WordPress Zero Spam

Wordpress Plugin
Download latest - 5.4.4

Developers

bmarshall511

Download Stats

Today 108
Yesterday 38
Last Week 454
All Time 108,310
Banner 772x250

Protect against spam, malicious users, attacks like web & port scans, brute force, and others. Zero Spam uses multiple methods to detect & stop threats including an advanced behavior detection engine that integrates with Zero Spam, Stop Forum Spam & Project Honeypot. Integration with popular plugins like WooCommerce, GiveWP, Gravity Forms & more help provides an extra level of protection.

Install, activate, configure, then put your mind at ease!

Worry-free, Powerful Protection

  • No captcha, spam isn't a users' problem
  • No moderation queues, spam isn't a administrators' problem
  • Behavior detection engine able to dynamically block threats
  • Integrates with global IP reputation providers
  • Allows admins to block IPs temporarily or permanently
  • Geolocation integration to track where threats are coming from
  • Block entire countries, regions, zip/postal codes & cities
  • Optional disallowed list using splorp's Comment Blacklist
  • Block known disposable & malicious email domains using disposable
  • Multiple detection techniques including David Walsh's solution

But wait, there's more!

  • Protects comments, user registration & login forms
  • Protects GiveWP forms & helps prevent testing stolen credit cards
  • Protects Gravity Forms, Contact Form 7, WPForms, Formidable Form Builder, Fluent Forms & wpDiscuz forms
  • Protects WooCommerce registrations
  • Protects Mailchimp for WordPress sign-ups
  • and can be integrated into any existing theme or plugin

Expert Support

We have a highly-experienced team of developers to provide incredible support. Ask your questions in the support forum, post a bug or feature request on Github, or contact us directly.

Optional 3rd-party Integrations

Zero Spam allows you to integrate with other services to improve the ability to detect spam and malicious users. These services are optional and not required for Zero Spam to work. Before opting into any of these services, please review their terms of use and/or privacy policies.

  • Zero Spam - Sends the visitor's IP & when available email to check the spam score. Review their Privacy Policy & Terms of Use.
  • ipbase.com - Sends the visitor's IP to gather detailed geolocation information. Review their Privacy Policy & Terms of Use.
  • ipinfo.io - Sends the visitor's IP to gather detailed geolocation information. Review their Privacy Policy & Terms of Use.
  • ipstack - Sends the visitor's IP to gather detailed geolocation information. Review their Privacy Policy & Terms of Use.
  • Stop Forum Spam - Sends the visitor's IP to check if they've been reported. Review their Privacy Policy & Terms of Use.
  • Project Honeypot - Sends the visitor's IP to check if they've been reported. Review their Privacy Policy & Terms of Use.
  • Google Maps - Enables the ability to plot attack locations. Review their Privacy Policy & Terms of Use.

Optionally, you can also help improve Zero Spam by enabling sharing detection information. For more info on what's shared, see our FAQ


Releases (125 )

Version Release Date Change Log
5.4.4 2022-11-30
5.4.3 2022-09-21
5.4.2 2022-09-20
5.4.1 2022-09-12
5.4.0 2022-09-05
5.3.9 2022-05-08
5.3.8 2022-05-02
5.3.7 2022-04-23
5.3.6 2022-04-22
5.3.5 2022-04-20
5.3.4 2022-04-18
5.3.3 2022-04-18
5.3.2 2022-03-19
5.3.1 2022-03-17
5.3.0 2022-03-17
5.2.15 2022-03-05
5.2.14 2022-03-03
5.2.13 2022-02-22
5.2.12 2022-02-18
5.2.11 2022-02-17
5.2.10 2022-01-19
5.2.9 2022-01-06
5.2.8 2021-11-23
5.2.7 2021-11-19
5.2.6 2021-11-18
5.2.5 2021-11-17
5.2.4 2021-11-16
5.2.3 2021-11-14
5.2.2 2021-11-12
5.2.1 2021-11-12
5.2.0 2021-11-11
5.1.6 2021-11-09
5.1.5 2021-11-08
5.1.4 2021-11-05
5.1.3 2021-11-05
5.1.2 2021-11-02
5.1.1 2021-11-01
5.1.0 2021-10-29
5.0.13 2021-08-03
5.0.12 2021-03-31
5.0.11 2021-03-18
5.0.10 2021-03-10
5.0.9 2021-03-04
5.0.8 2021-03-02
5.0.7 2021-03-02
5.0.6 2021-02-26
5.0.5 2021-02-25
5.0.4 2021-02-24
5.0.3 2021-02-24
5.0.2 2021-02-23
5.0.1 2021-02-23
5.0.0 2021-02-23
4.10.2 2020-10-07
  • Added composer. See #150.
  • Temporarily disabled sharing spam detection information.
4.10.1 2020-08-27
  • Fix - PHP notice Warning: array_merge(): Expected parameter 2 to be an array, bool given in /wp-content/plugins/zero-spam/classes/class-wordpress-zero-spam.php on line 532. See https://wordpress.org/support/topic/warning-array_merge-14/#post-13319702.
  • Fix - StopForumSpam & BotScout being queried even if the options are disabled. See https://wordpress.org/support/topic/api-timeout/#post-13323551.
  • Enhancement - Moved the security functions into the new WordPress_Zero_Spam_Security class.
  • Enhancement - General code clean-up & documentation.
4.10.0 2020-08-26
  • Enhancement - Various performance improvements & caching added.
  • Enhancement - Easier to use class methods for integrating Zero Spam into any plugin or theme.
  • Enhancement - New WordPress_Zero_Spam class added.
  • Enhancement - IPs are now checked against known, safe hosts and user agents (i.e. search engine crawlers).
  • Enhancement - Added advanced debugging functionality.
4.9.13 2020-08-12
  • Fix - PHP notices for comment options #209
4.9.12 2020-08-08
  • Enhancement - Added support for the French & Italian languages. See #207.
  • Enhancement - Strengthened spam detection for registrations using a 'honeypot' field.
  • Enhancement - Strengthened spam detection for Contact Form 7 using a 'honeypot' field.
  • Fix - Fix for Contact Form 7 protection not firing.
4.9.11 2020-08-07
  • Optimization - Converted the WPZS JS to be a jQuery plugin to initialize and manage easier.
  • Fix - Fix for WPZS failing when the Autoptimize plugin is set to aggregate JS files. See #205.
4.9.10 2020-08-04
  • Fix - Fix for PHP notice relating to an undefined variable, strip_comment_links. See https://wordpress.org/support/topic/im-getting-this-after-latest-update/.
4.9.9 2020-08-03
  • Enhancement - Strengthened spam detection for comment submission using a 'honeypot' field.
  • Enhancement - Added a 'honeypot' helper functions (wpzerospam_honeypot_field(), wpzerospam_get_honeypot()) to allow other forms, plugins, and themes to easily integrate a 'honeypot' check into submissions.
  • Enhancement - IP lookup links integrated in the admin dashboard and tables.
  • Deprecation - Gravity Forms is no longer supported — for the time being. See the plugin FAQs for more information.
4.9.8 2020-07-31
  • Fix - Fix for a reporting issue during detections.
4.9.7 2020-07-31
  • Enhancement - Added enhanced site security features (no configuration required)
  • Enhancement - Added plugin version to the information shared to Zero Spam (optional).
  • Optimization - Misc. code clean-up
4.9.6 2020-07-31
  • Fix - Gravity Forms not catching spam.
4.9.5 2020-07-30
  • Enhancement - Added the BotScout Count Minimum field in settings to allow sites to control when a BotScout result should be marked spam/malicious. See BotScout's documentation for more information.
  • Enhancement - Improved performance by only querying the blacklist API once every X number of days (set in the admin settings).
  • Fix - Removed double slashes in some required PHP & JS paths.
4.9.4 2020-07-30
  • Fixed issued with BuddyPress checks not running.
4.9.3 2020-07-30
  • Added a confidence threshold for Stop Form Spam checks. See #202;
  • Added an API timeout field to adjust how long a response is allowed to take.
  • Restructred several functions which fixed some interment bugs users were experiencing.
  • Added ability to delete all entries from a table.
  • This update will delete all exisiting blacklisted IPs to ensure visitors aren't getting blocked when that shouldn't be.
4.9.2 2020-07-30
  • Removed Ninja Form submission support. See FAQs for more details.
  • Fix for PHP notice on the log page in the view details modal.
  • Fix for double slashes in the JS URLs.
  • Fix for BotScout not checking IPs
  • Fix for table not found notice on activation

4.9.1 Fix for PHP notice on the modals for spam detections

4.9.1 2020-07-29
  • Fix for PHP notice on the modals for spam detections
4.9.0 2020-07-28
  • Added support for Formidable Forms. See #112.
  • Added additional country regions
  • UI enhancments to the admin tables
  • Added a spam detection world map to the dashboard
4.8.1 2020-07-27
  • Fix for charts not showing up in the dashboard
4.8.0 2020-07-26
  • Added filter & seach options to admin tables
  • Various performance enhancements
  • Added ability to whitelist IP addresses
4.7.1 2020-07-25
  • Update to the WP Zero Spam API
4.7.0 2020-07-25
  • Various performance enhancements
  • Updates to the admin tables
  • Improved UI
  • Added functionality & option to permanently auto-block after X spam detections
  • Added ability to share spam detections with WordPress Zero Spam to strengthen it's ability to detect spammers
4.6.0 2020-07-23
  • Added option to strip links from comments
  • Added option to strip & disable the comment author website field
  • Added integration with the BotScout blacklist API
4.5.0 2020-07-23
  • Added integration with the Stop Forum Spam known spammy IPs
  • Fixed issue with Gravity Forms not being enabled by default
4.4.1 2020-07-22
  • Fix for Gravity Forms not submitting
4.4.0 2020-07-22
  • Misc. code clean-up
  • Added support for the Fluent Forms plugin
4.3.10 2020-07-22
  • Updated get_plugin_data calls to use a constant. See #196
  • Added additional country regions for geolocation lookup
  • Renamed 'addons' to 'integrations'
  • Fixed issue with WPForm spam detections
  • Fix for plugin deactivation from v3 to v4 upgrade
4.3.9 2020-07-21
  • Fix for Notice: Undefined index: verify_ninja_form. See #195
4.3.8 2020-07-21
  • Fix for Call to undefined function wpzerospam_tables() error
4.3.7 2020-07-21
  • Optimized scripts & when they get loaded (only when needed)
  • Fixed bug with incrementing spam detections in the blocked IPs log
4.3.6 2020-07-20
  • Added a check for the is_plugin_active functions to ensure they're available before calling it
4.3.5 2020-07-20
  • Fix for Uncaught Error: Call to undefined function get_plugin_data(). See #193.
4.3.4 2020-07-20
  • Fixed issue with adding/updating IP addresses manually
  • Fixed PHP notice for missing submission data on the log chart
  • Fixed PHP notice for "Undefined index: log_blocked_ips". See #191
  • Updated the admin scripts to only login on the plugin admin pages
  • Fixed an issue with default add-on plugin options being disabled on first save. See #192
4.3.3 2020-07-19
  • Fix for REFERRER_ANALYTICS unknown constant
4.3.2 2020-07-19
  • Fix for Gravity Forms PHP notice. See #188
  • Add more stats & charts. See #184
4.3.1 2020-07-18
  • Fixing plugin version
4.3.0 2020-07-18
4.2.0 2020-07-16
  • Re-implemented logging & added admin pages to prepare for charts & statistics. See #181
4.1.3 2020-07-15
  • Fixed JS errors for some 3rd-party plugins. See #178
  • Fixed caching conflicts issue relating to using cookies to set & get keys. See #177
  • When plugin is uninstalled, plugin-related data is now deleted. See #179
  • Added an option in the plugin settings to determine how spam detections are handled. See #180
4.1.2 2020-07-15
  • Fixed issue with plugin settings not saving. See #176.
  • Fixed some PHP notices. See #175.
4.1.1 2020-07-15
4.1.0 2020-07-15
4.0.0 2020-07-15
3.1.1 2019-06-06
3.1.0 2019-06-04
3.0.6 2016-12-27
3.0.5 2016-12-23
3.0.3 2016-11-23
3.0.2 2016-11-23
  • Fixed fatal error.
3.0.1 2016-11-22
  • Added the default options when the plugin is activated.
3.0.0 2016-11-22
  • Lots of updates & fixes! Improved code documentation to help promote contributions.
2.2.1 2016-11-21
  • Fixed uninstall issue, thanks @thiagolcks (https://github.com/bmarshall511/wordpress-zero-spam/pull/139)
2.2.0 2016-11-19
2.1.1 2016-04-22
2.1.0 2016-04-22
  • Added support for WPForms (https://github.com/bmarshall511/wordpress-zero-spam/issues/129)
2.0.2 2015-09-15
  • Added the 'contactform' id to fix issue with valid comments not getting through (https://wordpress.org/support/topic/false-positives-6)
  • Updated readme file
2.0.1 2015-07-04
  • Updates to the readme file
  • Fixed Contact Form issue forcing users to submit twice (https://github.com/bmarshall511/wordpress-zero-spam/issues/118)
2.0.0 2015-07-04
  • Added CloudFlare instructions (https://github.com/bmarshall511/wordpress-zero-spam/pull/107)
  • Added ability to integrate with any theme or plugin (https://github.com/bmarshall511/wordpress-zero-spam/issues/116)
  • Added support for Ninja Forms (https://github.com/bmarshall511/wordpress-zero-spam/issues/114)
  • Complete rewrite of plugin code & structure
  • Added plugin icon
1.6.1 2015-07-04
1.6.2 2015-07-04
1.6.0 2015-07-04
  • Made minor modification on how spam comments are detected. Tested & verified working as expected.
  • Changed how Gravity Forms spam is detected. Needs to be tested & verified.
1.5.3 2014-12-10
  • Fixed Gravity Form issues (https://github.com/bmarshall511/wordpress-zero-spam/issues/101)
1.5.2 2014-10-24
  • Added IP location service (https://github.com/bmarshall511/wordpress-zero-spam/issues/84)
  • Improved pagination (https://github.com/bmarshall511/wordpress-zero-spam/issues/91)
  • Made date/times match site's WP time, not servers (https://github.com/bmarshall511/wordpress-zero-spam/issues/89)
  • Removed the banner image to boost performance (https://github.com/bmarshall511/wordpress-zero-spam/issues/86)
  • Enhancements to the admin JS to boost performance
  • Works with Multisite as network activated or per sub site (https://github.com/bmarshall511/wordpress-zero-spam/issues/85)
  • Added BuddyPress support (https://github.com/bmarshall511/wordpress-zero-spam/issues/61)
1.5.1 2014-10-17
  • Added missing code documentation and fixed typos (https://github.com/bmarshall511/wordpress-zero-spam/issues/64)
  • Fixed issue with settings not getting initially saved when the plugin is activated. (https://github.com/bmarshall511/wordpress-zero-spam/issues/69)
  • Added ability to auto block spam IPs (https://github.com/bmarshall511/wordpress-zero-spam/issues/71)
  • Added paging to spammer log and blocked IPs (https://github.com/bmarshall511/wordpress-zero-spam/issues/60)
  • Added additional stats and graphs (https://github.com/bmarshall511/wordpress-zero-spam/issues/75)
  • Fixed issue with comment moderators not being able to reply to comments (https://github.com/bmarshall511/wordpress-zero-spam/issues/74)
  • Fix issue with DB errors when first activating plugin (https://github.com/bmarshall511/wordpress-zero-spam/issues/80)
1.5.0 2014-10-15
  • Switched to using a nonce to validate form submissions that support WordPress Zero Spam
  • Added Zero Spam plugin settings page for advanced control
  • Fix for for non-logged in users (https://github.com/bmarshall511/wordpress-zero-spam/pull/27, thanks @afragen)
  • Added blank index.php files to prevent directory browsing (https://github.com/bmarshall511/wordpress-zero-spam/pull/24, thanks @TangRufus)
  • Added uninstall.php (https://github.com/bmarshall511/wordpress-zero-spam/pull/23, thanks @TangRufus)
  • Addded support for GitHub Updater plugin (https://github.com/bmarshall511/wordpress-zero-spam/pull/21, thanks @afragen)
  • Added support for Contact Form 7 form submissions (https://github.com/bmarshall511/wordpress-zero-spam/pull/26, thanks @leewillis77)
  • Added ability to log spam detections
  • Fix for warnings cause by default settings not being set before actions run (https://github.com/bmarshall511/wordpress-zero-spam/pull/31, thanks @leewillis77)
  • Installed Compass (http://compass-style.org/)
  • Added support for Gravity Forms
  • Fixed potential issue with sites that use caching plugins
  • Fixed minor typos (thnaks @macbookandrew)
1.4.0 2014-09-05
  • Added zero_spam_found_spam_comment and zero_spam_found_spam_registration action hooks (thanks @tangrufus)
  • Minor updates to the readme file
1.3.3 2014-08-14
1.3.2 2014-08-14
1.3.1 2014-08-14
1.3.0 2014-08-13
  • Removed Grunt creation of the trunk directory
  • Added spam detection script to registration form
1.2.1 2014-08-12
  • Fixed some typos in the readme.txt file
1.2.0 2014-08-12
  • Removed testing for core function testing
  • Fix for adding comments from admin (thanks @afragen)
  • Removed unneeded WP svn trunk and tags folders from the git repo (thanks @afragen)
1.1.0 2014-07-22
  • Updated theme documentation.
  • WordPress generator meta tag removed to help hide WordPress sites from spambots.
1.0.0 2014-07-21
  • Initial release.