reCAPTCHA V3 for Jetpack

1.17

• New Feature: Added “Skip reCAPTCHA for all logged-in users” checkbox under Configuration in the settings page.
• When enabled, any logged-in user (admins, customers, members, etc.) completely bypasses reCAPTCHA on Jetpack forms, comments, and WooCommerce registration.
• Ideal for membership sites where only guests need protection.
• The new option is fully documented, sanitized, and uses the standard hidden-input pattern so it can be turned off reliably.
• All previous features and fixes from 1.16 remain fully intact and unchanged.

1.16

• Major reliability, performance & security improvements:
  • Hardcoded plugin version constant (eliminates unnecessary disk I/O on every page load).
  • Fixed critical JavaScript submit race condition (preventDefault + dispatchEvent so Jetpack AJAX and WooCommerce validation still run).
  • Removed WordPress nonces entirely (prevents “Invalid nonce” errors on cached sites).
  • Fixed Debug Mode and WooCommerce registration checkboxes so they can actually be turned off.
  • Removed background token refresh interval (prevents quota burn on long-open tabs).
  • Removed optional remoteip parameter (fixes Cloudflare/proxy false positives and GDPR concerns).
  • Added server-level error handling for wp_remote_post failures.
  • Fixed Debug Mode string handling in JavaScript.
  • Fixed settings sub-options visibility on page reload.
  • Updated documentation to accurately reflect reCAPTCHA v3 score range (0.0–1.0) and removed IP mention.
• All previous features (conditional loading, WooCommerce My Account protection, stats, etc.) remain fully intact.

1.15

• Added safety check for WooCommerce (class_exists(‘WooCommerce’)) to prevent errors on non-Woo sites.
• Improved email backward compatibility: Handles both old array and new string formats from Jetpack updates.
• Updated table header in settings to include “WooCommerce Registration” for clarity on logged types.
• Minor code refinements for robustness and readability.

1.14

• Explicit protection for the Register form on the WooCommerce My Account page (
  Login

  Username or email address *Required

  Password *Required

  Remember me Log in

  Lost your password?

  shortcode).
• Expanded JavaScript selector for 100% reliability on the My Account page.
• Updated settings checkbox label and readme to clearly mention My Account protection.
• Heavy comments added to js/recaptcha.js so anyone can follow the code.
• Tag limit fixed to exactly 5 tags (removed duplicate).

1.13

• New: Added protection for WooCommerce registration form to stop bot account creation (new checkbox in settings).
• Compatibility note: Fully tested with latest Jetpack 15.6 and WordPress 6.9.
• Updated description, installation, and changelog to reflect WooCommerce support.
• All previous features (conditional loading, admin quick reply fix, debug mode) remain intact and unchanged.

1.12

• Added conditional loading: New “Loading Conditions” section in settings to control where reCAPTCHA loads (all pages, specific types like front page/single posts, or specific slugs).
• Wrapped submit button in

<

p class=”submit”> to match core WordPress style.
* Made footer version dynamic using RECAPTCHAFORJETPACK_VERSION constant.
* Fixed admin quick reply issue: Skip verification for users with moderate_comments capability (e.g., admins replying in wp-admin > Comments).
* Updated Tested up to 6.9.
* Added more inline comments for readability.

1.11

• Added option to toggle console.log debugging on/off via settings page for production use.
• Updated plugin version to 1.11.

1.10

• Enhanced reCAPTCHA key validation with detailed error messages for invalid key formats, explaining the issue (e.g., incorrect length or characters) and providing steps to fix it with links to Google’s reCAPTCHA admin console and setup guide.
• Improved key save success message to detail validation checks and guide users to test forms/comments.
• Added warnings about auto-filling forms/comments causing low reCAPTCHA scores, with guidance to use manual input, in the form failure message and settings page.
• Removed unreliable API test that falsely warned “keys may be invalid” even for valid keys.
• Added advice to test keys via form or comment submission for accurate verification.
• Added logging of key save attempts in the settings page for debugging.
• Updated plugin version to 1.10.

1.9

• Updated setup instructions in the settings page to use the correct Google reCAPTCHA admin URL (https://www.google.com/recaptcha/admin/create) and clarified options for registering a new site (selecting “reCAPTCHA v3” and adding domains).
• Added action links to the Plugins page for direct access to the settings page, support contact, and rating the plugin on WordPress.org.

1.8

• Shortened plugin short description to meet WordPress.org’s 150-character limit.
• Added action links to the Plugins page for direct access to the settings page and support contact.

1.7

• Fixed comment spam handling: Comments scoring below the reCAPTCHA threshold are now properly marked as spam and no longer send approval emails to administrators.
• Enhanced form spam handling: Form submissions failing reCAPTCHA are reliably moved to the Jetpack Feedback CPT spam folder without external dependencies, ensuring consistent admin visibility (Jetpack > Feedback > Spam).
• Consolidated submission logging: Streamlined logs to reduce redundancy and improve clarity in the settings page.
• Improved code commenting: Added detailed PHPDoc and inline comments for better maintainability and debugging.

1.6

• Added reCAPTCHA v3 protection for comments, including Jetpack forum comments.
• Automatically moves comments with scores below threshold to spam.
• Updated settings page and logs to include comment submission stats.
• Fixed text domain to match plugin slug (recaptcha-v3-for-jetpack).
• Added nonce checks for form and comment submissions.
• Documented Google reCAPTCHA v3 usage in readme.

1.5

• Added total submissions counter and last 20 submissions log.
• Updated settings page with new stats section.

1.4

• Enhanced settings page with scoring tip linking to Google reCAPTCHA Admin Console.

1.3

• Optimized block-based theme support with raw content checks for Jetpack forms.
• Refined settings page styling to match Jetpack.