Plugin not blocking all spams. Received 500+ spams

Hello @dharashah410,

Our plugin checks email for validity. To understand what happened, please restore the contact form and provide us with a link to it. We’ll check your form.

Thank you so much for the prompt response.

Despite pulling the form down, I am still receiving spam emails continuously. It has not reached 800+. This is super scary and frustrating.

One thing to note is that “admin” is what I can see in the email field across all the spams.

I have restored the form here – testpage – The Humane Club

Is there a possibility that spammers are using form API to submit the forms programmatically? Because even when forms do not exist of pages, I am getting 9-10 emails every 1 hour. https://drive.google.com/drive/folders/1WDc24wwHVWEM-jeCVjTrX05FOLB7-FPp?usp=sharing

Yes, it is possible.

I’ve checked your form and found that spammers are changing the field type. For this reason, our plugin could not detect them.
Right-click, and select “inspect” or “inspect element” (the label may differ depending on the browser). In the email field, you will see that its type is email, but if you replace it with text, this field will not be checked. And spammers can write anything in this field. You can see the screenshot here: https://imgur.com/a/6XmnZ0M

This is the vulnerability of your form. I recommend that you contact the form developer or replace it with another one.

Our form integrations are here:
https://cleantalk.org/help/anti-spam-integrations

Or you can try enabling this option:
WordPress Admin Page —> Settings —> Anti-Spam by CleanTalk —> Advanced Settings —> enable “Check all post data” —> Save Changes.

But it will be better if you replace your form plugin.

Let us know if you have questions.

Hi Dimitry – thank you for sharing these details. I have used Contact Form 7 as well for other sites and their forms too use type=email in their fields. In such cases, how can one prevent attackers from spamming?

I’m not sure if you used contact form 7 on that page as the form code was different. Perhaps you are using an outdated version?
In any case, you need to contact the developers of this form to find out the reason. Unfortunately, we don’t know why this is happening to your form.

Thank you so much once again! I’ll get it checked from developers.

Closing this thread

You are welcome!