OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ ericbonetti2017

   1mo ago

   Excellent plugin and great dev team. We’re a small nonprofit that helps people who have been abused. Needless to say, we get some really nasty spam — OOOPSpam completely eliminated this, since most of it was coming in via addresses associated with VPNs. Highly recommend

   Read on wp.org ↗
2. ★★★★★ LAdreamer

   4mo ago

   The plugin did exactly what it said it would, stopped the carding attack I was receiving on the site.

   Read on wp.org ↗
3. ★★★★★ Chris McElroy SEO

   4mo ago

   Sorry. I’m all for developers getting paid for hard work and updates and all of that, but $40/mo like for the smallest plan, just not stacking another paid plugin for that amount. If I had known, such as it being part of the description here, I wouldn’t have even installed it and registered an account and all of that.

   Read on wp.org ↗
4. ★★★★★ Woodcock02

   9mo ago

   I noticed a missing country in this amazing indispensable plugin, but wasn’t expecting an almost instant reply – and a fix !! The next day an update was issued and the problem sorted. Incredible support Thank You

   Read on wp.org ↗
5. ★★★★★ customerservice2018

   11mo ago

   So far, I’m very happy with the results I’m seeing. I had been receiving credit card testing attempts about every 15 minutes, but I haven’t seen one in the past couple of hours. I’ll update my review in the near future with (hopefully) even more positive news.

   Read on wp.org ↗
6. ★★★★★ Anonymous

   11mo ago

   Reduced our order spam to zero after a spate of attacks. Excellent product and very easy to set up and use.

   Read on wp.org ↗
7. ★★★★★ Kim Bydlon

   1.0y ago

   Although the very limited 40 API calls for the Free plan is pretty low given all the spam-my crazies in the world, the ridiculous email notifications our WP admin(s) used to receive as a result of spam submissions seems to be improved. That limit does get reached particularly quickly and then the constant notification box at the top of every WP-Admin page (that can’t be turned off without deactivating the plugin entirely) is a bit of nuisance, but the function does seem to be excellent for what little use we have gotten out of it thus far! Currently considering an upgraded plan, and we would encourage you to do the same by giving the Free plan a try first and seeing the difference it makes!

   Read on wp.org ↗
8. ★★★★★ americanshowerglass

   1.1y ago

   Solve our problem with spam!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.2.75 IMPROVEMENT: Improved meta-logs collection in the WooCommerce integration. IMPROVEMENT: Admin notice dismissals are now remembered. 1.2.75
2. — Version 1.2.74 NEW: Form ID in the Form and Valid Entries tables now displays the form title/name on hover. IMPROVEMENT: Rate limiting now checks ongoing requests to help prevent race conditions. FIX: The timezone setting now uses UTC 1.2.74
3. — Version 1.2.73 NEW: Added a new date range filter to the Form and Spam Entries tables FIX: Fixed a double time zone conversion for the time zone setting. 1.2.73
4. — Version 1.2.72 NEW: Added “Undo” action to reverse spam and non-spam reported submissions IMPROVEMENT: Pagination is preserved when reporting entries in Valid and Spam Entries tables FIX: Added additional privilege validation checks fo 1.2.72
5. — Version 1.2.71 NEW: Added “Entries table timezone” setting to customize timezone display for logs, and spam reports. IMPROVEMENT: Small UI improvements 1.2.71
6. — Version 1.2.70 NEW: Added support for Elementor Atomic Forms 1.2.70

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.62 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-03-23 CVE-2026-32544 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.2.62 Patched in 1.2.63
2. Medium · 5.3 OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing ↗
   2025-10-30 CVE-2025-12094 Protection Mechanism Failure Affects <= 1.2.53 Patched in 1.2.54
3. Medium · 5.4 OOPSpam Anti-Spam <= 1.1.44 - Cross-Site Request Forgery via empty_ham_entries and empty_spam_entries ↗
   2023-06-21 CVE-2023-35913 Cross-Site Request Forgery (CSRF) Affects < 1.1.45 Patched in 1.1.45
4. Medium · 5.5 OOPSpam Anti-Spam <= 1.1.35 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2023-01-17 CVE-2023-22716 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.1.35 Patched in 1.1.36

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-12-09 5K+ → 6K+ up after 1 days in tier
2. 2025-12-08 6K+ → 5K+ down after 1 days in tier
3. 2025-12-07 5K+ → 6K+ up after 104 days in tier
4. 2025-08-25 4K+ → 5K+ up after 3 days in tier
5. 2025-08-22 5K+ → 4K+ down after 1 days in tier
6. 2025-08-21 4K+ → 5K+ up after 3 days in tier
7. 2025-08-18 5K+ → 4K+ down after 2 days in tier
8. 2025-08-16 4K+ → 5K+ up after 139 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• CloudSecure WP Security 100K+ installs · 4.1★ · 2 shared tags A
• Blackhole for Bad Bots 30K+ installs · 4.7★ · 2 shared tags A
• Maspik – Multi-Layer Spam Protection 30K+ installs · 4.6★ · 2 shared tags A
• Stop Spammers Classic 30K+ installs · 4.4★ · 2 shared tags A
• Zero Spam for WordPress 20K+ installs · 4.1★ · 2 shared tags B
• Forget Spam Comment 9K+ installs · 4.7★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) into a readme, a review or a deck. It updates itself.

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA): 6K+ active installs, 4.9★ (49 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/oopspam-anti-spam