New feature – WooCommerce guest checkout CAPTCHA (free version)

With this latest release, you now have the ability to use CAPTCHA on the WooCommerce classic guest checkout page.  Once activated, this significantly reduces the risk of fraudulent orders being placed by bots and ensures that genuine human guests are checking out.

This feature extends our existing suite of CAPTCHA options for WooCommerce, giving you even more protection from malicious bots.

WooCommerce guest checkout CAPTCHA

To enable the guest checkout CAPTCHA option:

1. Go to WP Security >> Brute Force >> CAPTCHA settings >>  WooCommerce forms CAPTCHA settings.
2. Scroll down and click the ‘Enable CAPTCHA on the WooCommerce checkout page’ button.
3. Click the Save settings button.

Note: For this option to appear, WooCommerce should be installed and activated.  In addition, please ensure you have selected a CAPTCHA from the Default CAPTCHA dropdown list

Other improvements

We fixed a display issue with Cloudflare’s Turnstile CAPTCHA which caused it to display twice on WooCommerce login and registration forms.

For a full list of changes please review our changelog below.

Changelog

• Feature: Added CAPTCHA option for WooCommerce classic guest checkout page.
• Fix: Fixed responsive layout issues with dashboard notice logo on mobile devices.
• Fix: Turnstile captcha widget showing multiple times.
• Fix: Solved memory issue for reading larger host system log file.
• Fix: Removed .htaccess options from the Settings menu on Nginx, IIS and unsupported web servers.
• Fix: Resolved UX popup issue and firewall allowlist sanitization.
• Fix: Resolved an issue where bulk table actions were still executed even if the confirmation dialog was cancelled.
• Fix: Added a null check to prevent PHP warnings in firewall rules.
• Tweak: Ajaxified the actions in the settings, filesystem security, spam prevention and user security menu.
• Tweak: Added Ajax support to list tables and the audit log.
• Tweak: Added CAPTCHA field to MemberPress forgot password and registration forms.
• Tweak: Excluded .htaccess tabs from settings if the server is not supported.
• Tweak: Updated the firewall rules UI and malware scanner description.
• Tweak: Tweaked the .htaccess backup method to generate the random filename.
• Tweak: Removed ‘prevent access to default WP files’ from .htaccess and added ‘license.txt’ to deletion list.