hcaptcha + CF7 lack – spam goes through

+1

Sounds like a backend issue if you’re not seeing challenges solved in that period; most likely some route is not requiring the token to submit the form. This should be automatically enforced in general though. Do you have more logs of the URLs? Do they match up to your normal URLs for POST?

REST does not work on your site, so the CF7 form cannot be submitted.

I think there are other errors that allow the bot to send a form.

https://prnt.sc/26v08eb

We are facing the same issue on our business page https://www.simplefox.io

@kaggdesign
REST does work fine – if you check, there is an actual response.

{"code":"rest_cookie_invalid_nonce","message":"Cookie-Pr\u00fcfung fehlgeschlagen","data":{"status":403}}
We just have a 403 status code here.

https://simplefox.io/wp-json/wp/v2/users is also possible to call.

@hcaptcha

So far it seems related to cache.
It works fine if we clear the cache, but once the cache is filled it does not work anymore.

Here is a full payload (page cached)

curl 'https://simplefox.io/wp-json/contact-form-7/v1/contact-forms/1187/feedback' \
  -H 'authority: simplefox.io' \
  -H 'pragma: no-cache' \
  -H 'cache-control: no-cache' \
  -H 'sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="98", "Google Chrome";v="98"' \
  -H 'accept: application/json, */*;q=0.1' \
  -H 'content-type: multipart/form-data; boundary=----WebKitFormBoundaryBmAsjuxBwrFr1mbT' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.109 Safari/537.36' \
  -H 'sec-ch-ua-platform: "macOS"' \
  -H 'origin: https://simplefox.io' \
  -H 'sec-fetch-site: same-origin' \
  -H 'sec-fetch-mode: cors' \
  -H 'sec-fetch-dest: empty' \
  -H 'referer: https://simplefox.io/' \
  -H 'accept-language: de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7,es;q=0.6' \
  --data-raw $'------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7"\r\n\r\n1187\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7_version"\r\n\r\n5.5.5\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7_locale"\r\n\r\nde_DE\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7_unit_tag"\r\n\r\nwpcf7-f1187-o1\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7_container_post"\r\n\r\n0\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpcf7_posted_data_hash"\r\n\r\n\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="Name"\r\n\r\nasd\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="Email"\r\n\r\[email protected]\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="message"\r\n\r\n213\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="acceptance-619"\r\n\r\n1\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="h-captcha-response"\r\n\r\nP0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwYXNza2V5IjoicytDaVRwd1dKTVhHTll1cTlxdUdYWmtZY0hHOTVITXAxSXpIZDBYQURhZEZEV1NWSFJVWTE2NGM0WkVrN2dYWVMyNXFiV2h0eWVHQXplU3JTaFREM0dBNVEwM241MFljQ1VleEhUNmVwS1V3TzFQQUtWcERYY2JHaXREb1hYWDVUUWlLNFB5MGtrNW42WDZiNFQ2YW9ZTHA5RW4zblJzMkhHQ0xieTNkUVliRnZoSHFwOEpLbjdKMnNLVDBxUjJrS2t0RlcxS1BSWFVjdXFldmYyNEtIT1YrWEVxNFp5aW5ucGFoWndYeEhySjd0K3BqUzdUajZzcHBRSmVQY2l2dFBiUnYyWDdtS0lseW1YRjJ6MmdVRGxJa2pWZ2p0eEFHN2k0ZEJxSXFkRGt2TUJQbEtTTW90Rkp6aW9WSG5RUmtjblFadjk2cmJtaW45a3E1UkxIYS9NRmU2cHBzM3ZmbVd2eGU3bVJCTWlKSjU2SEV0WkFuWnFCb2ZnaXlBQVlkN3l6YUVaOXJvU1lSNnhCcEJUSEdzR1hHWGNUaHRDbmtXRjJFeXpHLzVuaU9QZkpvbFZaaVlEMmY0Qm84UHgzZHNXczVoNHhvckxTRGJPUTAxTjZnNXZrQzdMd2diOUcyaUVicVZXTzNTcG8vZ3B6N2xzZWxUNE82Sk9UQ1c0L3MrT1pvRktjelNtbm1TcWhaaEdweWpTRlB4SXhnVlBtcVppV1VSemlRSDNpYjZFRWN1SGd2VWtYMjlXdFphNUlJc0MySnhYeG1nbEpkOVNmUGpsdnlnREYyZ0NVR1hqU016Ly85S0N0NUVJb3dCbkNDZTZGTzYyTzJ6Y2RyM0QrZC8vTFFGTkJHVkd3dDhzSmNIb2pIV2RFcG14cXlSVzk0WGxsaXNoaUdFVGlTQTRiWitTc3BibXBlOFFrNjFjYUZXa0Ria1o0ZWltVWxScmM4WVYrWWZWVGx6TU9hM3pucnBEcWRqZTNDZUptKzlPR3BoekdTeDdXZktwdnIrY2lyRGZMWmdzMnRYaUxZVDlvcnNhYXpjdEhnZW5KR2Nma3VLeDFFUnVoMEF1Ryt0YllLKzNGaVE2YTIvc1IyU3BrQmlvV1RySS9LZmVRVXNUeXBSWExFdzBLUEJhT0w3YVdWeHFvLy9BVlJhc3R6a2ZIU3ZnSnJrMmZuNjhyeEdaRmhVU2sxVnM0ZWNOK2VENlc5LzNUbGhDdk5rR2kySGFGNHZLMTZVcUV6ajg4QkwraS9jVFZIcFh6NVdFRkwzdFkydmdBbFlWa1B1aHk3cElJMS93NVJvTk1DYWJQSE5Kd21RWE0vazdCbFNUMVQ1UnlWSEVOY3l3OStValJzM0VlQWR5QUJ3SHpjRm5MNUVXc3ZJRlNiTG9tbHI0d2UvRjlmd0VCR3RYeEViY0UrWWgrV2FBTlVGakxnY01JRWhhbXltUmE2eUgxamRpcTBqUEFQU3hkVjNiQ3RsSmpyMDBlakkxY2JhZWdQSE9zUUJqSTNVNGNFOHhMUjRwaXBrWDVTTGIzZE1pVkprekJCV1I4MXBLRE9vRjFjTlV0TVhQL1JXZGUzTzRPaGIvZ3hCOXdTQlZPRFZiSlVrelBjUllnVzB4MXU1emNGQStCcWZpMG1YVkFDWHh4M3h1TTVGaXFJa1ZMM0o0T2w4WWNXUkNjMGhvSzZ2ald2VjJBSVFPS0N6U2M2K0VPU0hTMWhqQ3AzQ0h3cVVWWS9pMGlmT2pzZnQ2TGJlK1FoOWNyZDR3S1NLS2RPN2FoWmRhM25DdWxFNXRFUHQ0V3ptaTdNTGZtL0FoVWhpa0JGaW15SExCbzJINkp5UEtPai9yZUVXUWd1UXcrVElnWnpFMlB0QUNYOUwrU3NNcXBwVFJTeTRMOXVRVkxEZlJVM01aWmRBZjFXb0hKNUZxb2NYUzEwNTNnNTZobnVpZmR6L2VtK3MwNlBWNHRZN1NHS09zMDRtQ0h1VmVXOFRqcGQ0eXRxbThRdVp4d21RU1FpOGE2djMxMCt3eXlxclYySm84ODc4dkg1T3VQakEwdlNxMko5alpYL2VQM2NrT2RCd0pvMHhtbGk5M05HSExVTklNMDJvYWdPalp5QTdPREdIUVFMa2dpMUUxQmMzaldFS083VTJ2b2hadHQrYnhrVzcxcWxteEtnYnNoTS9Kb2cwQ2lQcitCTGxVTU40SkxLd0ZyMjRxTzRyRmJ0MmIwUjJIc28wSURtbm9NenJIVVplbmh2NlBFT2tURTdkQ0ROZTJSdHpNMG9GNVRYYlo3cDlHbjR6TEh0UlZOa0tBc3RIa2N0RzQ3SlAwcWE2bHBoK2h1T2g0ZUFWYWVrS2ZscWhNNmIrZU5BaVJoTG9wWThNZHdoQnlyVzRWdE9FQUpmZHp1TVo2b25RVVRMTmtya3Z1WDk5VmJyM0FtWFVkSURZTjRKdkFaN011ckJwc2k2VWVGOFFocU1hK212dzk2elpsMTlYU2NxQ3lieWhva2xseWtoMEQvUXBaMGpZMWpMdjRNRzVaZEkwRTdqeEhzVlg5akdpbGpIU0pUcEdMeTRJQnNVR2xLVzg4QWFxWDJ1d1hvL2JqNDYzUmorL3pzd0JnS0VSeEM2Tm9wa3RKSkZCMjJtaXEwMUY3RWNIR1BIWlFyOU1wK2JkMDNnQUI5anVXazFZK0ZDbVFTMys4YkMxSWVxaVgxTFMzRVk2VkxwNWYvS01tWDZkamNseWVpVHRoK1RoSzBGK2FqbDRQSyszNi8rSlJhRzVxMVVvbXRSUk42MjhDZEx5bDg3VHp5SFhMWHVuL2dqemczN2M3dS9GNUk2QzduZWVoTWQyNUhIQS9wV0ZTeDFWZERrNTE1RFNiNjlqRjZwNExPMSt1UmdpSVRpdXF5RW1HNyt6SmpIRGR5SWdwSU52OW5weFJUdDBrS3FiOUgzc0xuM2FGNUxKcjZucjJsMjZwUzJ2Z05hWVo3RER2MVNjSXFpa2dRQkNpTllQdXRxbWNiRHlydDZGQlFYbHM3U3JxUW95TUFxZnJkcjhSa0krWHdWNkFpN1JQQy93aWlNRkVlLzhNejFENHU0ZXVaOGZ5WXJaWEhDaDNzanZxU3BzODM4ZlRtQUZ5dE4yZmxkb1Y0V2NzTlhzRUpSOFdCWEpiMkIrcEVueVY3TSsrK1kxSHJrWnowcWVJU29PeDZIRTJwNU9BYWdSa0dEQk90Qklld2NQNXFISWREZ2s0MHBMNXk2V0VqT2c5b0psSG45MmtJSVdLa0huOThJVlIxQjAyQkE2SzQxRFc5cmU5MUhrKzVidmxuQ3FMWWhEeHZzVjhUZy9mTUhNdHZTc3E0d3VaSEI0S1gwb1FrcURpMzJtYk1ONSs0RHpaeTF4bXl4cUQybnE3d0N5OFNVWHAxYi9QbnNwQVFQSkh0TXN3eXBsQXpjL1JBdHorMCtteGRUK2FMVmdZUEhWU3Q2c1lVM1B3cWUyMm5nYWRvZVpsYVlGM051bnBkVjZpU2tQdXJCL1d2TUZhWEZoMldmbThWa0JhbzJWSlZBQ010cklsa2E3RlRHaEdHZ1Jhc3B0a0d4YTlZenRLa09QRmJESHNzMGpqN2ZRTmJEN1YrM0NQYVJTTHVPWkhldXJEVndMQmNjK21mamhhRi92OEViU0NZcC9rNHJRUmkxeFZ2SVpJcEhkSFk3OFhpOFFWK2psbWZ0Y3U2ekhpajRObWlPQnpEZEhpMEFlS3JXaEd6VU40ckZUNjNGa0tOVmRKNnI2Wlh4akw0MVpwckQwRXlrTGVob1NLS1dVMEI0RTVJYnlDRzBxQ3VuWkQwSFVreTJiSmhUQThZZVdCOFdBWVpEcTlPQmY2cWpnblZGMGpLMHhPYjFOZ1lXeVo4dDNRZUVrSFlFQk5tTm9mK2hFZHdlTXZNM2JLa1NiYzBWQUtDaG0vT00wRW9xY0NrUU1ZUjZLSTFMa1gwVWRXQUlMYVFYTnZ5SHZKMFZ1RUN4UXJFb0ZRTDFtb09QODlPYkNPcWEvaG91ZUpwMHhXYTFYemhwOUpYc3hTNDhQYnpkaExZbmcwUE9rRTVWdE9aY1Jjb29lT2xUNWpmSHZwZmN5WjRsVHErU2E4ZnRrSVIvS2dyZVcwM3NMNklwSnNTRG1OaTZZaVNicDBNcmplVkZ5eDB6VThYOHRFZnBtUk8yUHp2aXRmVld4QTZkUThTQXdvYXhRdkpsRng4MFZBdURMdS96Q1kzdDloRzhMOGdWNjJsaFNZdE5GcExQdU44WXNPWDJBOXEwbk1MZVZmN3NUQUF4L1NyOTJURHUrd1JnTFRLOVBOQjROa3ZFWVc4dXllUEd1THhrMklieEpqV1phem85WDZwUEpFTmNvM3FJVDBUemZpdXFqTkVFN0NCajk0aUxDU0dnYkErZnZKQT11YjgrMkE3VXJlWXpmVGhMIiwiZXhwIjoxNjQ2MTQzMjA1LCJzaGFyZF9pZCI6NTM1NzY1NTksInBkIjowfQ.QrS4fBfnSt4-pVQUiKzBj4qaU84hEmUqwd7edPr5xcM\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wpnonce"\r\n\r\nf8505ee0e4\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT\r\nContent-Disposition: form-data; name="_wp_http_referer"\r\n\r\n/\r\n------WebKitFormBoundaryBmAsjuxBwrFr1mbT--\r\n' \
  --compressed

Here a Payload (cache cleared)

curl 'https://simplefox.io/wp-json/contact-form-7/v1/contact-forms/1187/feedback' \
  -H 'authority: simplefox.io' \
  -H 'pragma: no-cache' \
  -H 'cache-control: no-cache' \
  -H 'sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="98", "Google Chrome";v="98"' \
  -H 'accept: application/json, */*;q=0.1' \
  -H 'content-type: multipart/form-data; boundary=----WebKitFormBoundary7ASYMHkeRWCW4qSd' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/98.0.4758.109 Safari/537.36' \
  -H 'sec-ch-ua-platform: "macOS"' \
  -H 'origin: https://simplefox.io' \
  -H 'sec-fetch-site: same-origin' \
  -H 'sec-fetch-mode: cors' \
  -H 'sec-fetch-dest: empty' \
  -H 'referer: https://simplefox.io/' \
  -H 'accept-language: de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7,es;q=0.6' \
  --data-raw $'------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7"\r\n\r\n1187\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7_version"\r\n\r\n5.5.6\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7_locale"\r\n\r\nde_DE\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7_unit_tag"\r\n\r\nwpcf7-f1187-o1\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7_container_post"\r\n\r\n0\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpcf7_posted_data_hash"\r\n\r\n\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="Name"\r\n\r\nName\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="Email"\r\n\r\[email protected]\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="message"\r\n\r\nasdas\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="acceptance-619"\r\n\r\n1\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="h-captcha-response"\r\n\r\nP0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.M8ypKhO4Nqd0xvUuPEr_rcsPHMZlWjKa41HSrVVyD1c\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wpnonce"\r\n\r\n7b1b15725b\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd\r\nContent-Disposition: form-data; name="_wp_http_referer"\r\n\r\n/\r\n------WebKitFormBoundary7ASYMHkeRWCW4qSd--\r\n' \
  --compressed

Response
{"contact_form_id":1187,"status":"mail_sent","message":"Die Nachricht wurde erfolgreich gesendet.","posted_data_hash":"a7a1e0bd7a3375bbda1000bc3280e558","into":"#wpcf7-f1187-o1","invalid_fields":[]}

Let me know if there is anything else i can debug.