Uncle Tom

Password managers can sometimes interfere with CAPTCHA challenges when autofill is enabled.

Wordfence won’t help you here.

I’d recommend implementing Cloudflare WAF to block out majority of the bots. Turn off guest checkout. Require an account to purchase, making it so they need to verify their email to continue. Switch from charge to authorize.

After that, start looking into plugins to help. In the meantime the steps above should filter out a lot of them.

great idea! This comes in handy on Cloudflare when having to manage lists of IPs. Would come in handy here as well

are you by chance using a password manager?

you got my vote!