=== MTCaptcha WordPress Plugin ===
Contributors: mtcaptcha
Tags: captcha, security, spam, woocommerce, contact-form-7
Requires at least: 6.0
Tested up to: 6.7
Requires PHP: 8.2
Stable tag: 2.8.0
License: Apache-2.0
License URI: https://www.apache.org/licenses/LICENSE-2.0

[MTCaptcha](https://www.mtcaptcha.com) is an efficient security solution to protect your WordPress website against spam comments and brute-force attacks.

== Description ==

MTCaptcha is an efficient security solution to protect your WordPress website against spam comments and brute-force attacks. It integrates with comments, login, registration, forgot password, Contact Form 7, and WooCommerce checkout.

= Top highlights =

* GDPR compliance
* Enterprise friendly
* Accessibility compliance
* Adaptive risk engine
* High availability around the world

= Supported forms =

* WordPress login, registration, comment, and password reset forms
* WooCommerce login, registration, checkout, and password reset forms
* Contact Form 7 via the `[mtcaptcha]` form tag
* BuddyPress registration

= Customization =

Choose from multiple prebuilt themes, widget sizes, and 60+ languages. Advanced users can supply a custom `mtcaptchaConfig` snippet for full control.

== Installation ==

1. Upload the plugin files to `/wp-content/plugins/mtcaptcha`, or install through the WordPress Plugins screen.
2. Activate the plugin through the Plugins screen.
3. Go to **Settings → MTCaptcha** to configure the plugin.
4. [Register your domain](https://www.mtcaptcha.com/pricing/) with MTCaptcha and enter your site key and private key.
5. Choose which forms should display MTCaptcha and save your settings.
6. For Contact Form 7, add the `[mtcaptcha]` tag to your form.

== Frequently Asked Questions ==

= Where do I get my site key and private key? =

Register your domain at [MTCaptcha pricing](https://www.mtcaptcha.com/pricing/) and copy the keys from your MTCaptcha account.

= How do I add MTCaptcha to Contact Form 7? =

Enable Contact Form 7 in the plugin settings, then add `[mtcaptcha]` to your form.

= More questions? =

See the [MTCaptcha FAQ](https://www.mtcaptcha.com/faq).

== Screenshots ==

1. MTCaptcha common and basic settings
2. MTCaptcha advanced settings
3. MTCaptcha usage snapshot for Contact Form 7
4. MTCaptcha modern mini widget snapshot
5. MTCaptcha custom theme examples for the standard widget

== Changelog ==

= 2.8.0 =
* WordPress 6.x compatibility (requires WordPress 6.0+).
* PHP 8.2+ compatibility (requires PHP 8.2+).
* Security fix for CVE-2025-13520: settings updates now use the WordPress Settings API with proper CSRF nonce validation.
* Refactored admin settings to post through `options.php` instead of a custom update handler.
* Improved input sanitization and escaping across admin and frontend code.
* Safer script loading via `wp_enqueue_script` and `wp_add_inline_script`.
* Fixed uninstall routine deleting incorrect option names.

= 2.7.2 =
* Latest WordPress support.
* BuddyPress support.
* Bug fixes.

= 2.5.0 =
* Custom configuration support.
* Show captcha label based on configuration.
* Bug fixes.

= 1.3 =
* Bug fixes to support rendering captcha for multiple forms on the same page.

= 1.2 =
* Bug fixes.

= 1.1 =
* Contact Form 7 support.
* Ability to choose MTCaptcha widgets (modern mini / standard).
* Ability to choose MTCaptcha for logged-in, logged-out, and all users.
* Bug fixes for comments form support.

= 1.0 =
* MTCaptcha on login, registration, forgot password, and WooCommerce checkout.
* Theme customization.
* Language selection.

== Upgrade Notice ==

= 2.8.0 =
Important security update. Fixes CVE-2025-13520 (CSRF in plugin settings). Requires WordPress 6.0+ and PHP 8.2+. Upgrade as soon as possible.
