Search Results for 'recaptcha'

Hi,

If you mean our subscription plugin, it has it’s own setting -> https://prnt.sc/DSTgj0mbWNXy Normally if a subscription plugin is used, then visitors should be able to create accounts and subscribe. For bot protection the theme recaptcha can be used -> https://prnt.sc/_nvgt73H3TFQ

Thank you!

Hi,

Please don’t post your license keys in the forum topic, because every forum member can see them. I removed them.

I tried creating an account on your website here https://aecontribuyentes.com/

https://prnt.sc/d7KObnIOAvCC
https://prnt.sc/UlSsVYTg7ZvX

But when I tried to log in it didn’t work. I checked my email and I received an activation link, once I clicked on that it said it activated my account -> https://prnt.sc/2KuybYyz1V1L

I also received this email -> https://prnt.sc/xzl5Ju7zspM5

But I still can’t log in, it always says that my username or password is incorrect. Maybe it could be because of the recaptcha. This can be tested. If you activated the theme recaptcha, please disable it -> https://prnt.sc/cT4_ht2hjxN4 Then test again. Although It shouldn’t block users from logging in. Then test to see if it works.

Thank you!

Hi,

Maybe the recaptcha keys are the ones used on the staging, which won’t work for the main website.

If you entered recaptcha V3 keys in the theme -> https://prnt.sc/D977Jhvfl2uQ and you want to continue having recaptcha on the website, the problem must be solved in your Google recaptcha admin panel. So here -> https://www.google.com/recaptcha/admin/create

There you can add the website and create the V3 keys -> https://prnt.sc/ax3rzqN87EW1 The keys can then be entered in the theme panel, remove the old ones and add the new ones.

Or you could just remove the keys if you don’t want or need to use recaptcha.

Please try it.

Thank you!

Hi,
I just checked your website, and it appears that you still have the signing on mobile on some pages and articles, so this is the problem (most likely, those are not even protected with reCAPTCHA https://prnt.sc/dK_CRlHv1fuH since you believe it is disabled on the site https://i.imgur.com/Y1oqLsJ.png – https://prnt.sc/A39SBfzgOQcf – https://prnt.sc/7V6Yyr4LLNxr). It is possible that you disabled the theme panel options recently, if so, please clear all cache and purchase the CDN.
Thank you!

Hi,
I would like to clarify that a standard WordPress installation, even when using the theme, does not automatically block bots. WordPress securely handles login, registration settings, and user roles, but it does not include built-in bot protection such as CAPTCHA or rate limiting by default.
This means that any public form (login, registration, contact form) can be targeted by automated bots unless additional protection is enabled.
The theme does not bypass WordPress registration settings. It follows the normal WordPress rules. To reduce automated registrations or spam, the theme provides an option to enable reCAPTCHA (Use Google reCAPTCHA v3 or Use Google reCAPTCHA global domain) as an extra security layer.
If you can share clear steps showing that WordPress registration settings are being bypassed, we will be happy to review and investigate further.

Hi,
Please make sure that you are using CloudFlare and Wordfence to be sure that your site is protected by bots.
After that, make sure that you have set the reCAPTCHA by Google in the theme panel – https://prnt.sc/Qm2F72H915Lb
Thank you!

Hi E K,
I think there’s been a bit of a misunderstanding here, so let me clarify the situation in simple terms.
This is not a code injection vulnerability in td_ajax.php. What the user reported is a case where fake users were being created, and they noticed that the registration process uses code from a specific line in a theme file. Up to this point, I believe everything is clear.
In the discussion, I explained that the theme already includes protection against fake registrations through Google reCAPTCHA, which can be enabled from the theme panel. This option was added specifically to protect the login and registration functionality from the theme. However, the user mentioned that they are using Cloudflare CAPTCHA instead and do not want to use Google reCAPTCHA. Because of this choice, the built-in theme solution cannot be applied in their case. The workaround they chose was to comment out a line of code, which stops the registration popup from creating new user accounts. This works for them, but it also changes how that functionality behaves (for example, if login is required for comments or if the popup is used elsewhere on the site).
So the situation is not that there is no solution, there is a solution, but it’s not the one the user wants to use. When someone chooses a different CAPTCHA system, a different approach is needed.
What I did was:
– clearly explain the existing solution provided by the theme
– acknowledge the user’s setup and limitations
– notify the developers that offering an alternative option could help other users in the same situation
From my perspective, this was handled correctly. If my straightforward writing style caused any confusion or gave the wrong impression, that certainly wasn’t my intention.
Thank you for your understanding!

Hi,
I made a new notice to our developers; unfortunately, this is all I can do.

What I can do is some suggestions for some plugins that can help, there are cases that are not covered by the recaptcha and those plugins can help:
https://wordpress.org/plugins/user-verification/
https://wordpress.org/plugins/user-spam-remover/

Hi,
If the Recaptcha is set in the theme, then it can be removed from teh theme panel – https://i.imgur.com/4aCWcyX.png. Also, it is possible to have an extra plugin that uses recaptcha.
Thank you!

At the moment, the only available option we have to address that particular issue is using Google recaptcha.

However, if you’re looking for an alternative, we recommend trying cloudflare Turnstile: https://www.cloudflare.com/application-services/products/turnstile/ (I understand you’ve already tried it, and normally it should do the job).

Thanks for your understanding!

Hi bdp,
The default theme option for registration is enabled/disabled based on the WordPress option ” Anyone can register” – https://i.imgur.com/1pMNKyu.png. If this is disabled, the theme popup will no longer be possible to use. Now in case you use the register option, make sure that you also set the Google reCAPTCHA for the theme register (in the theme panel) – https://i.imgur.com/M3nGDUs.png

I apologize for this inconvenience,
I understand what you are saying and that for you that ajax end point is exposed is a bug, but unfortunately for the moment there are only 2 solutions, use google recaptcha or comment that line of code on each theme update.
I have sent a notification to the developers if they can also implement cloudflare as recaptcha for that ajax end point.

Hello,
I think I understand what the situation is in your case. I think you are using the registration option but you are using wordpress for this, with this option https://i.imgur.com/V1Jwk8O.png and the problem is that even though you are not using the theme option, fake users are created through the theme option, right? This happens because as long as the wordpress option for “Anyone can register” is active and the theme option for registration is active. To prevent the creation of fake users please set in the theme panel Social/Apis Google Recaptcha this is special for the theme option and will prevent the creation of fake users https://i.imgur.com/ulAdEVx.png

Hello!

Unfortunately, we do not have other options—only the ones presented in the theme panel.
Check this guide as well: https://developers.google.com/recaptcha/docs/v3

I hope that helps you!

Thank you!

Hello!

Do you use Google Recaptcha v3, and did you modify the score? If you’re using reCAPTCHA v3, lower the score threshold you accept.
Use extra behavior analysis (like mouse movement). Google reCAPTCHA v3 already does some of this, but custom behavior tracking can catch more.

Thank you!