Lead forms (B11)
Spam / captcha
This page explains what this scan check measures. It is not legal advice or a compliance verdict.
What this check is
This check notes spam protection such as CAPTCHA or similar challenges on the lead form path.
Why WordPress sites show it
WordPress sites add reCAPTCHA, hCaptcha, or Cloudflare challenges to cut bot spam.
Realistic impact
Strong spam controls are useful, but they can also block automated verification. The finding describes what the scan encountered, not whether spam settings are wrong.
How to verify a fix
Provide a QA path or temporarily ease the challenge for verified testing, then re-scan the form journey.
Open the step-by-step fix guideSee this check on your site
Run a free scan. If this check appears in your report, you will see the live status for your URL.
Run a free leak scan