Zero Spam for WordPress
by Ben Marshall 4.1 (143 reviews)

Zero Spam for WordPress

No spam, no scams, just seamless experiences with Zero Spam for WordPress - the shield your site deserves.

Zero Spam for WordPress ranks #1,193 among WordPress.org plugins with 20,000+ active installations, is #52 of 2,878 in the Discussion & Community category, a 4.1/5 rating from 143 reviews, and was last updated Mar 17, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9.7 (Current: 7.1)
v5.5.8 Current Version v5.5.8
Updated 5 months ago Last Update on 17 Mar, 2026
Refreshed 16 hours ago Last Refreshed on
#52 of 2,878 in Discussion & Community Top 5% by installs Downloads +14.7% this week
View on WordPress.org
Rank
#1,193
No change
Active Installs
20K+
-26.6%
KW Avg Position
59.8
No change
Downloads
1.4M
+27 today
Support Resolved
0%
No change
Rating
82%
Review 4.1 out of 5
4.1 (143 reviews)

Next Milestone 30K

Total Progress 72.1%
20K+ 30K+
100
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 2,786 more installs to reach 30K+

Rank Changes

1,132 1,162 1,193 1,223 1,253 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
1,132 1,163 1,193 1,223 1,254 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Current #1,193
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 50 100 150 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
0 50 100 150 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.1
143 reviews
Overall 82%
5
108 (76%)
4
1 (1%)
3
2 (1%)
2
7 (5%)
1
25 (17%)

Support Threads Overview

Resolved
Unresolved
1
Total Threads
0
Resolved
1
Unresolved
0%
Resolution Rate

Security History

Source: WPVulnerability

11 known vulnerabilities on record · 0 in the last 24 months · checked 1 week ago

  1. Zero Spam for WordPress [zero-spam] < 5.5.7

    CVE-2024-32521 · Fixed in v5.5.7

  2. Zero Spam for WordPress [zero-spam] < 2.1.2

    Fixed in v2.1.2

  3. Zero Spam for WordPress [zero-spam] < 5.4.5

    CVE-2023-32121 · Fixed in v5.4.5

  4. Zero Spam for WordPress [zero-spam] < 5.4.5

    Fixed in v5.4.5

  5. Zero Spam for WordPress [zero-spam] < 5.2.10

    Fixed in v5.2.10

  6. Zero Spam for WordPress [zero-spam] < 5.2.11

    CVE-2022-0254 · Fixed in v5.2.11

  7. Zero Spam for WordPress [zero-spam] < 5.2.10

    Fixed in v5.2.10

  8. Zero Spam for WordPress [zero-spam] < 2.1.2

    Fixed in v2.1.2

  9. Zero Spam for WordPress [zero-spam] < 2.2.0

    Fixed in v2.2.0

  10. Zero Spam for WordPress [zero-spam] < 5.4.5

    Fixed in v5.4.5

Showing the 10 most recent of 11 records.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who need protection from spam, malicious registrations, and automated attacks. It blocks threats using IP reputation, geolocation, and blacklist services while integrating with popular e-commerce, form, and membership plugins.

  • Blocks IPs temporarily or permanently
  • Geolocation tracking of threats
  • Block countries, regions, zip codes, cities
  • REST API for settings management
  • Comment Blacklist integration
  • Blocks disposable & malicious email
  • WooCommerce integration
  • GiveWP, ProfilePress, Mailchimp integration

Frequently Asked Questions

Common questions about Zero Spam for WordPress

Not on its own. Zero Spam for WordPress does not automatically block IP addresses. If a visitor is blocked, it could be due to manual blocking by the site admin or their presence in IP blacklists such as Stop Forum Spam, Project Honeypot, or the Zero Spam. In the event that a legitimate user is blocked, refer to the Log (Admin > Dashboard > Zero Spam > Log) for further details on the reason behind the block. You have the flexibility to adjust the strictness of the 3rd-party blacklist checks or disable them if your users are prone to being flagged as spam or malicious.
No, it doesn't. Zero Spam for WordPress does not have integration with Jetpack. If you have any inquiries regarding this, please refer to https://wordpress.org/support/topic/incompatible-with-jetpack-comments for more details.
Enable caching for optimal performance. Enabling caching is highly recommended as it helps prevent repetitive calls to third-party APIs and access checks during each page visit. To further optimize performance, you can adjust the cache and API timeout settings in the admin panel based on your server specifications and specific requirements.
wp zerospam autoconfigure — Auto-configures with recommended settings. wp zerospam settings — Displays all plugin settings. wp zerospam set --[SETTING_KEY]=[VALUE] — Updates a plugin setting.
Yes! Zero Spam provides a secure REST API for reading and updating settings remotely. This is perfect for: Syncing settings between staging and production environments Automating configuration in CI/CD pipelines Managing settings across multiple WordPress sites Remote administration and monitoring Testing configuration changes safely with dry-run mode The API supports multisite installations with granular control over network defaults and per-site overrides. Authentication uses WordPress Application Passwords for secure, revocable access without exposing your main password. Getting Started: Visit the Documentation tab in Settings > Zero Spam for complete details, step-by-step setup instructions, real-world examples, and troubleshooting tips. No technical expertise required!
Some hosts have issues with they way they access files. If you're seeing a ftp_fget PHP notice, setting the FS_METHOD constant to direct in wp-config.php above the line /* That's all, stop editing! Happy Pressing. */ should solve the problem: define('FS_METHOD', 'direct'); If hosting with Pantheon, see their known issues page for more information and what to do to resolve it with their $_ENV['PANTHEON_ENVIRONMENT'] variable check.
You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. Report a security vulnerability.
If you have defined the ZEROSPAM_RESCUE_KEY constant in your wp-config.php file, you can bypass all checks by appending ?zerospam_rescue={YOUR_KEY} to any URL. (e.g., https://example.com/wp-admin/?zerospam_rescue=mysecretkey). If you haven't defined this key, you must manually rename the plugin folder via FTP (wp-content/plugins/zero-spam -> zero-spam-disabled) to gain access.
As of version 5.7.1, Zero Spam now actively protects wp-login.php and xmlrpc.php from blocked IPs. If you are blocked, check your IP reputation or use the Rescue Mode key to log in and whitelist your IP.

Sign In / Register

You need to sign in or register to use this feature.