PluginScout

SpamJam — WordPress Security Plugin

SpamJam – Anti-Spam Protection for Comments & Forms

by Matt Biscay · WordPress.org page · Website

v3.2.1 Tested up to WP 7.1.3 PHP 7.4+

SpamJam has 100+ active installs on WordPress.org and 4,215 downloads all time. It was downloaded 247 times in the last 30 days. The last update was on October 13, 2026, tested up to WordPress 7.1.3.

SpamJam at a glance

Active installs
100+
Total downloads
4,215
Downloads, last 30 days
247
30-day growth
–
downloads vs the previous 30 days

Is SpamJam well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1.3, the current release is 7.1.3

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Per-site salted honeypot – An invisible, site-specific trap makes generic bot scripts easier to identify
  • Submission timing check – Detects forms submitted faster than a person could reasonably complete them
  • Weighted spam scoring – Combines form, timing, token, and referrer signals instead of relying on one fragile test
  • Safer moderation path – Suspicious submissions below the blocking threshold can be held for review
  • Secure form validation – Nonces and time-boxed HMAC tokens help verify legitimate comment submissions
  • Built-in keyword blocklist – Stops common comment-spam patterns
  • WooCommerce product reviews – Protects review forms and declares compatibility with WooCommerce HPOS
  • No-JavaScript fallback – Visitors with JavaScript disabled are not automatically hard-blocked
  • Dashboard statistics – See the protection working from your WordPress admin

Download and install history

396 downloads over the last 48 days. Snapshots taken daily from WordPress.org.

Downloads per day
SpamJam downloads per day012.52537.550Sep 5Sep 28Oct 22Downloads per day
Active installs
SpamJam active installs0255075100Sep 5Sep 28Oct 22Active installs
Rating out of 5
SpamJam rating00.30.50.81Sep 5Sep 28Oct 22Rating out of 5
Reviews
SpamJam review count00.30.50.81Sep 5Sep 28Oct 22Reviews

Details

Block comment and form spam without CAPTCHAs. Lightweight honeypot protection works automatically and keeps real visitors moving.

The full description, screenshots and every review live on the WordPress.org page.

Rankings SpamJam competes in

Tags

  • comment spam
  • honeypot
  • registration spam
  • security
  • spam protection

More from Matt Biscay

Version
3.2.1
Last updated
Oct 13, 2026
First published
Jul 27, 2022
Requires WordPress
6.2
Tested up to
7.1.3
Requires PHP
7.4
Pricing
Free on WordPress.org

SpamJam FAQ

What does SpamJam do?

According to its WordPress.org readme, SpamJam offers Per-site salted honeypot – An invisible, site-specific trap makes generic bot scripts easier to identify, Submission timing check – Detects forms submitted faster than a person could reasonably complete them, Weighted spam scoring – Combines form, timing, token, and referrer signals instead of relying on one fragile test, Safer moderation path – Suspicious submissions below the blocking threshold can be held for review and Secure form validation – Nonces and time-boxed HMAC tokens help verify legitimate comment submissions.

How many active installs does SpamJam have?

WordPress.org reports 100+ active installs for SpamJam as of October 22, 2026.

Is SpamJam still maintained?

Yes. The last release was on October 13, 2026 and it is tested up to WordPress 7.1.3.

Is SpamJam free?

SpamJam is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.