Title: Empex CAPTCHA for Cloudflare Turnstile
Author: empexdigital
Published: <strong>28 de junio de 2026</strong>
Last modified: 28 de junio de 2026

---

Buscar plugins

![](https://ps.w.org/empex-cloudflare-turnstile/assets/banner-772x250.png?rev=3589136)

![](https://ps.w.org/empex-cloudflare-turnstile/assets/icon-256x256.png?rev=3589136)

# Empex CAPTCHA for Cloudflare Turnstile

 Por [empexdigital](https://profiles.wordpress.org/empexdigital/)

[Descargar](https://downloads.wordpress.org/plugin/empex-cloudflare-turnstile.1.0.0.zip)

 * [Detalles](https://es.wordpress.org/plugins/empex-cloudflare-turnstile/#description)
 * [Valoraciones](https://es.wordpress.org/plugins/empex-cloudflare-turnstile/#reviews)
 *  [Instalación](https://es.wordpress.org/plugins/empex-cloudflare-turnstile/#installation)
 * [Desarrollo](https://es.wordpress.org/plugins/empex-cloudflare-turnstile/#developers)

 [Soporte](https://wordpress.org/support/plugin/empex-cloudflare-turnstile/)

## Descripción

**Empex CAPTCHA for Cloudflare Turnstile** adds invisible, privacy-friendly bot 
protection to every form on your WordPress site using [Cloudflare Turnstile](https://www.cloudflare.com/products/turnstile/).
No puzzles. No friction. No CAPTCHAs.

#### Supported Forms

 * **WordPress Core** — Login, Registration, Password Reset, Comments
 * **WooCommerce** — Classic Checkout, Blocks Checkout, My Account (Login, Register,
   Lost Password)
 * **Contact Form 7** — Automatic or manual widget injection
 * **WPForms** (Lite & Pro)
 * **Gravity Forms**
 * **Fluent Forms**
 * **Elementor Pro** — Inline forms and popups
 * **Formidable Forms**
 * **Forminator**
 * **Kadence Forms**
 * **SureForms**
 * **Jetpack Forms**
 * **MemberPress** — Registration, Login
 * **Ultimate Member** — Register, Login, Profile
 * **Paid Memberships Pro** — Checkout, Login
 * **BuddyPress** — Registration
 * **wpDiscuz** — Comments
 * **WP User Manager** — Register, Login, Password Reset
 * **Easy Digital Downloads** — Checkout

#### Key Features

 * 🔒 **Invisible protection** — legitimate users never see a challenge
 * ⚡ **One-click setup** — enter your Cloudflare keys, enable forms, done
 * 🛡️ **Token replay prevention** — server-side one-time-use enforcement
 * 🔄 **AJAX-safe** — tokens refresh automatically after failed submissions
 * 📊 **Logging dashboard** — see blocked attempts, pass rates, form-level stats
 * 🌐 **Multisite compatible** — network or per-site activation
 * 🧩 **Developer-friendly** — filters, shortcode, extensible integration base
 * ♿ **Accessible** — WCAG 2.1 AA on admin screens, ARIA labels on widgets

#### How It Works

 1. Install and activate the plugin
 2. Enter your Cloudflare Turnstile Site Key and Secret Key
 3. Toggle which forms to protect
 4. That’s it — bots are blocked, real users pass through invisibly

#### External Service

This plugin connects to the **Cloudflare Turnstile** service to verify form submissions:

 * **Cloudflare Turnstile API**: `https://challenges.cloudflare.com/turnstile/v0/
   siteverify`
 * **Cloudflare Turnstile JavaScript**: `https://challenges.cloudflare.com/turnstile/
   v0/api.js`

When a user submits a form, their browser interaction data, IP address, and browser
fingerprint are sent to Cloudflare for verification. This is required for the plugin
to function.

 * [Cloudflare Privacy Policy](https://www.cloudflare.com/privacypolicy/)
 * [Cloudflare Terms of Service](https://www.cloudflare.com/website-terms/)

The plugin itself does not store personal data by default. IP address logging is
opt-in and must be explicitly enabled in Settings.

## Capturas

[⌊Settings page — API key setup with onboarding wizard and live key verification.⌉⌊
Settings page — API key setup with onboarding wizard and live key verification.⌉[

Settings page — API key setup with onboarding wizard and live key verification.

[⌊Integration toggles — enable protection on 25+ supported form plugins with one
click.⌉⌊Integration toggles — enable protection on 25+ supported form plugins with
one click.⌉[

Integration toggles — enable protection on 25+ supported form plugins with one click.

[⌊Log viewer — real-time dashboard showing blocked attempts, pass rates, and form-
level stats.⌉⌊Log viewer — real-time dashboard showing blocked attempts, pass rates,
and form-level stats.⌉[

Log viewer — real-time dashboard showing blocked attempts, pass rates, and form-
level stats.

[⌊WordPress Login form — the Turnstile widget rendering cleanly inside the login
form.⌉⌊WordPress Login form — the Turnstile widget rendering cleanly inside the 
login form.⌉[

WordPress Login form — the Turnstile widget rendering cleanly inside the login form.

## Instalación

 1. Upload the `empex-cloudflare-turnstile` folder to `/wp-content/plugins/`, or install
    directly from the WordPress plugin directory.
 2. Activate the plugin through the **Plugins** menu in WordPress.
 3. Go to **Settings  Empex Cloudflare Turnstile**.
 4. Enter your Cloudflare Turnstile **Site Key** and **Secret Key** (get them from 
    the [Cloudflare Dashboard](https://dash.cloudflare.com/)).
 5. Click **Verify & Save** to confirm your keys work.
 6. Enable protection on the forms you want to protect.

#### Recommended: Define Keys in wp-config.php

For production sites, define your keys as constants in `wp-config.php` to prevent
exposure via the database:

    ```
    define( 'EMPEX_CT_SITE_KEY', 'your-site-key-here' );
    define( 'EMPEX_CT_SECRET_KEY', 'your-secret-key-here' );
    ```

## FAQ

### Do I need a Cloudflare account?

Yes. You need a free Cloudflare account to obtain Turnstile API keys. Turnstile 
itself is free for unlimited use.

### Will this slow down my site?

No. The Cloudflare Turnstile script is loaded asynchronously and only on pages with
protected forms. The plugin adds less than 5ms to server-side processing.

### What happens if Cloudflare is down?

You can configure «Soft-Fail» mode in Settings  Behaviour. In soft-fail mode, form
submissions are allowed through (and logged) when Cloudflare is unreachable. In 
block mode (default), submissions are rejected.

### Does this work with page caching?

Yes. The Turnstile widget renders fresh on each page visit regardless of HTML caching.
We recommend excluding `/wp-admin/admin-ajax.php?action=empex_*` from your cache
rules.

### What if JavaScript is disabled?

The widget won’t render and no token will be generated. The server treats this as
a missing token and applies your configured fail mode (block or soft-fail).

### Is this GDPR compliant?

The plugin itself collects no personal data by default. Cloudflare Turnstile is 
documented as GDPR-compliant by Cloudflare. IP address logging in the plugin is 
opt-in. See our privacy policy suggestion in Settings  Privacy.

### Can I use this with custom forms?

Yes. Use the `[empex_ct_turnstile]` shortcode to add a widget to any form. Developers
can verify tokens server-side using the `empex_ct_verify_shortcode` filter.

### Does it support multisite?

Yes. The plugin supports both network-wide and per-site activation. Settings are
stored per-site.

## Reseñas

No hay valoraciones para este plugin.

## Colaboradores y desarrolladores

«Empex CAPTCHA for Cloudflare Turnstile» es un software de código abierto. Las siguientes
personas han colaborado con este plugin.

Colaboradores

 *   [ empexdigital ](https://profiles.wordpress.org/empexdigital/)

[Traduce «Empex CAPTCHA for Cloudflare Turnstile» a tu idioma.](https://translate.wordpress.org/projects/wp-plugins/empex-cloudflare-turnstile)

### ¿Interesado en el desarrollo?

[Revisa el código](https://plugins.trac.wordpress.org/browser/empex-cloudflare-turnstile/),
echa un vistazo al [repositorio SVN](https://plugins.svn.wordpress.org/empex-cloudflare-turnstile/)
o suscríbete al [registro de desarrollo](https://plugins.trac.wordpress.org/log/empex-cloudflare-turnstile/)
por [RSS](https://plugins.trac.wordpress.org/log/empex-cloudflare-turnstile/?limit=100&mode=stop_on_copy&format=rss).

## Registro de cambios

#### 1.0.0

 * Initial release
 * Core WordPress form protection: Login, Registration, Password Reset, Comments
 * WooCommerce integration: Classic Checkout, Blocks Checkout, Account forms
 * Contact Form 7, WPForms, Gravity Forms, Fluent Forms, Elementor Pro support
 * MemberPress, Ultimate Member, Paid Memberships Pro, BuddyPress, wpDiscuz support
 * Easy Digital Downloads, Formidable, Forminator, Kadence, SureForms, Jetpack Forms
 * Ninja Forms, Everest Forms, JetFormBuilder, weForms, Empex Form Builder support
 * Admin settings with first-run onboarding wizard
 * Clean widget fit on narrow login/register/lost-password forms (standard widget
   seated inside the login card)
 * Token replay prevention with SHA-256 transients
 * Rate limiting (configurable per IP) including failed attempts
 * AES-256-GCM secret key encryption
 * Event logging with retention and row cap
 * Block and soft-fail modes
 * Competing Turnstile plugin conflict detection
 * Shortcode: [empex_ct_turnstile]
 * WCAG 2.1 AA accessible admin UI
 * Full multisite support
 * Privacy policy integration
 * PHPUnit test suite

## Meta

 *  Versión **1.0.0**
 *  Última actualización **hace 2 semanas**
 *  Instalaciones activas **Menos de 10**
 *  Versión de WordPress ** 5.8 o superior **
 *  Probado hasta **7.0.1**
 *  Versión de PHP ** 7.4 o superior **
 *  Idioma
 * [English (US)](https://wordpress.org/plugins/empex-cloudflare-turnstile/)
 * Etiquetas:
 * [captcha](https://es.wordpress.org/plugins/tags/captcha/)[cloudflare](https://es.wordpress.org/plugins/tags/cloudflare/)
   [security](https://es.wordpress.org/plugins/tags/security/)[spam](https://es.wordpress.org/plugins/tags/spam/)
   [turnstile](https://es.wordpress.org/plugins/tags/turnstile/)
 *  [Vista avanzada](https://es.wordpress.org/plugins/empex-cloudflare-turnstile/advanced/)

## Valoraciones

Aún no se han enviado valoraciones.

[Your review](https://wordpress.org/support/plugin/empex-cloudflare-turnstile/reviews/#new-post)

[Ver todas las valoraciones](https://wordpress.org/support/plugin/empex-cloudflare-turnstile/reviews/)

## Colaboradores

 *   [ empexdigital ](https://profiles.wordpress.org/empexdigital/)

## Soporte

¿Tienes algo que decir? ¿Necesitas ayuda?

 [Ver el foro de soporte](https://wordpress.org/support/plugin/empex-cloudflare-turnstile/)