Thanks for the nice plugin. it works for the comments section. I want to implement the same csrf token for contact forms and search boxes to fix the issue. Can you please share the idea to fix it?
Or is there any hooks or action is available to achieve this requirements?

Thanks,
Saravanan

It seems it is not compatible with cache plugins, since the page is cached for more than the life time of the “protection”.

Can you confirm the cache plugin should not be used?

Stefano.