Source evidence

Spam bypass with Contact Form 7 (Random strings in textarea)

WP Armour – Honeypot Anti Spam · support · 2026-07-01T11:29:00+00:00

WP Armour – Honeypot Anti Spam plugin evidence original source source API

complaintsentiment

highseverity

0.96relevance

3replies

Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

4 / 28 rows with source links

14.3% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

24 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support

hendrik11 unresolved

Hello, I am using WP Armour with Contact Form 7. Recently, I am receiving several daily spam emails through my contact form, even though WP Armour is active. The form is very lean (only name, email, and message fields). The spam messages always contain random, long alphanumeric strings in the textarea (e.g., gtnChzIVFnDtjrojFWs). Could you please look into this loophole? Thank you! Best regards, Hendrik @hendrik11 , Which version you are using currently, we recently release 2.4 few days back and had encrypted those fields to increase the spam protection. Can you please make sure you are using 2.4 and see if that fixes the issue ? Thanks This is happening to me as well, version 2.4. I’ve just regenerated the honeypot field name and I’m waiting to see if it works. This reply was modified 3 days, 16 hours ago by xurxomatic . Hello! Thanks for the quick answer. In fact, I am using version 2.4, but I definitely had spam coming in since I updated to 2.4. I will check in the coming days whether that fixes the issue. Maybe you could leave this thread open till then. Thank you in advance

Commercial Context

Opportunity

trust and abuse-prevention operations

Anti Spam abuse-prevention assurance for keeping sites trusted, protected, and recoverable

Buyer: site owners, agencies, and maintenance teams

Wedge: test anti spam lockouts, bot/spam defenses, risky access changes, and incident alerts

Proof Blocked card complete market

Analysis

heuristic-v1

Summary: Spam bypass with Contact Form 7 (Random strings in textarea): users show security, bugs, support pain that may indicate a product gap.

Evidence quote: Spam bypass with Contact Form 7 (Random strings in textarea) Hello, I am using WP Armour with Contact Form 7.

Affected feature: email

security bugs support easy

Plugin

API

WP Armour – Honeypot Anti Spam

400.0K active installs · 4.8M downloads · rating 100.0

akismet anti-spam comment spam contact form spam spam protection

Comments

3 shown

Dinesh Karki 2026-07-02T04:07:00+00:00

@hendrik11 , Which version you are using currently, we recently release 2.4 few days back and had encrypted those fields to increase the spam protection. Can you please make sure you are using 2.4 and see if that fixes the issue ? Thanks

xurxomatic 2026-07-03T07:27:00+00:00

This is happening to me as well, version 2.4. I’ve just regenerated the honeypot field name and I’m waiting to see if it works. This reply was modified 3 days, 16 hours ago by xurxomatic .

hendrik11 2026-07-03T08:16:00+00:00

Hello! Thanks for the quick answer. In fact, I am using version 2.4, but I definitely had spam coming in since I updated to 2.4. I will check in the coming days whether that fixes the issue. Maybe you could leave this thread open till then. Thank you in advance