by Aviv Digital 0 (0 reviews)

Spambargo: Anti-Spam for Forms & Comments

Name: Spambargo: Anti-Spam for Forms & Comments
Author: Aviv Digital

Block spam in Elementor, Contact Form 7, JetFormBuilder, Ninja Forms, WooCommerce and comments with keyword, link and email checks.

Spambargo ranks #13,920 among WordPress.org plugins with 100+ active installations, is #491 of 2,958 in the Discussion & Community category, and was last updated Oct 18, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.8 (Current: 7.1.4)

v2.4.10 Current Version v2.4.10

Updated 2 weeks ago Last Update on 18 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#491 of 2,958 in Discussion & Community Top 25% by installs Downloads +19.2% this week Actively maintained

View on WordPress.org

Rank

#13,920

— No change

Active Installs

100+

— No change

KW Avg Position

128.5

— No change

Downloads

762

+1 today

Support Resolved

— No change

Rating

Review 0 out of 5

0 (0 reviews)

Next Milestone 200

Total Progress 71%

100+ 200+

1,246

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 29 more installs to reach 200+

Rank Changes

Current #13,920

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0

0 reviews

Overall 0%

0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Spambargo. Checked 2 months ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.4.10
Last Updated: Oct 18, 2026
Requires WP: 6.2+
Tested Up To: 7.0.8
PHP Version: 7.4 or higher
Author: Aviv Digital

Support & Rating

Rating: ☆ ☆ ☆ ☆ ☆ 0
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

anti-spam bot protection comments contact forms spam protection

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

Akismet Anti-spam: Spam Protection

5M+ installs

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Jetpack – AI Agents & MCP, Security, Backup & Analytics

WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance

View all Discussion-and-community plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners running Contact Form 7, Elementor Pro Forms, Ninja Forms, JetFormBuilder, WooCommerce, or WordPress comments who need to block automated spam submissions. It solves this by running local, server-side checks such as signed timing tokens, honeypots, content checks and rate limiting to catch bots while minimizing false positives for real users.

Contact Form 7 native spam filter
Elementor Pro Forms native validation
Ninja Forms integration
JetFormBuilder integration
WooCommerce registration and checkout protection
WooCommerce Checkout Blocks support
WordPress comments protection
Rate limiting with IPv6 CIDR grouping

Frequently Asked Questions

Common questions about Spambargo: Anti-Spam for Forms & Comments

No. Native integrations are never pre-validated by the universal AJAX checker. Generic interception targets likely lead forms and can be controlled with CSS selectors or data attributes. This generic mode is a browser-side, best-effort pre-check and cannot stop a bot that posts directly to a custom form handler; server-enforced protection requires one of the listed native integrations or custom server-side validation.

By default, yes. The honeypot and server checks continue to work, while a missing behavior token is allowed. Administrators can enable strict token mode, which is stronger but requires JavaScript.

Not in this release. Checkout Blocks receive server-side identity, blacklist, content, phone and rate checks. Behavioral tokens and the visual math challenge are deliberately skipped because Blocks require a dedicated client-side extension-data integration.

Each line is a separate literal rule. A single-word line blocks that complete word, not a longer word that merely contains it. A multi-word rule blocks only when all of its words appear in the same order, although other words or punctuation may appear between them. Matching is not case-sensitive. Regular expressions are not executed. One matching line is enough to block a submission.

New installations include the existing strict spam-rule recommendations (gambling, pharmaceuticals, crypto, SEO outreach and adult content). These can block legitimate English enquiries, so edit or clear them to fit your audience. During upgrades, previously saved blocked terms, including an intentionally empty list, are preserved.

Country blocking uses WooCommerce geolocation when available or a country code supplied by a trusted proxy or the wpas_detect_country_code filter. If no reliable country is found, country blocking fails open; Spambargo does not contact an external geolocation service. Language blocking checks the primary Accept-Language browser language, not the natural language of the message. Users and bots can alter this header; use it as an additional signal rather than a sole anti-spam measure.

Yes. A daily WordPress cron event removes entries older than the configured retention period and clears expired rate-limit counters.

Data is preserved by default. Enable “Delete all data when plugin is uninstalled” before deleting the plugin to remove its tables and settings.