FormShield protects your forms from bot spam using advanced pattern matching and behavioral analysis. No annoying captchas, unlimited forms.
FormShield is a powerful form protection plugin that uses advanced pattern matching, behavioral analysis, and IP tracking to protect your WordPress forms from spam and bots without requiring users to solve annoying captchas.
Key Features:
- No License Restrictions – Protect unlimited forms for free
- No Captcha Required – Seamless user experience
- Advanced Bot Detection – Uses pattern matching, behavioral analysis, and IP tracking to identify bots
- 14 Form Integrations – Works with all major form plugins
- Real-time Protection – Blocks spam in real-time
- Easy Setup – Works out of the box
- Form Location Tracking – See exactly where your forms are located (pages, posts, etc.)
Supported Form Plugins:
- Contact Form 7
- Gravity Forms
- WPForms
- Elementor Forms
- Ninja Forms
- Formidable Forms
- Happy Forms
- Fluent Forms
- WeForms
- WSForm
- QuForm
- Divi Contact Forms
- WordPress Comments
- And more coming soon!
How It Works:
FormShield analyzes user behavior patterns, content patterns, IP history, email validation, and submission frequency to determine if a submission is from a real human or a bot. This multi-layered approach is more effective than traditional captchas and provides a better user experience.
Privacy & Security:
- This plugin does not connect to any third-party service and does not send data offsite
- All features included in this WordPress.org version are fully self-contained
- No data is sent to external servers
- All processing happens on your WordPress site
- GDPR compliant
- No user data collection
Privacy
This plugin does not transmit personal data to any third-party service. All features included in this WordPress.org version are fully self-contained and do not require external connections.
FAQ
Is FormShield really free?
Yes! FormShield allows you to protect unlimited forms without any license restrictions.
Do I need a captcha?
No! FormShield works silently in the background without requiring users to solve captchas.
Which form plugins are supported?
FormShield supports 14+ form plugins including Contact Form 7, Gravity Forms, WPForms, Elementor Forms, and many more.
Can I see where my forms are located?
Yes! FormShield now includes a Location column that shows exactly where each form is detected – whether it’s on a specific page, post, or other location.
Does it affect site performance?
FormShield is lightweight and optimized for performance. It adds minimal overhead to your site.
Is it GDPR compliant?
Yes! FormShield processes everything locally on your server and doesn’t send data to external services.
ChangeLog
1.1.7
- Reworked anti-bot engine to reduce false positives: removed behavioral confidence scoring and switched to deterministic checks
- Added content-based spam validation for all protected integrations (custom blacklist/whitelist, multi-URL detection, built-in spam phrases/domains)
- Added custom spam filter controls in Settings: “Blocked Keywords / Domains” and “Safe Words / Whitelist”
- Added automatic whitelist for the site’s own domain to prevent false blocking of internal links
- Improved Contact Form 7 reliability: canonical numeric form IDs, legacy slug migration, robust badge rendering, and stronger honeypot handling (
fs_hp_*)
- Disabled Divi 4/5 integration while in development to avoid exposing unfinished protection flows
1.1.6
- Fixed plugin loading issue – removed blocking directory validation checks that prevented plugin from loading
- Fixed Settings link in plugin list – now correctly points to Settings page
- Improved admin menu initialization – added safety checks to ensure menu displays correctly
- All spam blocking features from 1.1.5 are working correctly
1.1.5
- MAJOR SECURITY UPDATE: Real spam blocking for Divi Contact Forms – spam submissions are now completely blocked instead of just flagged
- MAJOR SECURITY UPDATE: Real spam blocking for WordPress Comments – spam comments are now completely blocked with error message instead of just marked as spam
- Added instant block patterns for YouTube shorts links and marketing spam combinations
- Enhanced Divi form protection with server-side hooks for complete spam blocking
- Improved JavaScript form interception – now blocks submission and waits for server validation
- Added instant block detection for “затруднявате се” + URL combinations
- Enhanced comment spam protection with instant block patterns matching Divi protection
- Added more short URL service detection (rb.gy, cutt.ly, tiny.cc, surl.li)
- Improved marketing keyword detection in Bulgarian and English
- Comments with spam patterns now show error message to user instead of silently going to spam folder
- Updated WordPress compatibility to 6.9 (tested and verified)
- Fixed issue where spam submissions were flagged but still sent via email
1.1.4
- Improved Divi Contact Form spam protection with enhanced detection patterns
- Added detection for short URL services (ow.ly, bit.ly) in Divi form submissions
- Enhanced marketing keyword detection for AI-driven spam and promotional content
- Added YouTube shorts link detection for Divi forms
- Improved spam scoring system with combination penalties (URL + marketing text)
- Lowered spam threshold from 50 to 40 for more aggressive protection
- Fixed badge duplication issue – badges now display only once per form
- Fixed badge display for Divi forms using correct form identification format
- Added multilingual support for all badge texts
- Added multilingual support for scanner description texts
1.1.3
- Fixed WooCommerce compatibility issue – FormShield no longer blocks WooCommerce forms
- Fixed “Sorry, we could not process your submission” error on WooCommerce pages
- FormShield now properly excludes WooCommerce forms until official integration is added
1.1.2
- Significantly improved comment spam detection for marketing spam
- Added detection for YouTube links (especially shorts) in comments
- Enhanced marketing keyword detection (AI, traffic, clients, advertising in English and Bulgarian)
- Improved spam scoring for marketing phrases combined with URLs
- Added immediate spam flagging for short URL services (ow.ly, bit.ly, etc.)
- Better detection of promotional content with links
- Fixed false negatives for marketing spam comments
1.1.1
- Enhanced WordPress comments spam protection with improved detection patterns
- Added automatic spam detection for URL-only comments and short URL services
- Lowered spam threshold for comments (50 instead of 70) for more aggressive protection
- Added separate option to completely disable comments site-wide
- Added option to enable/disable comment spam protection independently
- Improved comment spam scoring system with better pattern matching
- Comments can now be disabled globally from settings (posts, pages, images, all content types)
- Enhanced comment protection with immediate spam flagging for obvious spam patterns
1.1.0
- Added advanced spam scoring and filtering system for Divi Contact Forms
- Introduced developer hooks (filters & actions) for full customization and integrations
- Added formshield_divi_custom_score_delta filter for extending spam scoring logic
- Added granular filters to modify spam patterns, behavioral data, scores, and thresholds
- Added action hooks for suspicious and legitimate submissions, enabling CRM and logging integrations
- Improved duplicate Divi form detection using post ID and form ID
- Enhanced deduplication logic to prevent the same form from being detected multiple times
- Added configurable suspicion and email notification thresholds
- Improved internal architecture for better extensibility and future integrations
1.0.2-beta
- Added Location column to show where forms are detected (pages, posts, etc.)
- Enhanced form location tracking for better visibility
- Improved table layout and responsive design
1.0.1-beta
- Enhanced Divi Contact Form detection
- Specialized scanning for Divi 4 and Divi 5
- REST API endpoints for form detection
- WP-CLI support for command line scanning
- Admin rescan button with real-time results
- Improved caching and performance
- Better error handling and logging
1.0.1
- Fixed Contact Form 7 badge display issue
- Improved form ID matching for slug-based forms
- Fixed JavaScript syntax error in badge generation
- Removed debug logging for cleaner console output
- Enhanced badge compatibility with different CF7 form configurations
1.0.0
- Initial release of FormShield
- Support for 14 form plugins
- Unlimited form protection
- Advanced bot detection
- No license restrictions
- Added Divi Contact Forms support
