OpenPorte — WordPress Anti-Spam Plugin
OpenPorte Spam Protection
by J-C Berthon · WordPress.org page
OpenPorte has 300+ active installs on WordPress.org and 2,189 downloads all time. It was downloaded 915 times in the last 30 days. The last update was on September 16, 2026, tested up to WordPress 7.1.3.
OpenPorte at a glance
Is OpenPorte well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Contact Form 7
- Elementor Pro Forms (deprecated — paid plugin, see Deprecations)
- Formidable Forms
- GravityForms
- WordPress Login, Register, Password reset
- WordPress Comments
- Many other plugins and your own content (via the [openporte] shortcode, or the deprecated [altcha] alias)
OpenPorte reviews and ratings
5 reviews on WordPress.org, with the most recent ones as their authors posted them.
5 reviews
- 5★
-
5
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
0
-
Great plugin
This is by far the best anti-bot spam plugin in wordpress. Self-hosted, open-source and free of bs
jaspix -
Well done
Exactly what I've been looking for after Altcha going full on commercial - thank you! One feature suggestion would be to allow for fully invisible widget to the end user.
nexploro -
Great, but needs improvement
Bug: Widget fails with "Unexpected token '<', <!doctype" when WP REST API is blocked (e.g. by security plugins)On many WordPress sites (especially those using security or optimization plugins like Clearfy Pro), the WordPress REST API (/wp-json/) is disabled for non-authenticated users. When this happens, requests to /wp-json/openporte/v1/challenge return a 404 HTML page or a redirect instead of JSON. The widget script altcha.min.js fails to parse this response and crashes with the following console error: SyntaxError: Unexpected token '<', "<!doctype "... is not valid JSON This completely breaks the widget on public forms (e.g. WooCommerce Login/Register, Elementor Forms). Proposed Solution: Switch the fallback endpoint from get_rest_url to admin-ajax.php, which is almost never blocked by security plugins because too many frontend functionalities rely on it. I've successfully tested this workaround by adding standard AJAX hooks and modifying get_challengeurl(). Here is the diff: --- a/includes/core.php+++ b/includes/core.php@@ -301,7 +301,7 @@ class OpenPortePlugin if ($api === "custom") { $challenge_url = $this->get_api_custom_url(); } else { /* default to selfhosted */- $challenge_url = get_rest_url(null, "/openporte/v1/challenge");+ $challenge_url = admin_url('admin-ajax.php?action=openporte_challenge'); } $challenge_url = apply_filters('openporte_challenge_url', $challenge_url);@@ -722,4 +722,13 @@ function openporte_generate_challenge_endpoint() $resp->set_headers(array('Cache-Control' => 'no-cache, no-store, max-age=0')); return $resp; }++add_action('wp_ajax_openporte_challenge', 'openporte_ajax_challenge');+add_action('wp_ajax_nopriv_openporte_challenge', 'openporte_ajax_challenge');++function openporte_ajax_challenge()+{+ $challenge = OpenPortePlugin::$instance->generate_challenge();+ wp_send_json($challenge);+}
factor11 -
Working fine
I started using this plugin because ALTCHA is no longer free, and version 1 is definitely not sufficient to protect my site. So I decided to give this fork a try, and so far I am very happy with it—everything works well. I can definitely recommend it. At first, I thought I would have to add the shortcode manually in all the places where I need protection (e.g., Contact Form 7 forms), but this is done automatically after installing the plugin. A very nice detail!
rabox66 -
So far, so good!
It absolutely does, what it should! I hope for more people to use and review it and also check / validate the source code to build more trust.
carazza
Download and install history
1,344 downloads over the last 43 days. Snapshots taken daily from WordPress.org.
Where OpenPorte ranks on WordPress.org
The rankings we track that OpenPorte appears in, and how its position changed over 30 days.
| Ranking | WordPress.org placement | Position | 30 days |
|---|---|---|---|
| Best Anti-Spam Plugins | #38 in search, not tagged | #67 | ▲13 |
Details
Stop spam without CAPTCHAs. Proof-of-Work protection for your site. Open-source, self-hosted, privacy-first.
The full description, screenshots and every review live on the WordPress.org page.
Rankings OpenPorte competes in
Tags
- altcha
- anti-bot
- anti-spam
- captcha
- spam
- Version
- 1.29.1
- Last updated
- Sep 16, 2026
- First published
- Jun 15, 2026
- Requires WordPress
- 5.6
- Tested up to
- 7.1.3
- Requires PHP
- 8.0
- Pricing
- Free on WordPress.org
OpenPorte FAQ
What does OpenPorte do?
According to its WordPress.org readme, OpenPorte offers Contact Form 7, Elementor Pro Forms (deprecated — paid plugin, see Deprecations), Formidable Forms, GravityForms and WordPress Login, Register, Password reset.
How many active installs does OpenPorte have?
WordPress.org reports 300+ active installs for OpenPorte as of October 17, 2026.
Is OpenPorte still maintained?
Yes. The last release was on September 16, 2026 and it is tested up to WordPress 7.1.3.
Does OpenPorte have good support?
On the WordPress.org forum, 1 of 1 recent support threads for OpenPorte are marked resolved. That is the developer's free support; a paid version usually comes with its own channel.
Is OpenPorte free?
OpenPorte is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.
Where does OpenPorte rank among Anti-Spam Plugins?
OpenPorte is #67 in the WordPress.org Anti-Spam Plugins ranking.