SSimple CAPTCHA with Cloudflare Turnstile: version, compatibility and updates

Simple CAPTCHA with Cloudflare Turnstile is a WordPress plugin with 200,000+ active installs. The current version on WordPress.org is 1.44.5, last updated on 31 October 2026.

Facts from WordPress.org

Does Simple CAPTCHA with Cloudflare Turnstile work with WordPress 7.2?

Simple CAPTCHA with Cloudflare Turnstile says it was tested up to WordPress 7.1.4. It does not yet say it has been tested with WordPress 7.2. See the full WordPress 7.2 compatibility list.

What the plugin says about itself

Easily add Cloudflare Turnstile to all your WordPress website forms to protect them from spam! A user-friendly, privacy-preserving reCAPTCHA alternative. 100% free! Supported Forms You can currently enable Turnstile on the following forms: WordPress Login Form Registration Form Password Reset Form Comments Form WooCommerce Checkout Pay For Order Account Details Form Login Form Registration Form Password Reset Form Form Plugins WPForms Fluent Forms Contact Form 7 Gravity Forms Formidable Forms Forminator Forms Jetpack Forms Kadence Forms SureForms Other Integrations Elementor Pro Forms Easy Digital Downloads Forms Paid Memberships Pro Forms Mailchimp for WordPress Forms MailPoet Forms BuddyPress Registration Form bbPress Create Topic & Reply Forms MemberPress Forms Ultimate Member Forms WP-Members Forms WP User Frontend Forms WP User Manager Forms wpDiscuz Comments Form CheckoutWC & Flux …

Newest changelog entry

Version 1.44.5 – 31st October 2026 Tweak: The “Sunshine Login” option is now always enabled while the “WordPress Login” option is enabled (unless it is set to only enable on wp-login.php), so the Sunshine login forms are protected too. Security: Fixed an issue where the Turnstile check on the WordPress login and registration forms could be skipped on sites using Sunshine Photo Cart. (Reported by Mateusz Będziński via Patchstack) Security: Fixed an issue where one solved Turnstile challenge on the Ultimate Member login form could be reused for multiple login attempts. (Reported by Mateusz Będziński via Patchstack)

Questions