Comment Form CSRF Protection
v1.4by Ayesh Karunaratne · updated 3 years ago
Prevent Cross-Site Request Forgery attacks on your comments form.
- Rank
- #9,363
- Up38 vs yesterday
- Active installs (est.)
- ≈ 454
- 400+ reported · High
- Total downloads
- 16.1K
- 16,124 all-time
- Rating
- 5.0/5
- 2 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
Comment Form CSRF Protection at a glance
Comment Form CSRF Protection is a WordPress plugin by Ayesh Karunaratne with 400+ active installs, the #9,363 most popular plugin on WordPress.org. On a typical day it’s downloaded about 3 times, 33% more than the month before. It’s rated 5.0 out of 5 from 2 reviews. Version 1.4 came out on Jul 23, 2023, more than 3 years ago. It is tested up to WordPress 6.3.14. Among the 3 plugins tagged “csrf”, it ranks #2. It was first released in 2019.
Chart time range
Applies to every chart below. History from Oct 10, 2026, 31 days.
Downloads over time
Download stats79 downloads · the last 30 days
View as table
| Date | Comment Form CSRF Protection |
|---|---|
| Oct 29, 2026 | 4 |
| Oct 28, 2026 | 4 |
| Oct 27, 2026 | 5 |
| Oct 26, 2026 | 7 |
| Oct 25, 2026 | 3 |
| Oct 24, 2026 | 7 |
| Oct 23, 2026 | 1 |
| Oct 22, 2026 | 2 |
| Oct 21, 2026 | 2 |
| Oct 20, 2026 | 2 |
| Oct 19, 2026 | 8 |
| Oct 18, 2026 | 1 |
| Oct 17, 2026 | 2 |
| Oct 16, 2026 | 1 |
| Oct 15, 2026 | 7 |
| Oct 14, 2026 | 6 |
| Oct 13, 2026 | 8 |
| Oct 12, 2026 | 3 |
| Oct 11, 2026 | 1 |
| Oct 10, 2026 | 5 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 454 · -2.4% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 9, 2026 | 454 |
| Nov 8, 2026 | 452 |
| Nov 7, 2026 | 454 |
| Nov 5, 2026 | 453 |
| Nov 4, 2026 | 451 |
| Nov 3, 2026 | 452 |
| Nov 2, 2026 | 454 |
| Nov 1, 2026 | 454 |
| Oct 31, 2026 | 455 |
| Oct 30, 2026 | 452 |
| Oct 29, 2026 | 450 |
| Oct 28, 2026 | 452 |
| Oct 27, 2026 | 465 |
Rank over time
#9,363 · up 65 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | #9,363 |
| Nov 8, 2026 | #9,401 |
| Nov 7, 2026 | #9,372 |
| Nov 6, 2026 | #9,363 |
| Nov 5, 2026 | #9,385 |
| Nov 4, 2026 | #9,417 |
| Nov 3, 2026 | #9,403 |
| Nov 2, 2026 | #9,371 |
| Nov 1, 2026 | #9,369 |
| Oct 31, 2026 | #9,358 |
| Oct 30, 2026 | #9,409 |
| Oct 29, 2026 | #9,449 |
| Oct 28, 2026 | #9,434 |
| Oct 27, 2026 | #9,428 |
Growth %
Average -0.18% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 9, 2026 | +0.44% |
| Nov 8, 2026 | -0.44% |
| Nov 7, 2026 | +0.11% |
| Nov 5, 2026 | +0.44% |
| Nov 4, 2026 | -0.22% |
| Nov 3, 2026 | -0.44% |
| Nov 2, 2026 | 0.00% |
| Nov 1, 2026 | -0.22% |
| Oct 31, 2026 | +0.66% |
| Oct 30, 2026 | +0.44% |
| Oct 29, 2026 | -0.44% |
| Oct 28, 2026 | -2.80% |
Active installs band
400+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | 400+ |
| Nov 8, 2026 | 400+ |
| Nov 7, 2026 | 400+ |
| Nov 6, 2026 | 400+ |
| Nov 5, 2026 | 400+ |
| Nov 4, 2026 | 400+ |
| Nov 3, 2026 | 400+ |
| Nov 2, 2026 | 400+ |
| Nov 1, 2026 | 400+ |
| Oct 31, 2026 | 400+ |
| Oct 30, 2026 | 400+ |
| Oct 29, 2026 | 400+ |
| Oct 28, 2026 | 400+ |
| Oct 27, 2026 | 400+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Comment Form CSRF Protection ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #9434 → #9385
- Tested up to 6.3.13 → 6.3.14
Versions in use
Share of active installs on each published version, from WordPress.org.
- v1.489%
- v1.26.9%
- v1.03.9%
Rating trend
5.0★★★★★2 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 1.4
- Requires WordPress
- 4.2
- Tested up to
- 6.3.14
- Requires PHP
- 7.1
- First released
- Feb 21, 2019
- Last updated
- Jul 23, 2023
- Releases, last 12 months
- …
Questions about Comment Form CSRF Protection
How many websites use Comment Form CSRF Protection?
Comment Form CSRF Protection is active on 400+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #9,363 most popular plugin on WordPress.org.
How many times has Comment Form CSRF Protection been downloaded?
16,124 times in total since 2019. On a typical day it’s downloaded about 3 times. See download stats
When was Comment Form CSRF Protection last updated?
Version 1.4 came out on Jul 23, 2023 (3 years ago).
Is Comment Form CSRF Protection compatible with the latest WordPress?
Comment Form CSRF Protection’s readme says it’s tested up to WordPress 6.3.14, while the current version is 7.1. That doesn’t mean it breaks, but its author hasn’t confirmed it works with the latest releases.
Is Comment Form CSRF Protection still maintained?
Its last release was 3 years ago, so it may no longer be actively maintained. No support threads were opened in the last two months.
What rating does Comment Form CSRF Protection have?
5.0 out of 5 from 2 reviews on WordPress.org.
What are the best alternatives to Comment Form CSRF Protection?
The plugins most like Comment Form CSRF Protection, by the tags they share, are Akismet Anti-spam (5M+), Security Optimizer (1M+) and Disable Comments (1M+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
5.0
★★★★★
2 reviews
- 5 stars: 2 reviews, 100%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 0 reviews, 0%
- 1 stars: 0 reviews, 0%
- Positive
- 100%4–5★
- Mixed
- 0%3★
- Critical
- 0%1–2★
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 454 |
| Reported installs | 400+ |
| Rating | 5.0 |
| Reviews | 2 |
| Total downloads | 16.1K |
| Author | Ayesh Karunaratne |
| First released | Feb 21, 2019 |
| Version | 1.4 |
| Requires WP | 4.2 |
| Requires PHP | 7.1 |
| Last updated | Jul 23, 2023 |
Alternatives to Comment Form CSRF Protection
Compare all alternativesPopular plugins with the same tags, the most in common first.

Akismet Anti-spam
by Automattic
The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.
- Rank
- #8
- Installs
- 5M+
- 4.7

Security Optimizer
by SiteGround
Secure your WordPress site from brute-force attacks, threats, malware, and bots. Free to use and easy to set up.
- Rank
- #51
- Installs
- 1M+
- 4.5

Disable Comments
by WPDeveloper
Disable comments site-wide or by post type, delete existing comments in bulk, and block comment spam via REST API and XML-RPC. Multisite ready.
- Rank
- #38
- Installs
- 1M+
- 4.7

Limit Login Attempts Security
by WPChef
Limit login attempts and stop brute force attacks. WordPress security with 2FA, firewall, bot protection, IP blocking, and secure login monitoring.
- Rank
- #34
- Installs
- 1M+
- 4.8
Kadence Security
by Nexcess
Harden your site security with Login Security, Two-Factor Authentication (2FA), Vulnerability Scanner, Firewall, and more. Formerly iThemes Security.
- Rank
- #88
- Installs
- 700K+
- 4.6
ReCaptcha v2 for Contact Form 7
by IQComputing
Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1
- Rank
- #227
- Installs
- 200K+
- 5.0
Side by side:Comment Form CSRF Protection vs Akismet Anti-spamComment Form CSRF Protection vs Security OptimizerComment Form CSRF Protection vs Disable Comments
More by Ayesh Karunaratne
See everything by Ayesh KarunaratneOther plugins from this author in our catalog.

oEmbed Plus
by Ayesh Karunaratne
Adds support for embedding Facebook and Instagram posts in Block Editor (Gutenberg) and Classic Editor.
- Rank
- #3,619
- Installs
- 3K+
- 5.0

PHP Native Password Hash
by Ayesh Karunaratne
Makes WordPress use PHP's native password_hash() functions for portable, stronger, and time-attack safe bcrypt and Argon2 hashes.
- Rank
- #5,200
- Installs
- 1K+
- 5.0

SameSite Cookies
by Ayesh Karunaratne
CSRF-protection for authentication cookies. When enabled, this plugin makes sure the "SameSite" flag is set in authentication cookies.
- Rank
- #7,724
- Installs
- 700+
- 2.5

Fast 404
by Ayesh Karunaratne
Prevents WordPress from delivering full Page-Not-Found errors when the browser is not expecting a full HTML page. Saves bandwidth and improves perform …
- Rank
- #20,395
- Installs
- 50+

Clear Logout
by Ayesh Karunaratne
A tiny WordPress plugin to clear all browser data related to the site upon logout (With Clear-Site-Data header).
- Rank
- #21,422
- Installs
- 40+

Hatton National Bank Payment Gateway for WooCommerce
by Ayesh Karunaratne
Hatton National Bank Payment Gateway for WooCommerce plugin is a free and open source plugin to integrate Hatton National Bank Internet Payment Gatewa …
- Rank
- #46,932
- Installs
- 10+
- 5.0