Security Issues with CleanTalk

Hi,

Today, on the 23rd, there were two separate emails used to register to our site, and both of them were the same bot/person. It was the same bot because their registration was 8 minutes apart from each other, they had the same first and last name, and had a very similar username (the last two characters were different).

One of those emails were marked as spam via Cleantalk almost 10 days before the spammer registered to our site. Somehow they bypassed your plugin and our Google reCAPTCHA. Your plugin approved the spammer and the spam account spammed our users. However, the spammer was denied to post anymore by your plugin “*** Forbidden. You sent forms too often. Please wait a few minutes. Contains contacts. ***”.

We have never had an issue like this when using your plugin. No spam has ever gotten through. A bot/spammer has never been able to bypass your plugin via our site, so there seems to be something wrong and we needed to let you know! Not sure if there is some sort of security issue involving the latest update but it needs to be addressed.

Best regards,

J

• This topic was modified 4 years, 10 months ago by T4G.

The page I need help with: [log in to see the link]