Multi-Form Anti-Spam Image CAPTCHA

Changelog

Every release of Multi-Form Anti-Spam Image CAPTCHA, newest first — new features, enhancements, and fixes.

Current version 2.0.0 Last updated: Aug 22, 2026

2.0.0

Latest
  • NewMerged every feature from the former Multi-Form Anti-Spam Image CAPTCHA Pro add-on into the free plugin: Gravity Forms field, Elementor Pro Forms validation, WooCommerce login/registration/checkout, WordPress login/registration/lost-password/reset, native WordPress comments, audio accessibility, 780+ bundled SVG icons, full styling controls, custom-icon picker, reverse honeypot, submission speed check, AJAX lazy loading and JSON settings export/import.
  • NewAdded a per-render tamper token that blocks stripped or modified CAPTCHA fields.
  • NewAdded the pbmfasic_skip_wp_login_option, pbmfasic_skip_validation and pbmfasic_force_synchronous_render developer filters.
  • EnhancementStandardized every plugin option under the pbmfasic_ prefix and removed the global pre_option_* filter shim used by the legacy Pro plugin.
  • EnhancementRebuilt the settings page with a dedicated Styling tab and a grouped General tab (Form Integrations, Spam Protection, Loading and Difficulty, Icon Set, Custom Messages, Credit Link) alongside Installation Instructions and Tools.
  • EnhancementReplaced the "---" placeholder rows on the Styling dropdowns with real defaults (Display Style: Full width, Icon Alignment: Left, Icon Border: Show, Border Style: Solid, Text Align: Left, Icon Title Style: Normal, Text Location: Above icons).
  • EnhancementSelected captcha icons now get a visible default border highlight (WP-admin blue) so clicks register without first configuring the color pickers.
  • EnhancementSubmission Speed Check threshold defaults to 2000 ms; enabling the check no longer silently passes every submission when the value was never saved.
  • EnhancementReplaced the inverted "Disable Honeypot" toggle with a positive-sense "Enable honeypot fields (recommended)" checkbox.
  • EnhancementComment-form CAPTCHA failures now render WordPress's standard "Comment Submission Failure" page (with native Back-button recovery) instead of a custom error screen.
  • EnhancementHardened output escaping, input sanitization, nonce verification and $wpdb prepared statements across the codebase.
  • EnhancementMade the "Powered by" footer link opt-in and disabled by default.
  • FixAudio AJAX endpoint URL now includes the missing = after t, so the per-radio audio file loads correctly in every browser.
  • FixGravity Forms editor shows a CAPTCHA placeholder instead of attempting to render the live challenge inside the form builder.
  • FixContact Form 7 validation errors are now anchored to the CAPTCHA field instead of falling back to the generic "One or more fields have an error" tip.
  • SecurityCapped the audio AJAX endpoint to one response per captcha key so bots cannot enumerate which radio is correct by comparing response sizes between probes.
  • SecurityPublic [pbmfasic-svg] shortcode now sanitizes inline SVG output with wp_kses() for every caller, not just the captcha renderer.
  • SecurityWrapped the translatable "Select the %s to verify." prompt in wp_kses_post() so a hostile translation cannot inject HTML or JavaScript.
  • SecurityValidator::sanitize_post_value() rejects array values so a pbmfasic_captcha[]=foo payload no longer feeds sanitize_text_field() an array.
  • i18nDisplay name updated to "Multi-Form Anti-Spam Image CAPTCHA". Plugin slug, text domain and stored option keys are unchanged.

1.0.2

  • FixContact Form 7 validation errors now correctly highlight the CAPTCHA field instead of displaying generically.
  • FixMultiple CAPTCHAs on the same page now work independently with correct screen-reader associations.
  • EnhancementImproved compatibility with form plugin stylesheets for icon radio-button display.

1.0.1

  • EnhancementRebranded plugin to MultiForm Anti-Spam Image CAPTCHA.
  • FixCorrected database table prefixes preventing validation on some installs.

1.0.0

  • NewInitial release.

← Back to Multi-Form Anti-Spam Image CAPTCHA