ReCaptcha v2 for Contact Form 7

Adds reCaptcha v2 from Contact Form 7 5.0.5 that was dropped on Contact Form 7 5.1

v1.5.0IQComputingUpdated 2026-06-05Added Dec 28, 2018200k+ installs100% rating
44
Score
12
Errors
30
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability93

Top Issues by Category

Issues Details

42 issues found in latest scan

WARNING7
WordPress.Security.NonceVerification.Recommended

Processing form data without nonce verification.

WARNING6
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST['g-recaptcha-response'] not unslashed before sanitization. Use wp_unslash() or similar

ERROR5
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

WARNING5
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING5
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST['g-recaptcha-response']

ERROR4
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$desc_link'.

WARNING3
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST['wpcf7_recaptcha_network']['secretkey']. Check that the array index exists before using it.

WARNING2
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound

Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "wpcf7_recaptcha_locale".

WARNING1
WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedFunctionFound

Functions declared in the global namespace by a theme/plugin should start with the theme/plugin prefix. Found: "wpcf7_recaptcha_response".

ERROR1
WordPress.WP.I18n.MissingTranslatorsComment

A function call to esc_html__() with texts containing placeholders was found, but was not accompanied by a "translators:" comment on the line above to clarify the meaning of the placeholders.

ERROR1
WordPress.WP.I18n.UnorderedPlaceholdersText

Multiple placeholders in translatable strings should be ordered. Expected "%1$s, %2$s", but got "%s, %s" in 'Only when "reCaptcha Version 2" is selected will you need to use the %s shortcode tag in your Contact Form 7 forms. ReCaptcha v3 (Default Usage) does not use a recaptcha shortcode.%sSelect the version of reCaptcha you would like to use:'.

WARNING1
trademarked_term

The plugin slug includes a restricted term. Your plugin slug - "wpcf7-recaptcha" - contains the restricted term "wp" which cannot be used at all in your plugin slug.

ERROR1
wp_function_not_compatible_with_requires_wp

Function "wp_is_block_theme()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 4.9.0.

Latest Snapshot

Findings

42

Errors

12

Warnings

30

Score History

First score snapshot

First scan completed Jun 19, 2026

v1.5.0 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 19, 2026

v1.5.0

44

Latest

Findings
42
Errors
12
Warnings
30
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins