Stop spam on WPForms

Cayve runs after WPForms has validated a submission and before it saves the entry and sends notifications. Lite and Pro both work.

What Cayve checks

  • Every WPForms form, including AJAX forms
  • Name, email and every field, with their field types
  • Timing, the hidden field and the signed form token

When a message is held or blocked

The visitor always sees your normal success message, so a spammer learns nothing. The entry is saved as usual; only the notification email is held back. Release the message in Cayve → Messages and the email goes out as if nothing happened.

Set it up

  1. Add your site in the Cayve dashboard and create a live key.

  2. Install the Cayve plugin in WordPress (Plugins → Add New → Upload Plugin).

  3. Paste the key on the Cayve → Overview screen. Cayve checks it straight away.

  1. Make sure WPForms is switched on under Cayve → Protection. It is by default.

A submission WPForms has already rejected (a required field missing) is never sent to Cayve or counted.

Protect WPForms today.

Start in shadow mode and see what Cayve would have stopped before it acts on a single message.