How many vulnerabilities does TapHuman – Gamified CAPTCHA & Bot Protection have?

The audit found 148 findings: 1 critical, 16 high, 30 medium severity.

Should I use TapHuman – Gamified CAPTCHA & Bot Protection?

Based on the latest audit (grade C, risk CRITICAL), review the 148 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

TapHuman – Gamified CAPTCHA & Bot Protection

Q: Is TapHuman – Gamified CAPTCHA & Bot Protection secure?

WP HealthKit's independent audit rates TapHuman – Gamified CAPTCHA & Bot Protection overall risk as CRITICAL with a report-card grade of C.

Audited at release

v2.7.3WordPress PluginAudited 19 days ago

Stop bots with gamified, privacy-first CAPTCHAs. Zero telemetry. Zero tracking. Powered by cryptographic Proof-of-Work. One-click setup.

CRITICAL

Total Findings

148

Security Grade

Security Findings

148

Critical1

High16

Medium30

Low98

Info3

Executive Summary

Is TapHuman – Gamified CAPTCHA & Bot Protection secure? In WP HealthKit's independent 2026 audit, TapHuman – Gamified CAPTCHA & Bot Protection received an overall risk of CRITICAL and a report-card grade of C across 148 findings (1 critical, 16 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

PHP Compatibility

Requires PHP 5.6

Categories with Findings

Malware & Nulled PluginGDPRPlugin LifecycleCoding StandardsType SafetyWooCommerce CompatibilityAccessibilitySecurityPHP CompatibilityWordPress CompatibilityPlugin ConflictsDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![TapHuman – Gamified CAPTCHA & Bot Protection security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/taphuman-gamified-captcha)](https://wphealthkit.com/directory/taphuman-gamified-captcha)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 5.6

Categories with Findings

Malware & Nulled PluginGDPRPlugin LifecycleCoding StandardsType SafetyWooCommerce CompatibilityAccessibilitySecurityPHP CompatibilityWordPress CompatibilityPlugin ConflictsDependencies

TapHuman – Gamified CAPTCHA & Bot Protection

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings