Hi,
I’m writing to report the following bug related to Cloudflare Turnstile Add-on WordPress plugin: the captcha field has disappeared from the front-end.
I don’t know when the bug arose, but I find the code that seems to cause it:
From GFTurnstile->has_valid_credentials()
$response = wp_remote_get( $api_url ); → returns a 404 Error even though the credentials are valid.
Please note how this bug can cause serious problems in terms of spam.
p.s. I don’t think this bug is due to Cloudflare because I added the captcha to the site via custom code as well and it works correctly.
Cloudflare has made a change at their end, which is resulting in that 404 error. Our product team have an issue for this on their to-do list. We’ll let you know as soon as a fix is available.
Version 1.2.0 has just been released with a fix for this issue.
Depending on when your site last validated the license or checked for updates, it could take 24 to 48 hours for the site to offer to install it.
If the update isn’t offered, and you don’t want to wait, you can go to the Forms > System Status > Updates page to force a license validation and update check to occur.