PluginScout

SpamJam — WordPress Security Plugin

SpamJam – Anti-Spam Protection for Comments & Forms

by Matt Biscay · WordPress.org page · Website

v3.1.0 Tested up to WP 7.1 PHP 7.4+

SpamJam has 100+ active installs on WordPress.org and 3,819 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 9, 2026, tested up to WordPress 7.1.

SpamJam at a glance

Active installs
100+
Total downloads
3,819
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is SpamJam well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1, the current release is 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Per-site salted honeypot – An invisible, site-specific trap makes generic bot scripts easier to identify
  • Submission timing check – Detects forms submitted faster than a person could reasonably complete them
  • Weighted spam scoring – Combines form, timing, token, and referrer signals instead of relying on one fragile test
  • Safer moderation path – Suspicious submissions below the blocking threshold can be held for review
  • Secure form validation – Nonces and time-boxed HMAC tokens help verify legitimate comment submissions
  • Built-in keyword blocklist – Stops common comment-spam patterns
  • WooCommerce product reviews – Protects review forms and declares compatibility with WooCommerce HPOS
  • No-JavaScript fallback – Visitors with JavaScript disabled are not automatically hard-blocked
  • Dashboard statistics – See the protection working from your WordPress admin

Details

Block comment and form spam without CAPTCHAs. Lightweight honeypot protection works automatically and keeps real visitors moving.

The full description, screenshots and every review live on the WordPress.org page.

Rankings SpamJam competes in

Tags

  • comment spam
  • honeypot
  • registration spam
  • security
  • spam protection

More from Matt Biscay

Version
3.1.0
Last updated
Aug 9, 2026
First published
Jul 27, 2022
Requires WordPress
6.2
Tested up to
7.1
Requires PHP
7.4
Pricing
Free on WordPress.org

SpamJam FAQ

What does SpamJam do?

According to its WordPress.org readme, SpamJam offers Per-site salted honeypot – An invisible, site-specific trap makes generic bot scripts easier to identify, Submission timing check – Detects forms submitted faster than a person could reasonably complete them, Weighted spam scoring – Combines form, timing, token, and referrer signals instead of relying on one fragile test, Safer moderation path – Suspicious submissions below the blocking threshold can be held for review and Secure form validation – Nonces and time-boxed HMAC tokens help verify legitimate comment submissions.

How many active installs does SpamJam have?

WordPress.org reports 100+ active installs for SpamJam as of September 7, 2026.

Is SpamJam still maintained?

Yes. The last release was on August 9, 2026 and it is tested up to WordPress 7.1.

Is SpamJam free?

SpamJam is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.