PluginScout

Comment Form CSRF Protection — WordPress Security Plugin

by Ayesh Karunaratne · WordPress.org page · Website

v1.4 Tested up to WP 6.3.10 PHP 7.1+

Comment Form CSRF Protection has 400+ active installs on WordPress.org and 15,868 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on July 23, 2023, tested up to WordPress 6.3.10.

Comment Form CSRF Protection at a glance

Active installs
400+
Total downloads
15,868
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Comment Form CSRF Protection well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Behind
tested up to WordPress 6.3.10, not yet with the current 7.1

Comment Form CSRF Protection reviews and ratings

2 reviews on WordPress.org, with the most recent ones as their authors posted them.

All reviews
5.0 out of 5

2 reviews

5★
2
4★
0
3★
0
2★
0
1★
0

  • Excellent plugin

    I have inspected the plugin source. A great idea was implemented. thanks for the awesome plugin. it helps to fix the CSRF Tokens issue. Can you please tell me how to implement the same for search box and contact form 7 to fix the CSRF issue? Is there any hook is available? Thanks, Saravanan

    Sakthivel

  • Very useful plugin!

    Our website was "hacked" as part of the Bug Bounty program. We closed the gap with the help of this plugin. Many thanks to the developer! Unbelievable that WordPress has not closed this gap within the last 10 years!

    lounge4

Details

Prevent Cross-Site Request Forgery attacks on your comments form.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Comment Form CSRF Protection competes in

Tags

  • comments
  • csrf
  • security
  • spam

More from Ayesh Karunaratne

Version
1.4
Last updated
Jul 23, 2023
First published
Feb 21, 2019
Requires WordPress
4.2
Tested up to
6.3.10
Requires PHP
7.1
Pricing
Free on WordPress.org

Comment Form CSRF Protection FAQ

How many active installs does Comment Form CSRF Protection have?

WordPress.org reports 400+ active installs for Comment Form CSRF Protection as of September 7, 2026.

Is Comment Form CSRF Protection still maintained?

The last release was on July 23, 2023, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.

Is Comment Form CSRF Protection free?

Comment Form CSRF Protection is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.