Shield your site from spam, malicious users, and attacks with our advanced detection engine. Integrate seamlessly with other plugins for added protect …
fix(bypass vulnerability): see https://patchstack.com/database/database/vulnerability/zero-spam/wordpress-zero-spam-for-wordpress-plugin-5-5-5-bypass-spam-protection-vulnerability
v5.5.6
fix(missing tables): fix for missing tables error on multisites, #377
v5.5.5
fix(jquery): fix for jquery not found error when jquery is loaded with defer
chore(splorp): updated the slorp blacklist
v5.5.4
fix(zero spam): fix for error in the zero spam api
v5.5.3
feat(patchstack): integrating patchstack faqs
fix(coding standards): updates to better comply with wp coding standards
v5.5.2
fix(vulnerability): fix for bypass using .ico in url or adjusting the x-forwarded-for header
v5.5.1
fix(david walsh): fix for jquery not defined error, related to the zerospamdavidwalsh method, resolves #359
v5.5.0
feat(profilepress): added support for profilepress registrations
v5.4.7
fix(david walsh): fix for missing david walsh dependency, resolves #345
v5.4.6
fix(admin): fix for php notice about missing database_query_arguments
fix(whitelist): fix for whitelisted ips not getting triggered on comments, resolves #350
v5.4.5
fix(security): fixed sql injection vulnerability in the zero spam admin log table query
v5.4.4
refactor(project honeypot): resolves #344, added additional check & debug info for ip type support
fix(wpforms): resolves #343, fix for jquery dependency
fix(registration): resolves #342, fix for failed registration output
fix(php8): resolves #341, fix for php8+ compatibility issue
v5.4.3
fix(emojis): fix for fatal error when emojis are disabled
feat(givewp): enhanced security using the david walsh method on legacy forms
feat(admin): major ui enhancements
feat(gravityforms): adds support for gravity forms
feat(reports): improved error logs
feat(wpdiscuz): resolves #327, added support for wpdiscuz
feat(wpforms): now supports checking blocked email addresses
feat(email): enhanced email security checks
fix(double requests): issue with double checks being performed per page visit
fix(blocks): fix for blocked ips not getting properly blocked
fix(locations): fix for blocked locations not getting added/updated
fix(comments): fix for valid comment submissions being flagged
fix(admin): missing country flag in ip details modal
fix(woocommerce): fix for login woocommerce registrations fixed
fix(david walsh): fix for flagged submissions when using the david walsh technique
perf(misc): misc performance improvements related to 3rd-party api queries
v5.3.9
fix(admin): fix issue with admin notice not dismissing properly, resolves #319
v5.3.8
chore(zero spam api): updated the zero spam api to v2
v5.3.7
chore(readme): documentation updates
v5.3.6
fix(admin): fix for admin notice not getting dismissed when clicked, resolves #318
v5.3.5
chore(readme): added 3rd-party service integration documentation to the readme
chore(admin): revised the admin message that’s displayed with zero spam enhanced protection is enabled, but a valid api key is not provided
v5.3.4
fix(notice): removed dismiss button on initial install to ensure plugin settings are configured before use
v5.3.3
feat(zero spam settings): displays dismissible notices for enhanced protection and invalid license keys
feat(dates): updated the admin tables to display dates based on the site settings, resolves #305
fix(ukraine): removed the ukraine banner
v5.3.2
feat(zero spam api): now reports spam and malicious email addresses
v5.3.1
fix(zero spam api): update to limit number of requests when sharing data
v5.3.0
fix(woocommerce): fix for spam getting triggered during woo checkout with create account checked, resolves #313
refactor(zero spam api): performance improvements when sharing detections
v5.2.15
feat(ukraine): we’ll no longer provide protection for .ru, .su, and .by domains & will display a banner of support for the ukrainian people on those sites – united with ukraine
v5.2.14
fix(woocommerce): fixes issues with woocommerce login not working, resolves #310
v5.2.13
feat(woocommerce): added support for woocommerce registrations, resolves #306
fix(admin): fix for displaying & adding blocked ip addresses, resolves #308
v5.2.12
refactor(wordpress coding standards): misc updates to conform to wordpress coding standards
= v5.2.11
fix(security): fixes the missing orderby parameter sanitization in the admin dashboard
Has been my go-to anti-spam plugin for quite some time. I've used many of the techniques individually on many sites. Having them rolled up into a single plugin is just amazing!
All 1-star reviews that say it doesn't work, don't have it setup/integrated properly, which can take a little bit of effort. There is no magical anti-spam protection that instantly happens when you activate it. BUT, once you do implement a few of the techniques this plugin provides, spam becomes a thing of the past.
Prior to v5.2.15, would have been an easy 5-star rating. Because of v5.2.15, I regrettably have to give it 1-star review. Plugin author: This is an ANTI-SPAM plugin, NOT a Ukraine support plugin. If you want to show your support for Ukraine, make a plugin for it. DON'T ruin a useful plugin by injecting unrelated political beliefs it into it. Blocking spam is blocking spam. Supporting Ukraine is supporting Ukraine. Mix them together and you just end up ruining both.
v5.2.15
feat(ukraine): we’ll no longer provide protection for .ru, .su, and .by domains & will display a banner of support for the ukrainian people on those sites – united with ukraine
Personal Note to the Plugin Author:
It's your plugin, you can do what you want, but here's an important question: Is this plugin for YOU (the plugin author) to broadcast political beliefs, or for US (the plugin users) to block spam? Between those two, which one is more important? Pick one and go with it. If you pick personal political beliefs over plugin user functionality then it's only a matter of time until someone takes all of your hard work on this plugin, removes your political beliefs, releases it as a new plugin, and surpasses you in # of installs, making this plugin obsolete. You will be your own undoing. Would hate to see that happen to an otherwise WONDERFUL & AMAZING plugin!
Remove personal politics from this plugin, and my review will change to the 5-star review that it deserves.
This plugin undergoes a UI change every few months, and continues to make the same mistake - it doesn't remember what the previous settings were on 'big' updates.
Which is a huge dev failure. If you have it on multiple sites, suddenly your contact form is getting spammed to high heaven again. Then you have to go back in, and redo the settings.
This is a must-install plugin.
Didn't take a hit on performance and the obnoxious barrage of spam has STOPPED! So much frustration out of my life since install.
Since there is a paying version, the free version let through significantly more spam, in my opinion.
The spammy banner urging you to pay, has a dismiss link. It does not dismiss the banner, but takes you to the settings page to update to a paid account.
The banner consistently returns, nagging you into paid account.
Are there alternatives?
I was getting hundreds of spam registration, comments all day long, and fraudulent credit card submissions in WPGive. I installed Zero Spam and it came to a stop! LOVE this plugin!
Firstly, I get it. Plugin developers want to get paid, and where they have a premium add-on it's reasonable to make sure that website owners can be prompted to upgrade.
Sadly this plugin has gone down the route of adding an overly threatening sales message that is not dismissible.
My website is not at risk if I don't subscribe to your service. You're providing an optional layer of security. If I click "dismiss" I expect the notice to go away, not to be take away from *my* dashboard to your sales page.
