SpamJam – Anti-Spam Protection for Comments & Forms
by Matt Biscay 0 (0 reviews)

SpamJam – Anti-Spam Protection for Comments & Forms

Block comment and form spam without CAPTCHAs. Lightweight honeypot protection works automatically and keeps real visitors moving.

SpamJam ranks #15,896 among WordPress.org plugins with 100+ active installations, is #827 of 5,058 in the Security category, and was last updated Oct 23, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4
v3.3.0 Current Version v3.3.0
Updated 2 weeks ago Last Update on 23 Oct, 2026
Refreshed 1 week ago Last Refreshed on
#827 of 5,058 in Security Top 25% by installs Downloads +41.9% this week Actively maintained
View on WordPress.org
Rank
#15,896
— No change
Active Installs
100+
-26.5%
KW Avg Position
131
1.7 worse
Downloads
4.3K
+5 today
Support Resolved
0%
— No change
Rating
0%
Review 0 out of 5
0 (0 reviews)

Next Milestone 200

Total Progress 26%
100+ 200+
3,222
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 74 more installs to reach 200+

Rank Changes

15,101 15,499 15,896 16,293 16,691 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
15,772 16,040 16,308 16,576 16,844 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Current #15,896
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 30 40 50 60 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
0 10 20 30 40 50 60 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026 02-11-2026 03-11-2026 04-11-2026 05-11-2026 06-11-2026 07-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0
0 reviews
Overall 0%
5
0 (0%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Security History

Source: WPVulnerability

1 known vulnerability on record · 0 in the last 24 months · checked 3 months ago

  1. SpamJam [spamjam] < 0.4.0

    CVE-2023-33999 · Fixed in v0.4.0

TL;DR

AI summary of the plugin's readme

SpamJam is for WordPress site owners who receive spam comments or registrations, including blogs, membership sites, WooCommerce stores, and community websites. It blocks automated spam using honeypot fields, timing checks, and weighted scoring instead of captchas, so legitimate users aren't interrupted.

  • Salted honeypot protection
  • Timing check for bot submissions
  • Weighted spam scoring
  • Referrer validation
  • Nonce CSRF security
  • Smart blocklist filtering
  • WooCommerce compatible (HPOS, reviews)
  • No-JS friendly soft scoring

Frequently Asked Questions

Common questions about SpamJam – Anti-Spam Protection for Comments & Forms

Yes. Core comment protection is enabled by default with sensible settings. You can fine-tune it from the SpamJam admin screen, but you do not need to configure an API key or build rules before getting protection.
SpamJam is designed to stay focused and load its comment-protection script only on pages where comments are open. It has no jQuery dependency, and premium feature files load conditionally when their features are enabled.
No. SpamJam's core protection uses hidden traps, secure tokens, timing, and request signals instead of CAPTCHA challenges.
SpamJam works with standard WordPress comment forms and includes a fallback selector for themes that use a custom form ID. A developer filter is available for unusual comment-form markup.
Yes. SpamJam does not require a page-load AJAX or REST request. Current forms can be approved normally, while authentic stale forms from page caches such as WP Rocket or Cloudflare APO preserve the comment and use WordPress moderation when token freshness cannot be confirmed. Purge cached HTML after changing the site URL or WordPress security salts.
Yes. The free version protects WooCommerce product review forms and declares compatibility with High-Performance Order Storage (HPOS). SpamJam Pro can also protect WooCommerce account registration.
Free focuses on automatic comment and product-review protection. SpamJam Pro adds registration and third-party form coverage, custom rules, an actionable spam inbox, targeted blocking, deeper analytics, reporting, multisite synchronization, and white labeling. Every Pro license includes the complete feature set; licenses differ only by the number of sites covered.
SpamJam Pro can block comments from selected country codes. When enabled, SpamJam uses an external IP geolocation lookup and caches the result to reduce repeat requests.
Rate limiting caps how many comment submissions one IP address can make during a configurable period. It helps contain bursts without changing the experience for ordinary commenters.
SpamJam Pro adds a searchable inbox for blocked events, reasons, sources, and review status. You can configure retention and choose whether to keep the minimum recovery data needed to restore a false-positive comment.

Sign In / Register

You need to sign in or register to use this feature.