WordPress plugin intelligence profile

MAD CAT Design® Forms Protection

Standalone spam protection for Contact Form 7 with local checks, honeypots, runtime signals and logs. No external captcha.

WP PlugIndex snapshot

Current directory snapshot

Tested up to WordPress 7.1
Current version1.0.0
WordPress coverageTested up to WordPress 7.1
Minimum stackWP 6.5 · PHP 8.1
Directory statusactive
Last directory update25 Aug 20262mo ago
Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org

Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →

WP PlugIndex currently records MAD CAT Design® Forms Protection version 1.0.0 as active, updated 2mo ago and tested up to WordPress 7.1.

Overview

About this plugin

MAD CAT Design® Forms Protection is a privacy-conscious, standalone form protection plugin for WordPress. It protects contact forms and lead forms without forcing visitors through intrusive captcha challenges and without requiring an external verification service.

The core protection flow runs locally inside WordPress. It does not require Google reCAPTCHA, Cloudflare Turnstile or another third-party captcha provider. This makes the plugin especially useful for GDPR-conscious websites that want to reduce external dependencies and avoid sending visitor interaction data to external anti-spam services.

Instead of relying on one simple honeypot field, the plugin uses a modular, signal-based protection model. It combines server-side validation, form state checks, timing signals, honeypot fields, behavioral indicators and integration-specific context. These signals are scored together, so automated submissions can be evaluated more accurately than with a single check alone.

The plugin is lightweight and performance-conscious. The protection logic is handled locally in WordPress and does not add heavy frontend dependencies or external captcha requests to your forms.

The free core plugin includes the shared protection engine, base signal checks, honeypot checks, Contact Form 7 integration and an admin log view. Additional integrations and advanced policy controls can be added through separate extension plugins.

Key Features

  • Privacy-conscious form protection for WordPress.
  • Standalone local protection flow without external captcha services.
  • No Google reCAPTCHA or third-party verification service required.
  • Contact Form 7 integration included in the free plugin.
  • Multi-signal scoring for timing, form state, behavior and submission context.
  • Honeypot checks combined with behavioral and request-context analysis.
  • Server-side validation inside WordPress.
  • Structured logs for reviewing blocked and accepted submissions.
  • Configurable log retention and maintenance actions.
  • Lightweight checks without heavy frontend dependencies.
  • Extension-ready architecture for additional form builders and advanced controls.

Included Modules

  • Forms Protection Core: shared validation engine, signal matrix, logging and admin screens.
  • Base Signals: common runtime and request checks used by the protection engine.
  • Honeypots: hidden-field checks for automated bot submissions.
  • Contact Form 7: integration layer for Contact Form 7 forms.

Optional Extensions

MAD CAT Design® Forms Protection is built as a modular system. Additional plugin packages can add more integrations or advanced configuration without changing the free core plugin.

Examples of optional extensions include:

  • MAD CAT Design® Forms Protection for Bricks.
  • MAD CAT Design® Forms Protection Pro.

These extensions are not required for the free plugin to protect supported forms.

Privacy

The plugin is designed for privacy-conscious and GDPR-conscious WordPress websites.

The core protection flow processes form protection signals locally inside WordPress. It does not require a third-party captcha provider and does not send visitor interaction data to an external verification service.

The plugin can store log entries in WordPress for administrative review. These logs help site owners understand accepted and blocked submissions. Site owners should configure log retention according to their own privacy policy and legal requirements.

Requirements

  • WordPress 6.5 or higher.
  • PHP 8.1 or higher.
  • MCD Tools installed and activated.

Support

de

de

WordPress.org metadata

Plugin tags

Topics listed for this plugin in the WordPress.org directory.

  • contact form 7
  • spam protection
  • forms
  • gdpr
  • honeypot
Compatibility & maintenance

Compatibility & maintenance

Tested with WP 7.1

Marked as tested with the current WordPress 7.1 release.

Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.5 · PHP 8.1
Update activity25 Aug 20262mo ago

“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.

Changes recorded by WP PlugIndex

Recent tracked changes

No tracked version or compatibility changes have been recorded by WP PlugIndex yet.

Tracking & source

WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.

Plugin watchlist

Watch this plugin

Sign in to your WP PlugIndex account or create a free account. Free accounts can watch up to 5 plugins and see what changed.

Watch limit

Watchlist limit reached

You have reached your current active watch limit.