Plugin inspection:

Gravity Forms No CAPTCHA reCAPTCHA

Potentially unsafe

Last revised:

Confidence: Medium
This plugin has been given a short, targeted code review.

Before using this plugin, you should very carefully consider its potential problems and should conduct a thorough assessment. Read more about this recommendation.

Findings

No current issues were found in the code review. although the plugin has not been maintained and noting possible data protection issues as described below.

Reason for the 'Potentially unsafe' result

The plugin has been given this recommendation at the tester's discretion:

From the WordPress.org plugin page the plugin does appear unmaintained (“This plugin hasn’t been tested with the latest 3 major releases of WordPress.” and “Last updated:8 years ago”). Using alternatives is therefore recommended, and if used, the plugin should be kept under review for any issues that arise with future WordPress-related changes.

The plugin also sends the user IP address with the Google Captcha API check. This is optional for the API, so would be better if left out to avoid data protection concerns.