Simple Login Captcha
A simple captcha for the WordPress login form. To be able to login, the user is required to enter a random 3-digit number in a text field.
The correct number is displayed above the field by a small JavaScript code. Compatible with the WooCommerce login form. Compatible with multisite.
Demo
https://nikolaydev.com/wp-login.php
Simple
- No complicated features
- No settings
- No image generation
- No API
- No sessions
- No cookies
- No IP address detection
- No personal data collection
- No vulnerabilities in the programming code
Recommendation
Bots can also try to login with the XML-RPC feature of WordPress! Very rarely plugins also need this (like the Jetpack plugin). But if you don’t use it, I recommend that you disable it. You can use the super simple one-line plugin Disable XML-RPC.
Notice
This is a simple plugin designed to protect against random bots that try to login on your site. But if a person actually looks at the code of this plugin and specifically designs a new bot that targets this plugin, this bot would be able to bypass the protection.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| o*k*i*l*a*h*e*i*a*a*e*y.com (WP 7.0.1) | D | Jul 16, 2026 | |
| s*c*a*r*i*n*e*i*.com (WP 6.7.2) | F | Jul 15, 2026 | |
| e*e*t*r*l*e.com (WP 7.0.1) | F | Jul 15, 2026 | |
| m*u*p*d*a*t.com (WP 7.0.1) | F | Jul 15, 2026 | |
| a*a*a*m*.com | F | Jul 15, 2026 | |
| b*n*i*e*o*l*c*i*l*s.com | F | Jul 15, 2026 | |
| j*w*r*c*f*.com (WP 6.9) | F | Jul 14, 2026 | |
| w*r*q*i*o*l*n*.c*m.au | F | Jul 14, 2026 | |
| i*d*s*r*a*v*h*c*e*a*t*.c*m.au | F | Jul 14, 2026 | |
| w*r*s*f*t*o*s.c*m.au | F | Jul 14, 2026 | |
| h*r*i*n*w.c*m.au | F | Jul 14, 2026 | |
| c*a*c*r*.c*m.au | F | Jul 14, 2026 | |
| t*a*e*s*e*l*t*.com (WP 6.7.1) | F | Jul 13, 2026 | |
| j*n*o*e*n*t*i*s*c*e*c*c*u*.com (WP 6.7.5) | F | Jul 13, 2026 | |
| p*w*r*r*e*e*.com (WP 6.6.5) | F | Jul 13, 2026 | |
| k*y*t*r*.com (WP 7.0.1) | F | Jul 13, 2026 | |
| k*y*a*a.com (WP 7.0) | D | Jul 13, 2026 | |
| t*a*k*r*r*s.com | F | Jul 13, 2026 | |
| e*c*e*a*i*n*c*p*l*a*e*.com (WP 7.0.1) | F | Jul 13, 2026 | |
| d*f*o*n*t.com (WP 6.4.8) | F | Jul 13, 2026 | |
| e*i*.c*.in | F | Jul 13, 2026 | |
| d*b*y*u*k*e*o*g*.com (WP 6.9.4) | F | Jul 13, 2026 | |
| m*r*a*o*a*u*.com (WP 6.6.1) | F | Jul 13, 2026 | |
| t*s*c*c*e.com (WP 7.0.1) | F | Jul 13, 2026 | |
| c*l*b*i*-*o*i*l*s.fr | F | Jul 12, 2026 | |
| t*t*l*e*a*l*r*s*.com (WP 7.0.1) | F | Jul 12, 2026 | |
| t*r*f*e*e*r*p*.com (WP 6.9.4) | F | Jul 12, 2026 | |
| t*r*f*e*-*u*o*e.com (WP 6.9.4) | F | Jul 12, 2026 | |
| b*e*s*e*o*n*y*e*c*e.com | F | Jul 12, 2026 | |
| t*p*o*e*l*m*i*g.com | F | Jul 12, 2026 | |
| d*b*g*e*z*r*.nl | F | Jul 11, 2026 | |
| n*k*c*m.com (WP 7.0) | F | Jul 11, 2026 | |
| v*s*-*e*t*l.de (WP 6.9.4) | F | Jul 11, 2026 | |
| b*z*n*a*t*n*r*.com (WP 6.1.8) | F | Jul 11, 2026 | |
| j*l*s*e*e*r*.com (WP 7.0.1) | F | Jul 11, 2026 | |
| b*t*o*n*a*l*u*.com (WP 7.0.1) | F | Jul 11, 2026 | |
| c*i*o*m*d.net (WP 7.0.1) | C | Jul 10, 2026 | |
| c*i*o*m*d*c*r*.com (WP 7.0.1) | C | Jul 10, 2026 | |
| n*t*l*m*i*d.com | F | Jul 10, 2026 | |
| n*t*e*u.com | F | Jul 10, 2026 | |
| r*n*a*v*n.se | F | Jul 10, 2026 | |
| s*e*c*l*t*a*n*n*c*u*s*.org (WP 5.6.17) | F | Jul 10, 2026 | |
| s*m*l*c*e*n*k*n*a*e.com (WP 6.9.4) | C | Jul 10, 2026 | |
| w*r*f*r*e*t*r*r*s*.com (WP 6.9.4) | C | Jul 10, 2026 | |
| v*p*e*t*c*r.mk (WP 5.3.9) | F | Jul 10, 2026 | |
| s*o*-*a*e*m*d.de (WP 7.0.1) | F | Jul 10, 2026 | |
| c*s*i*-*a*m*n*-*a*a*c*n*.de (WP 7.0.1) | F | Jul 10, 2026 | |
| g*l*f*y*.com | F | Jul 10, 2026 | |
| t*g*n*a*e*i*g*o*p.com (WP 6.8.3) | F | Jul 10, 2026 | |
| c*r*a*b*g*i*m*n*o.com | F | Jul 9, 2026 | |
| w*z*r*w*d*i*g.com (WP 7.0) | F | Jul 9, 2026 | |
| b*l*n*p*s*-*o*i*.com (WP 7.0.1) | F | Jul 9, 2026 | |
| b*k*r*c*f*.com (WP 6.9.4) | F | Jul 9, 2026 | |
| m*n*g*a*g*r.com (WP 7.0) | F | Jul 9, 2026 | |
| n*t*r*l*e*e*g*-*n*i*e.com | F | Jul 9, 2026 | |
| b*m*e*o*f*o*d.com (WP 6.2.9) | F | Jul 9, 2026 | |
| i*o*r*t*i*.c*m.au | F | Jul 9, 2026 | |
| n*t*o*k*f*o*m*n*t*a*t*v*t*e*.o*g.au | F | Jul 9, 2026 | |
| s*l*c*.c*.in | F | Jul 8, 2026 | |
| j*a*g*o*o*.com | F | Jul 8, 2026 | |
| t*s*c*c*e.es | F | Jul 8, 2026 | |
| l*a*u*d*n*i*.o*g.ar (WP 6.9.4) | F | Jul 8, 2026 | |
| p*t*e*t*n*e*f*e*u*g*a*s*e*s.de | F | Jul 8, 2026 | |
| g*i*b*r*.com (WP 7.0) | F | Jul 8, 2026 | |
| w*l*f*o*e*s*a*m*n.com | F | Jul 8, 2026 | |
| m*c*a*l*s*d*s*g*u*i*a*e.de (WP 7.0) | F | Jul 8, 2026 | |
| p*i*r*t*e*e*t*i*a*.c*.uk (WP 7.0) | F | Jul 7, 2026 | |
| f*l*l*b*a*y.online (WP 6.8.5) | F | Jul 7, 2026 | |
| c*r*n*c*r*u*.com (WP 7.0) | F | Jul 7, 2026 | |
| p*r*c*d*e*l*h.com | F | Jul 7, 2026 | |
| w*i*s*c*l*e*c*a*t.com | F | Jul 7, 2026 | |
| h*a*i*g*e*.de (WP 7.0) | F | Jul 7, 2026 | |
| p*j*n*a*o*f*e.com | F | Jul 6, 2026 | |
| s*l*i*b*o*k*.com | F | Jul 6, 2026 | |
| l*f*c*r*s*g*t.com | F | Jul 6, 2026 | |
| w*t*r*v*n*i*g.net (WP 5.6.14) | F | Jul 6, 2026 | |
| s*o*n*a*e*.com | F | Jul 6, 2026 | |
| j*m*e*o*k*r*s*.com | C | Jul 6, 2026 | |
| j*m*e*o*k*a*h.com | C | Jul 6, 2026 | |
| j*m*e*o*k*c*d*m*.com | F | Jul 6, 2026 | |
| o*k*i*l*a*h*e*i*a*a*e*y.ca (WP 7.0) | D | Jul 6, 2026 | |
| k*s*.online (WP 7.0) | A | Jul 6, 2026 | |
| b*n*i*y*l*n*.ch | F | Jul 6, 2026 | |
| e*i*i*n*-*j*.com | B | Jul 6, 2026 | |
| z*r*n*d*n*u*t*r.com (WP 7.0) | F | Jul 6, 2026 | |
| v*l*r*i*d*c*n*l*u*i*i.fr (WP 7.0) | D | Jul 6, 2026 | |
| v*r*w*r*e*e*.de | D | Jul 5, 2026 | |
| p*a*a*o*m*s*o*m*.com (WP 6.2.9) | F | Jul 5, 2026 | |
| w*b*r*a*i*e*r*u*.com (WP 7.0) | F | Jul 5, 2026 | |
| c*e*f*r*a*i*n.com (WP 5.4) | F | Jul 5, 2026 | |
| s*s*c*v*d*l*n*.fr (WP 7.0) | F | Jul 5, 2026 | |
| n*s*o*t*.at (WP 7.0) | F | Jul 5, 2026 | |
| m*c*z*-*o*e.com (WP 6.8.1) | F | Jul 4, 2026 | |
| g*a*f*u*.be | C | Jul 4, 2026 | |
| p*o*i*l*b*i*d*n*s*p*l*e*.com (WP 7.0) | D | Jul 4, 2026 | |
| s*p*r*i*n*a*u*r*n.com | F | Jul 4, 2026 | |
| c*o*d*n*e*v.com (WP 6.8.2) | F | Jul 4, 2026 | |
| e*s*v*l*e*m*r*e*i*g.com (WP 7.0) | F | Jul 4, 2026 | |
| c*m*r*s*o*s*z*n.com | F | Jul 4, 2026 | |
| p*r*o*m*n*e*r*k*s*s*e*s.com | D | Jul 4, 2026 |