KW Avg Position
87
6 worse
Downloads
72
+3 today
Support Resolved
0%
—
No change
Rating
0%
Review 0 out of 5
0
(0 reviews)
Next Milestone 10
0+
10+
39,346
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 8 more installs to reach 10+
Rank Changes
Current
#59,086
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
0.0
0 reviews
Overall
0%
5
0
(0%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.2.4
- Last Updated
- Sep 18, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.2
- PHP Version
- 7.4 or higher
- Author
- byabdalla
Support & Rating
- Rating
- ☆ ☆ ☆ ☆ ☆ 0
- Reviews
- 0
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,760
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,009
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#17
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#37
Frequently Asked Questions
Common questions about FormGhost
Yes. All nine layers, the Vault, the self-learning system, Ghost Response — everything ships in the free plugin. There is no Pro tier and no license key.
No. FormGhost is invisible — no CAPTCHA, no extra fields visible to humans, no JavaScript prompts. The honeypot fields are hidden via multiple CSS techniques and aria-hidden. The timing token and proof-of-work fields are injected by JavaScript with no UI footprint.
The honeypot and email-content layers work without JavaScript. The timing and proof-of-work layers require JavaScript on the visitor's side; you can configure FormGhost to allow no-JS submissions (less strict) or to block them as suspect (stricter).
No — FormGhost has no servers of its own and its spam detection never leaves your site. The only outbound calls the plugin can make are the optional, off-by-default Turnstile / hCaptcha token verification and the DNS MX lookup, both described under "External services" below.
Choose which surfaces to protect (comments, login, registration, contact forms, WooCommerce, password reset) and a sensitivity profile — Low, Medium or High. FormGhost applies a curated recipe of timing thresholds, proof-of-work difficulty and pattern aggressiveness. You can fine-tune everything afterwards in Settings, and re-run the wizard any time.
Open the Vault, find the entry, click "Mark legitimate" — and click "Send" to forward it to the inbox it was originally headed to. The Learning system learns from your correction and lowers the weight of any rule that contributed to the false positive.
Yes. The Vault detail view shows the score, the triggering layer, the reason code, the page the form was submitted from, and the notification recipient for every stored submission.
Yes. The honeypot CSS is inline, the timing token and PoW challenge are fetched at submission time via a cache-bypassed AJAX endpoint, and the Behavioral layer's nonce is also live-issued. Heavy page caching does not weaken FormGhost.
Yes. None of the runtime fields are baked into the cached HTML. The plugin sends nocache_headers() on its own AJAX endpoint.
In a {prefix}formghost_vault table you control, encrypted with AES-256-GCM against a per-site secret stored in formghost_site_secret. Default retention is 30 days; configurable; uninstall removes the table entirely.
