Wbcom CAPTCHA Manager 2.2.0 - Fixes login and registration lockouts introduced in 2.1.0
LatestFixes three cases where a CAPTCHA was verified on submit but never displayed, which made the affected form impossible to submit. Update immediately if you run 2.1.0.
- Fix - reCAPTCHA v3 never issued a token, so every protected form failed verification and reloaded with the entered values cleared. The script that requests the token ran before the reCAPTCHA API had loaded and stopped with an error.
- Fix - Logging in from a Login/Logout block, a login widget or a theme login form always failed with "Security verification failed". These forms are built by wp_login_form(), which never received the CAPTCHA, while every login attempt was still being checked.
- Fix - The IP Whitelist hid the CAPTCHA but still required it, locking out the listed addresses on reCAPTCHA v2, hCaptcha, Turnstile and ALTCHA. Only reCAPTCHA v3 honoured the list.
- Fix - A form submitted before reCAPTCHA v3 finished loading is now held for a moment and submitted with a valid token, instead of being rejected.
- Fix - reCAPTCHA v3 now loads on forms placed on any page, including the front page, and on BuddyPress group creation and Easy Digital Downloads checkout.
- Fix - reCAPTCHA v3 forms that render after the page footer no longer lose their token.
- Fix - reCAPTCHA v3 no-conflict mode had no effect on sites upgraded from an earlier version, so a competing CAPTCHA script from another plugin was never removed.
- Fix - The settings screen scrolled sideways by two pixels on phones.
- Dev - Added the wbc_recaptcha_v3_is_captcha_page filter to preload the reCAPTCHA v3 script on pages the plugin cannot detect.
- Dev - The wbc_should_verify_captcha filter is now honoured by every provider, not only reCAPTCHA v3.
Full changelog: https://wbcomdesigns.com/release-notes/buddypress-recaptcha/