Download websites that use ReCaptcha v2 for Contact Form 7

About ReCaptcha v2 for Contact Form 7

A spam filter on a contact form is never installed before the spam arrives. ReCaptcha v2 for Contact Form 7 is an add on, which means the site already had a public form, the form already collected addresses and messages, and somebody eventually grew tired enough of the junk to go and find a plugin for it.

The add on does one job, attaching Google's checkbox challenge to forms produced by the standard WordPress contact form plugin, which dropped support for that style of challenge from its own releases and took away the tag that switched it on. Released in 2015 under GPL v2 and written in PHP, the plugin exists to put the removed tag back, so it lands on sites whose owners had already configured the checkbox, carried over the keys they were issued and preferred not to change what visitors are asked to do.

Presence therefore describes the owner more than the site. Somebody was administering the installation actively enough to diagnose a nuisance and install a fix, which separates these domains from the large mass of WordPress sites that are simply switched on and forgotten. Presence also means visitors on those pages make a request to a third party verification service before their message is sent, a fact that matters to anyone auditing data flows, consent notices or a site's dependence on one provider's anti abuse infrastructure.

As of October 2026 we detect the plugin on 7,597 sites.

Version data exposes the maintenance reality. Across the population we record 11 distinct releases, clustered around 1.2, which is a wide spread for a small plugin whose updates sit one click away in the admin panel. A security add on running an old release is a familiar irony, and a useful signal in its own right, because an owner who installed protection once and never revisited it has usually treated the rest of the stack the same way.

Per domain checks cannot reach the questions this list is for. Form spam vendors, competing captcha and bot mitigation companies, privacy researchers measuring how far one verification service reaches into ordinary websites, and agencies hunting for maintained WordPress sites with an attentive owner all need the population rather than an example. The export delivers every detected domain with its version, its country and its domain zone attached, which turns an anti spam checkbox into a readable map of who is fighting form abuse and with what.