WP Armour – Honeypot Anti Spam
WP Armour – Honeypot Anti Spam has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 7.8, and the most serious one scores 9.6 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
Every one of the 2 issues recorded for WP Armour – Honeypot Anti Spam has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Rafie Muhammad. WP Armour – Honeypot Anti Spam is installed on roughly 400,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
WP Armour Honeypot Anti Spam <= 1.5.6 -Cross-Site Request Forgery to Arbitrary Options Update
Read the full analysisVulnerability Records

WP Armour – Honeypot Anti Spam
Author
Dnesscarkey
This plugins block spam submissions using honeypot anti spam technic. No Captcha or extra verification field hassle to the users. Only lets spam bots to suffer using our anti spam filter. Automatic anti spam protection for following forms (Available in Free Version) . No setup required. WP Comments WP Registraton BBPress Forum (bbpress.org) Contact Form 7 (wordpress.org/plugins/contact-form-7) Gravity Forms (For Non Ajax and Single Page/Step Form – gravityforms.com) WPForms (wpforms.com) Formidable Forms (formidableforms.com) Caldera Forms (calderaforms.com) Toolset Forms (toolset.com) Elementor Forms (elementor.com) Fluent Forms (fluentforms.com) Divi Theme Contact Form (elegantthemes.com) Theme My Login ( https://wordpress.org/plugins/theme-my-login/ ) WooCommerce Reviews Pro GDPR compliant. No tracking, cookie storage or external server calls. WP Armour Extended (Paid Version) supports additional anti spam protection and features. Record Spam Submission, view what spam bot are trying to submit Logs spam bot IPs. Block spam bot IPs if multiple spam is submitted. Add extra level of anti spam filter based on IPs. Stops spam bot from using unwanted bandwidth and save valuable server resource. Spam Keyword Filter marks form submissions as spam when they contain specified words or phrases. WooCommerce Checkout & Registration including Card Testing Orders (woocommerce.com) Easy Digital Downloads Checkout and Registration (easydigitaldownloads.com) QuForm Contact Form (quform.com) Ninja Forms (https://ninjaforms.com) Gravity Forms (For Ajax Based and Multi Step Forms – gravityforms.com) MC4WP: Mailchimp for WordPress (mc4wp.com) S2 Members (s2member.com) Ulimate Members (ultimatemember.com) Bricks Builder Form (bricksbuilder.io) BricksForge Pro Form (bricksforge.io) Beaver Builder Contact Form Module (Beaver Builder) Strong Testimonials (wordpress.org/plugins/strong-testimonials) Formcraft Form (formcraft-wp.com) Forminator Form (wordpress.org/plugins/forminator) WS Form (wordpress.org/plugins/ws-form) YITH Easy Login & Register Popup for WooCommerce UsersWP (wordpress.org/plugins/userswp) Youzify (youzify.com/) MailPoet (wordpress.org/plugins/mailpoet) Brevo – SendInBlue (wordpress.org/plugins/mailin) JetForm Builder (jetformbuilder.com) HTMLform plugin (htmlformsplugin.com) Avia Enfold Theme (kriesi.at/themes/enfold) BuddyPress (buddypress.org) BuddyBoss (buddyboss.com) Sure Forms (wordpress.org/plugins/sureforms) Everest Forms (wordpress.org/plugins/everest-forms) You can get the WP Armour – Anti Spam Extended from here How our plugin is different than other honeypot anti spam plugins ? Works for most of the forms and wordpress system including registation and comments. So All in one anti spam solution. No external API calls like Akismet or CleanTalk for spam filtering. GDPR Compliant. Spam bots can’t use javascript so we use javascript to insert honeypot anti spam field in the form and spam bots can’t fill it to pass anti spam test. Unique honeypot field name generated for each wordpress installation, so it is hard for spam bots to make one fit for all solution to bypass honeypot anti spam test. No setup required. Just activate the plugin and it enables anti spam for all supported forms, comment and registration. No API or monthly subscription needed like other plugins. Though we have Premium extended version of the plugin for more support with yearly license. Support If you have any issue, you can write to using support forum. Need distance-based delivery fees in WooCommerce? Calculate accurate shipping costs automatically with RoutePricing. Uses Google Maps to set dynamic prices per km/mi — perfect for restaurants, local shops, and delivery businesses. Support Us at Patreon Your support is vital for us to keep fighting spam. By supporting us on Patreon with as little as USD 1, you will help us continue developing of our anti spam plugin. Our other plugins Use Any Font Jquery Validation For Contact Form 7 Jquery Validation For Gravity Forms Block Specific Plugin Updates
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C