Fixed: with an integration enabled but the plugin not yet configured (missing endpoint, site key, or secret), logins and other forms could be blocked with a “CAPTCHA verification failed” error. An unconfigured plugin now never blocks submissions — protection simply stays off (and admins still see the “not configured” notice) until the Cap settings are filled in.
1.2.1
Fixed: creating an account during WooCommerce checkout no longer shows a “CAPTCHA verification failed” error when the CAPTCHA is only enabled for the My Account forms (the widget isn’t rendered on checkout). The My Account registration form is still protected as before.
1.2.0
Added: per-form fail-open — let logins through during a Cap outage while still requiring a valid proof on contact forms (or any mix). Set it per surface, or keep the global default.
Added: submissions accepted during a Cap outage are now flagged for review (Gravity Forms entries, WooCommerce orders, comments, and new users get a “fail-open” marker; orders also get a note).
Improved: a CAPTCHA that the Cap server actively rejects is always blocked — fail-open only applies when Cap genuinely can’t be reached.
1.1.0
Added: Contact Form 7 integration with placement control — automatic on all forms, or manual via the [cap_captcha] tag (so you can keep the CAPTCHA off legally required or accessibility-sensitive forms).
Added: Gravity Forms automatic protection — global “protect all” plus a per-form Default / Always / Never override, alongside the existing field.
Added: WooCommerce My Account login, registration, and lost-password forms (each its own toggle, alongside checkout).
Added: dashboard widget showing your Cap server stats at a glance.
Added: granular per-surface toggles and a cap_captcha_protect developer filter to control protection on any form, even conditionally.
Fixed: the Login integration no longer interferes with WooCommerce My Account logins.
1.0.0
Initial release.
Gravity Forms field (inline / floating / programmatic display).
Fully self-hosted assets — WASM module, cap-widget script, and pako library all bundled and served locally; no third-party CDN is contacted at runtime. DSGVO-clean by default.
WP 6.5 native script-module loading.
Top-level Settings → Privacy CAPTCHA for Cap page with integration toggles, WASM source choice (this plugin or your own Cap server), fail-open switch.
