[Plugin: SI CAPTCHA Anti-Spam] Spam registrations are getting through, despite the captcha enabled

I’ve also seen an increase in spammers getting past CAPTCHAs – and not only this one – also getting it on sites using other WordPress CAPTCHA plugins as well as Drupal sites.
I have caught several spammers using online CAPTCHA bypass software and managed to block these with .htaccess deny from IP rules.

I thought that too. So, you think it’s just those “captcha bypass” cases? Nothing I can really adjust in the plugin, right? One thing I thought about is to test the site if there are any holes in the way this captcha is configured. For example, I was thinking about the implementation of this plugin – whether it’s hooked to the registration script itself, meaning it doesn’t matter if a particular form has captcha or not, it would still require it. From what I know, spammers these days don’t use the actual interface of the website – they submit directly into the wordpress system. Do you know if there is any easy way to test that?