Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

hCaptcha for WP · Version history

hCaptcha for WP changelog and version history

Latest version
5.5.0
Oct 30, 2026 (11 days ago)
Releases
113
since 2019
In the last year
16
about one every 22 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20194 releases
  • 202011 releases
  • 202115 releases
  • 202214 releases
  • 202319 releases
  • 202423 releases
  • 202512 releases
  • 202615 releases

202615 releases

  1. hCaptcha for WP 5.5.0Latest

    • Added compatibility with Contact Form 7 6.2.0.
    • Added support for Icegram Express Max.
    • Added safe entry data processing across supported integrations, including native form payloads and email addresses.
    • Protected configured content in WordPress REST post, page, collection, and search responses.
    • Required hCaptcha for native WordPress REST comment creation.
    • Blocked REST password attempts that bypassed the protected post and page password form.
    • Extended signed hCaptcha widget ID verification to integrations and form paths that previously skipped it.
    • Preserved WPForms spam checks and submission-time validation when hCaptcha replaces its native CAPTCHA.
    • Preserved the visible hCaptcha widget in Essential Addons registration after its form markup is sanitized.
    • Kept wpDiscuz comment reCAPTCHA active when hCaptcha protects subscriptions only.
    • Avoided duplicate CAPTCHA challenges on Wordfence-protected WordPress registration forms.
    • Simplified the settings screen with keys and setup guidance first, an optional setup wizard, and an Advanced tab for less common options.
    • Recovered form submissions on long-open pages by refreshing expired timing tokens and retrying token requests with a fresh nonce.
    • Removed the Show Anti-Spam Indicators setting and indicators from the Integrations page, because all integrations now use the Anti-Spam protection.
    • Fixed error responses for rejected hCaptcha checks in WooCommerce Store API checkout.
    • Fixed Easy Digital Downloads checkout to show hCaptcha errors in its standard notices.
    • Fixed content protection on sites using plain permalinks.
    • Fixed adaptive hCaptcha after failed login attempts in Fluent Forms, Simple Membership, Ultimate Member, Beaver Builder, and Ultimate Addons.
    • Fixed rendering and validation of existing Ninja Forms hCaptcha fields alongside the plugin’s own field.
    • Fixed hCaptcha rendering in Brevo signup widgets.
    • Fixed hCaptcha rendering in Formidable Forms when the CAPTCHA field label is set to “None”.
    • Fixed Kadence form CAPTCHA settings changing when saving content.
    • Fixed adaptive hCaptcha on Theme My Login AJAX login forms.
    • Fixed multisite settings being saved to the wrong scope during background updates.
    • Fixed missing Events entries for requests with long User-Agent values.
    • Fixed content protection URL patterns and preserved regular expressions in settings.
    • Fixed Automatic Verification on forms with nonstandard action URLs.
    • Fixed hCaptcha disappearing from ACF Extended forms after page load.
    • Fixed “Token replayed or expired” errors during ACF Extended form submissions.
    • Fixed “Signature mismatch” errors when guests submit custom Auto-Verification forms with Form Submit Time enabled.

  2. hCaptcha for WP 5.4.1

    • Fixed WordPress login authentication when login integrations have different protection settings.
    • Improved Auto-Verification compatibility with forms on query-based page URLs and Brevo forms, while simplifying form registration storage.

  3. hCaptcha for WP 5.4.0

    • Added optional AJAX submission for standard WordPress comment forms, with inline error messages.
    • Added form data processing for anti-spam checks in 10 popular integrations: WordPress Core, WooCommerce, Divi, Ultimate Addons for Elementor, Essential Addons, Mailchimp, Maintenance, Ultimate Member, bbPress, and GiveWP.
    • Added filtering of form fields identified as passwords, verification tokens, or payment details before anti-spam processing.
    • Improved an anti-spam entry collection to retain additional non-sensitive fields and avoid overwriting fields with duplicate labels.
    • Added Tutor LMS Pro integration.
    • Added Tutor LMS form data processing for anti-spam checks on login, registration, password recovery, and checkout.
    • Added Tutor LMS login, registration, password recovery, and checkout forms to the optional form-interaction API loading.
    • Added hCaptcha protection to the WooCommerce Order Withdrawal Form.
    • Added Essential Blocks form migration from Google reCAPTCHA to the Migration Wizard.
    • Added Tutor LMS Pro reCAPTCHA migration for Tutor LMS and WordPress login and registration forms.
    • Added an optional invisible hCaptcha disclosure controlled by the hcap_print_invisible_disclosure filter.
    • Added Montenegrin and Brazilian Portuguese hCaptcha widget locales.
    • Added support for documented per-widget hCaptcha render parameters through the hcap_widget_params filter.
    • Updated the Custom Themes editor and default theme to match the latest documented hCaptcha theme schema.
    • Improved plugin and theme dependency management on the Integrations page with activation notices and safe, selectable dependency deactivation.
    • Improved compatibility with Plugin Check (PCP).
    • Improved server-side verification.
    • Removed Paid Memberships Pro and Simple Basic Contact Form integrations after their WordPress.org closures.
    • Fixed Auto-Verification bypass after its transient expires or evicts a protected form and prevented other pages from removing its registration.
    • Fixed automatically added CSP sources, allowing unsafe JavaScript sources only for Enterprise accounts.
    • Fixed the Form Submit Time token lifecycle across page reloads and failed submissions to prevent stale tokens from exhausting issuance limits.
    • Fixed license detection when switching between Live and test modes.
    • Fixed saving credentials after an automatic site configuration check.
    • Fixed the Secret Key field appearing empty when a key is configured.
    • Fixed LearnPress checkout verification fatal error and prevented account creation before hCaptcha validation.
    • Fixed Google reCAPTCHA appearing in the Beaver Builder editor when its reCAPTCHA field is disabled.
    • Fixed reusing an expired token after a failed AJAX submission for several integrations.

  4. hCaptcha for WP 5.3.0

    • Added the Advanced Theme Editor with a live widget and challenge previews and direct JSON editing.
    • Added an Anti-Spam option to disable authenticated XML-RPC requests.
    • Added a honeypot argument to the hCaptcha shortcode.
    • Expanded delayed hCaptcha API loading on form interaction to 34 third-party integrations and WordPress Core, covering 65 protected form scenarios.
    • Fixed “Bad hCaptcha signature” errors on WordPress and bbPress login, registration, and lost password forms.
    • Fixed duplicate hCaptcha widgets on Profile Builder login forms that could block valid sign-ins.
    • Fixed LearnDash registrations being blocked by “Bad hCaptcha signature” errors when WordPress registration protection is also enabled.
    • Fixed a fatal error that prevented Affiliates registration forms from loading before their first submission.
    • Fixed hCaptcha reinitialization after Login/Signup Popup AJAX submissions using FormData.
    • Fixed misplaced hCaptcha widgets and unreadable error messages on two-column BuddyPress registration forms.
    • Fixed Elementor Pro form submit buttons remaining disabled after client-side validation failures.
    • Fixed delayed hCaptcha loading after interaction with Beaver Builder login forms.
    • Fixed GiveWP compatibility.
    • Fixed Paid Membership Pro compatibility.
    • Fixed Gravity Forms block submissions to prevent the “Unsupported submission flow” warning.

  5. hCaptcha for WP 5.2.0

    • Added MetForm integration.
    • Added MetForm migration to the Migration Wizard.
    • Added an option to delay the hCaptcha API until the user interacts with a protected form.
    • Added hCaptcha settings shortcuts to the WordPress Command Palette for quick navigation to plugin options.
    • Added validation of hCaptcha keys before making requests to fix the missing keys’ scenario.
    • Added support for custom login URLs in Perfmatters 2.5.8 and later.
    • Fixed unbounded growth of the auto-verification form registry transient by limiting its size with LRU eviction.
    • Fixed hCaptcha placement above express payment buttons on WooCommerce cart pages.
    • Fixed hCaptcha signature verification for nested Kadence Advanced Forms and pages with multiple Advanced Forms.
    • Fixed hCaptcha signature verification for Divi Comment Forms when the WordPress Comment Form integration is disabled.
    • Fixed fatal errors on Gravity Forms submissions containing Multi Select fields.
    • Fixed compatibility with Maintenance 4.32.

  6. hCaptcha for WP 5.1.0

    • Added version switching to the What’s New popup.
    • Added a Help button on hCaptcha admin pages to generate support reports for GitHub or WordPress.org, with optional System Info included.
    • Added hcap_delay_api_event filter for delayed loading of the hCaptcha API upon user interaction.
    • Hardened form verification for 22 integrations.
    • Fixed hcap_delay_api_selector filter for delayed loading of hCaptcha in the Jetpack contact forms.
    • Fixed hCaptcha auto-insertion for Jetpack block contact forms that render the Submit button with core Button block markup.
    • Fixed hCaptcha auto-insertion for WooCommerce Checkout blocks when the Return to Cart link is enabled.
    • Fixed manually added hCaptcha shortcodes inside Jetpack contact forms to use the proper form signature.
    • Fixed Events statistics table indexes for MariaDB/MyISAM databases with a 1000-byte key length limit.
    • Fixed System Info migration entries to show that older migrations were not required instead of displaying the Unix epoch date.
    • Fixed hCaptcha token refresh for Blocksy newsletter and waitlist forms after failed submissions.
    • Fixed ACF Extended Forms integration to prevent reCAPTCHA from loading when hCaptcha is used to avoid submission errors.
    • Fixed hCaptcha verification for upgraded GiveWP donation forms.
    • Fixed FST token replay errors after submitting GiveWP forms without completing hCaptcha.

  7. hCaptcha for WP 5.0.1

    • Fixed Elementor Pro Forms validation when the optional Form ID is empty or differs from the Elementor widget ID.
    • Fixed Events statistics table handling to avoid runtime table-existence checks and recreate the table during activation or maintenance when needed.

  8. hCaptcha for WP 5.0.0

    • Added Trusted IP Headers settings. hCaptcha uses REMOTE_ADDR by default; custom hcap_trusted_address_headers filters are migrated into the setting during upgrade.
    • Added Cloudflare detection to help identify when CF-Connecting-IP should be selected as a Trusted IP Header.
    • Added Trash support for Forms and Events statistics, including restore/permanent delete actions, 30-day Trash cleanup, and migration for existing event tables.
    • Added WooCommerce PayPal Payments integration for product, cart, mini-cart, and checkout express flows.
    • Added site icon on protected content pages.
    • Hardened form verification for some popular forms.
    • Fixed returning unexpected results by REST API in some cases.
    • Fixed Avada Forms integration so internal hCaptcha fields are excluded from [all_fields] notification emails.
    • Fixed sending statistics at the plugin update in some rare cases when the switch is off.
    • Fixed an issue in some custom Gravity Forms layouts.
    • Fixed an issue where a What’s New modal action could scroll the current Integrations page before opening the target integration in a new tab.
    • Fixed errors when resubmitting Essential Addons login and registration forms.
    • See changelog for all versions.

  9. hCaptcha for WP 4.26.0

  10. hCaptcha for WP 4.25.0

  11. hCaptcha for WP 4.24.0

  12. hCaptcha for WP 4.23.0

  13. hCaptcha for WP 4.22.0

  14. hCaptcha for WP 4.21.1

  15. hCaptcha for WP 4.21.0

202512 releases

  1. hCaptcha for WP 4.20.0

  2. hCaptcha for WP 4.19.0

  3. hCaptcha for WP 4.18.0

  4. hCaptcha for WP 4.17.0

  5. hCaptcha for WP 4.16.0

  6. hCaptcha for WP 4.15.0

  7. hCaptcha for WP 4.14.0

  8. hCaptcha for WP 4.13.0

  9. hCaptcha for WP 4.12.0

  10. hCaptcha for WP 4.11.0

  11. hCaptcha for WP 4.10.0

  12. hCaptcha for WP 4.9.0

202423 releases

  1. hCaptcha for WP 4.8.0

  2. hCaptcha for WP 4.7.1

  3. hCaptcha for WP 4.7.0

  4. hCaptcha for WP 4.6.0

  5. hCaptcha for WP 4.5.0

  6. hCaptcha for WP 4.4.0

  7. hCaptcha for WP 4.3.1

  8. hCaptcha for WP 4.3.0

  9. hCaptcha for WP 4.2.1

  10. hCaptcha for WP 4.2.0

  11. hCaptcha for WP 4.1.2

  12. hCaptcha for WP 4.1.1

  13. hCaptcha for WP 4.1.0

  14. hCaptcha for WP 4.0.1

  15. hCaptcha for WP 4.0.0

  16. hCaptcha for WP 3.10.1

  17. hCaptcha for WP 3.10.0

  18. hCaptcha for WP 3.9.0

  19. hCaptcha for WP 3.8.1

  20. hCaptcha for WP 3.8.0

  21. hCaptcha for WP 3.7.1

  22. hCaptcha for WP 3.7.0

  23. hCaptcha for WP 3.6.0

202319 releases

  1. hCaptcha for WP 3.5.0

  2. hCaptcha for WP 3.4.1

  3. hCaptcha for WP 3.4.0

  4. hCaptcha for WP 3.3.3

  5. hCaptcha for WP 3.3.2

  6. hCaptcha for WP 3.3.1

  7. hCaptcha for WP 3.3.0

  8. hCaptcha for WP 3.2.0

  9. hCaptcha for WP 3.1.0

  10. hCaptcha for WP 3.0.1

  11. hCaptcha for WP 3.0.0

  12. hCaptcha for WP 2.10.0

  13. hCaptcha for WP 2.9.0

  14. hCaptcha for WP 2.8.0

  15. hCaptcha for WP 2.7.0

  16. hCaptcha for WP 2.6.0

  17. hCaptcha for WP 2.5.1

  18. hCaptcha for WP 2.5.0

  19. hCaptcha for WP 2.4.0

202214 releases

  1. hCaptcha for WP 2.3.0

  2. hCaptcha for WP 2.2.0

  3. hCaptcha for WP 2.1.0

  4. hCaptcha for WP 2.0.0

  5. hCaptcha for WP 1.19.0

  6. hCaptcha for WP 1.18.0

  7. hCaptcha for WP 1.17.0

  8. hCaptcha for WP 1.16.0

  9. hCaptcha for WP 1.15.0

  10. hCaptcha for WP 1.14.0

  11. hCaptcha for WP 1.13.4.2

  12. hCaptcha for WP 1.13.4.1

  13. hCaptcha for WP 1.13.4

  14. hCaptcha for WP 1.13.3

202115 releases

  1. hCaptcha for WP 1.13.2

  2. hCaptcha for WP 1.13.1

  3. hCaptcha for WP 1.13.0

  4. hCaptcha for WP 1.12.0

  5. hCaptcha for WP 1.11.0

  6. hCaptcha for WP 1.10.3

  7. hCaptcha for WP 1.10.2

  8. hCaptcha for WP 1.10.1

  9. hCaptcha for WP 1.10.0

  10. hCaptcha for WP 1.9.2

  11. hCaptcha for WP 1.9.1

  12. hCaptcha for WP 1.9.0

  13. hCaptcha for WP 1.8.1

  14. hCaptcha for WP 1.8.0

  15. hCaptcha for WP 1.6.5

202011 releases

  1. hCaptcha for WP 1.6.4

  2. hCaptcha for WP 1.6.3

  3. hCaptcha for WP 1.6.1

  4. hCaptcha for WP 1.5.4

  5. hCaptcha for WP 1.5.3

  6. hCaptcha for WP 1.5.2

  7. hCaptcha for WP 1.5.1

  8. hCaptcha for WP 1.5.0

  9. hCaptcha for WP 1.4.2

  10. hCaptcha for WP 1.4.1

  11. hCaptcha for WP 1.4

20194 releases

  1. hCaptcha for WP 1.3

  2. hCaptcha for WP 1.2

  3. hCaptcha for WP 1.1

  4. hCaptcha for WP 1.0

Questions about hCaptcha for WP’s releases

What is the latest version of hCaptcha for WP?

5.5.0, released on Oct 30, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is hCaptcha for WP updated?

16 releases in the last year, about one every 22 days. Its first release on WordPress.org dates from May 2019.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in hCaptcha for WP’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.