Description

Spam Master delivers powerful, real-time firewall and anti-spam protection for WordPress. Instantly block spam bots, brute force logins, fake registrations, comment spam, and malicious contact form submissions. Spam Master uses live RBL (real-time block lists) with millions of updated threats to keep your site secure.

Key Features:
– Real-Time Spam Firewall (RBL/Blacklist)
– Anti-bot, anti-flood, anti-crawler, brute force & DDoS protection
– Compatible with WooCommerce, Contact Form 7, WPForms, BuddyPress, Gravity Forms, bbPress, Jetpack, Akismet, Ninja Forms, MailChimp, S2Member, MailPoet, Formidable, ConvertKit, ActiveCampaign, and any custom plugin or theme
– No CAPTCHA, No JavaScript, No AJAX — fast and SEO-friendly
– GDPR compliant & privacy-focused
– Modular loading for optimal speed
– IPv6 & PHP 8 ready

Why Choose Spam Master?
– Blocks spam before it reaches your site
– No annoying CAPTCHA or quizzes
– Advanced honeypot fields for registrations, logins, comments, forms
– Constant learning from millions of spam sources
– Professional security logging, analytics & statistics
– Whitelist management (safe emails/IPs exempted)
– Customizable block messages

For full features, demo, docs, and support visit Spam Master website.

Plugin Integrations

WooCommerce: Block spam/fraudulent registrations, custom signatures
BuddyPress: Stops spam registrations/logins, custom signatures
Contact Form 7 & WPForms: Real-time scanning, honeypot & antibot protection
Gravity Forms: Scans data before submission
Akismet Compatibility: Marks missed spam
Custom Forms/Themes: Works with any registration, comment, or contact form

Fast, Secure, SEO-Friendly

Spam Master loads only what’s needed for security, keeping your site fast and optimized for Google PageSpeed and Lighthouse.

How It Works

Spam Master uses updated real-time block lists (RBL), spam buffer tech (for local speed), advanced honeypots, and learning heuristics to block millions of threats instantly.

Privacy & GDPR

Spam Master is developed by an EU company and fully complies with GDPR. No data is shared with third parties. Privacy Policy

Try Online Demo

Screenshots

Firewall Page showing blocked threats and statistics
Top Spam Countries – Analytics Dashboard
Plugin Settings Page
Spam Statistics Page
Firewall Block Log
WooCommerce Registration Blocked by Spam Master
Spam Master with reCAPTCHA and Honeypot traps
Akismet compatibility: marks missed spam
Top 10 Threats – Analytics

Installation

Use the WordPress plugin installer or updater.
Activate in the “Plugins” admin panel.
Visit “Spam Master” in your dashboard menu to configure settings.
Documentation

FAQ

Does Spam Master stop WooCommerce spam?: Yes, it blocks fraudulent registrations, checkout spam, and supports WooCommerce-specific spam signatures.
Does Spam Master work with Contact Form 7, WPForms, Gravity Forms?: Yes, it scans all form submissions in real time for spam and bots.
Is Spam Master GDPR compliant?: Yes, Spam Master is fully GDPR compliant. No data is shared with third parties.
How is Spam Master different from Akismet or reCAPTCHA?: Spam Master blocks spam before it reaches your site, requires no CAPTCHA, and integrates with more plugins and forms.
How do I get a Free License?: Generate a Free License in the plugin settings page, or visit www.spammaster.org.
Can I disable the “Protected by Spam Master” signatures?: Yes, you can turn this off in the settings.
Can I disable daily/weekly report emails?: Yes, emails can be turned off individually in the license management page.
Is Spam Master translation-ready?: Yes, Spam Master is ready for localization/translation.

Reviews

tajman Janairu 27, 2025 1 reply

I say simply because that’s how easy it is to use and set up. Awesome, well that’s just what it is. My site was being battered with rogue orders created by bots, nothing I tried seemed to stop them until I found spam master. The support is fast, really good and friendly. To be 100% efficient you have to give spam master a little time to train itself, but believe me, it’s time well spent to be 100% spam free. And for such a small price, buy the pro version and help support this awesome bit of kit. Thanks guys Dave at the rough rock shop

finallyfoundausernamenotusedbefore Dicamba 8, 2024 4 replies

Sadly, the greatest quantity of spam received comes from the developer, begging you to upgrade to the paid version. I installed this plugin on two hobby sites, one moderately busy (but nothing like a commercial site) and one that sees few visitors. Curiously I received two emails on the same day, and repetitively thereafter saying that I needed to upgrade to the paid version owing to my sites being too busy and that protection had been turned off until spam traffic reduces. Yeah right . . . I turned it off, and received three dubious form submissions in 24 hours on the busier site, none on the other. Hmmmm.Now trying an alternative plugin.

duckydan Agosta 1, 2023

I tried out the free account and then bought the pro version. I installed the Drupal module and have had zero spam or fake accounts registered. I have never had any anti-spam package do that. It is an install-and-forget, which I love. Also, zero conflicts with other modules and zero JS errors. Love it!!!

Sam Bull Yuli 8, 2023 1 reply

I’ve tried to use this plugin for several years, but frequently something would go wrong and the author would tell me that there was nothing wrong, until I literally gave them a patch to fix the problem. This happened several times over the years. More recently, they added a “firewall” feature which degrades performance and increases load on a server (because apparently a firewall should send blocked users a redirect to itself, so you then get 20+ requests to WP for a blocked page, instead of 1 successful request). Furthermore, my clients kept getting many reports from users that the website was inaccessible due to this “firewall”. After contacting the author, they didn’t want to add anything in the UI to disable it, but they agreed to add a DB setting that would allow me to disable it. Another release a few weeks later, and they removed that option again, and then pretended we never agreed anything and refused to allow this dumb feature to be disabled. So, after many years, I’ve completely given up on this, it will cause all sorts of problems over time and I can’t recommend it at all anymore. All I wanted was a simple anti-spam plugin that worked without inline JS.

dawod Yune 15, 2023 1 reply

very good and helpful

Penelope Dicamba 16, 2022 1 reply

Thanks for this wonderful plugin

Read all 71 reviews

Contributors & Developers

“Spam Master” is open source software. The following people have contributed to this plugin.

Translate “Spam Master” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Changelog

7.7.0

Fixing action controller update, insert option
New repo insert_option_by_type

7.6.9

Fixing shortcodes repository
Fixing Deprecated: strip_tags in Top Menu Firewall Widget
Fixing rest controller action check
Fixing action controller repo methods
Changing whitelist save label
Fixing whitelist insertion buffer clean
Fixing admin status table uncaught Error: Call to undefined method spammasteract
Fixing admin inactive uncaught Error: Call to undefined method spammasteract
Fixing admin connection sender uncaught Error: Call to undefined method spammasteract
Fixing admin key sender uncaught Error: Call to undefined method spammasteract

7.6.8

Number format links total blocks number
Fixing error of type E_ERROR was caused in line 188 of spammasteradminmenutablecontroller
Fixing undefined method spammasteract

7.6.7

Started code refactoring with new classes
Improved signatures, update, and uninstall options
Improved service actions
Legacy clean-up
Speed improvements

7.6.6

Links function text
Improved key sanitation

7.6.5

Clean-up and speed improvements

7.6.4

Fixed download and language text domain issues

7.6.3

Fixed notices and fatal errors with WP 6.7.0

7.6.2

New White Empath feature, labels, and faster checks

7.6.1

Fixed registration error for PasswordHash

7.6.0

White transient implementation, faster scans

7.5.0

Version 7.5.0 contained 10 releases (7.5.0, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 7.5.5, 7.5.6, 7.5.7, 7.5.8, 7.5.9)
Clean up
Speed improvements
Anti-bot and honeypot V2 special integration to gravity forms
Substringing, sanitizing and unsplashing honeypot V2 and anti-bot fields
New Anti-bot and honeypot V2 WP shortcode for custom built registration, login, contact form, etc. forms. Visit Spam Master plugin Protection Tools tab.

7.4.0

Version 7.4.0 contained 10 releases (7.4.0, 7.4.1, 7.4.2, 7.4.3, 7.4.4, 7.4.5, 7.4.6, 7.4.7, 7.4.8, 7.4.9)
New firewall rules selectable via user input in Spam Master Settings Protection Tools tab
Cleaning whitelists from buffer via cron
New clean up rules for db improvements
New editable settings related to new user input firewall rules
Collect service user agent should respect substr
Changing misleading text in admin firewall test page
More scan exemptions from known origins
New uninstall options

7.3.0

Version 7.3.0 contained 10 releases (7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9)
Faster speeds by exempting keys in system calls
Processing count and stats in action
Shorter signatures
More scan exemptions from known origins

7.2.0

Version 7.2.0 contained 10 releases (7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9)
Improving re-syncs in online rbl disconnect status connections
Improved API scanning limits
More scans exemption from known origins

7.1.0

Version 7.1.0 contained 10 releases (7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9)
More scans exemption from known origins
Changing dangerous blocks description
New malfunctions, labels and description texts
New alert email functions

7.0.0

Version 7.0.0 contained 10 releases (7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9)
Adding a new malfunction for Cloudflare WAF, firewall
If empty REQUEST_SCHEME replace with encrypted https
More scans exemption from known origins
More scans exemption from known origins
Editing help text for malfunction_4
Tweaking key generator for malfunction_4 and malfunction_7 and display user
Online RBL scans speed and bandwidth improvements

6.0.0

Version 6.0.0 contained 10 releases (6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.0.9)
Version 6.1.0 contained 9 releases (6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 6.1.8, 6.1.9)
Version 6.2.0 contained 10 releases (6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9)
Version 6.3.0 contained 8 releases (6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7)
Version 6.5.0 contained 2 releases (6.5.0, 6.5.1)
Version 6.6.0 contained 21 releases (6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 6.6.13, 6.6.14, 6.6.15, 6.6.16, 6.6.17, 6.6.18, 6.6.19, 6.6.20, 6.6.21)
Version 6.7.0 contained 7 releases (6.7.0, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.5, 6.7.6, 6.7.7)
Version 6.8.0 contained 10 releases (6.8.0, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9)
Version 6.9.0 contained 10 releases (6.8.0, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9)
Implementing new database structure
Adding new spam buffer / threats database
Adding new plugin page to manage spam buffer / threats
Adding new transients database
Adding new plugin page to manage transients
Adding new whitelist exemption database
Adding new plugin page to manage whitelist exemption
Adding new plugin analytics page to manage Statistics, Firewall, Registrations, Comments and Logs
Database calls restructure
New install / uninstall options
Combining and reducing crons
Fixing spam_master_cache_proxie warning
Adding Spam Buffer check to Contact Form 7
Adding daily automatic clean-up to Registrations Logs (by month) to Protection Tools page – Clean-up
Adding daily automatic clean-up to Comments Logs (by month) to Protection Tools page – Clean-up
Adding daily automatic clean-up to Contact-Form 7 Logs (by month) to Protection Tools page – Clean-up
Adding daily automatic clean-up to Woocomerce Logs (by month) to Protection Tools page – Clean-up
Adding daily automatic clean-up to System Logs (by month) to Protection Tools page – Clean-up
API improvements
PHP 8.1 Ready!
New plugin paths
New protection Lists
Extra Protection Tools
Adding daily automatic clean-up
For more info please check the change log online

5.0

Version 5.0 contained 4 releases (5.0, 5.0.1, 5.0.2, 5.0.3)
Version 5.1 contained 11 releases (5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1.10, 5.1.11)
Version 5.2 contained 10 releases (5.2, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9)
Version 5.3 contained 9 releases (5.3, 5.3.1, 5.3.2, 5.3.5, 5.3.6, 5.3.7, 5.3.8, 5.3.9, 5.3.10)
Version 5.4 contained 10 releases (5.4.0, 5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.8, 5.4.9)
Version 5.5 contained 10 releases (5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9)
Version 5.6 contained 10 releases (5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9)
For more info please check the changelog online.

4.0

Version 4 contained 27 releases (4.0, 4.1, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.2.4, 4.3, 4.3.1, 4.3.5, 4.3.6, 4.3.6.1, 4.3.6.2, 4.3.6.3, 4.3.6.4, 4.3.6.5, 4.4.0, 4.4.1.0, 4.4.1.1, 4.4.1.2, 4.4.1.3, 4.4.1.4, 4.4.1.5, 4.4.1.6, 4.4.1.7, 4.4.4, 4.4.5)
For more info please check the changelog online

3.0

Version 3 contained 1 releases (3.0). For more info please check the changelog online
TechGasp Framework V2 Implementation

2.0

Version 2 contained 5 releases (2.1, 2.2, 2.3, 2.4, 2.4.5)
For more info please check the changelog online

1.0

Alpha release
Adding Buttons
Start coding