I agree, we own 100+ websites with WordPress and this Fast “Secure” (what’s in a name LOL) Contact Form installed, and since last week we get mass spammed to death with junkmail!
We already had set the captcha difficulty to “high”, but the captcha that comes with this plugin seems peanuts for spambots.
TIP: We already have switched on a few of our sites to https://www.ads-software.com/extend/plugins/recaptcha-form/ and this one works great!
It seems these spambots are not able to crack reCaptcha’s.