Thanks for your response. I have reviewed your suggestions and performed the following checks:
- I verified that all registration forms on my site are protected by reCAPTCHA, including WooCommerce.
- I checked whether registrations were happening manually, but the volume suggests automated spam.
Could you please confirm if the plugin has any known bypass issues or recommend any additional security measures?
Looking forward to your advice.