cleantalk
Vulnerabilities and Security Researches

Simple Cloudflare Turnstile – CAPTCHA Alternative, PSC-2026-65708

PSC, Research URL

PSC-2026-65708

Published on
Sep 25, 2026
Research Description
Anti-spam integrations accept challenge tokens on public forms and exchange them with an external verification service before a submission is allowed. Simple CAPTCHA with Cloudflare Turnstile version 1.43.2 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65708. The review focused on settings permissions, key handling, challenge token validation, server side verification, form integration, whitelisting, failsafe behavior, and diagnostic logging.
Affected versions
Min 1.43.2, max 1.43.2.
Status
SAFE & CERTIFIED