CleanTalk for WordPress Updates: New Features and Improvements in Anti-Spam and Security

We have released fresh updates for two of our plugins — CleanTalk Anti-Spam and CleanTalk Security for WordPress. In the new versions (v6.59 and v2.159 respectively), we have not only added useful features, but also fixed some issues to make your protection against spam and threats even more effective and stable.

What’s new in CleanTalk Anti-Spam v6.59 for WordPress

We have improved the plugin and made several important changes:

1. Fixed a bug with a honeypot on the WordPress search form
   Starting with WordPress 6.3.0, the search form can be rendered dynamically via JavaScript. This prevented the honeypot field used to detect bots from working correctly. In the update, we have adapted our code to this new logic — now everything works correctly.
2. Improved Anti-Crawler
   The Anti-Crawler (Bot Protection) function is designed to block suspicious bots that:

scan the site for vulnerabilities,

aggressively parse content or images,

load the server and cause a decrease in site speed.

Anti-Crawler helps protect site resources from bots. In the new version, we have fixed the issue due to which blocking could not work when using an alternative mechanism for storing data in the database (Store data in the website database).

More about the function: Anti-Crawler (Bot Protection) checks the visitor on the first visit, and if it is determined to be a suspicious bot, it receives a blocking screen on the second request. Trusted bots (Google, Bing, etc.) are automatically whitelisted.

3. Added a constant to exclude feeds from Anti-Crawler
   Now you can exclude WordPress feeds from bot checking. How to use https://cleantalk.org/help/anti-crawler-exclusion
   This is useful if you actively use RSS/Atom feeds on your site.
4. Mailchimp embed forms support
   We have adapted the replacement of Mailchimp embed form values, which made anti-spam protection compatible with these subscription forms.
5. New hook for anti-spam widget visibility
   Previously, only the administrator could see anti-spam statistics in the admin panel. Now, with the new hook, you can extend access to this data to other roles (for example, editors or SEO specialists).
6. Integration with QuickCal (Escapion theme)
   If you use the Escapion theme, which includes the QuickCal plugin, the QuickCal form is now automatically protected from spam by CleanTalk.
7. Improved integration with RegistrationMagic
   Previously, every time a value was entered in a RegistrationMagic form field, a request was made to the anti-spam service, which created an extra load. Now everything is optimized – the request is sent only when the form is fully submitted.

What’s new in CleanTalk Security v2.159 for WordPress

1. New feature – File editor blocking
   When malicious code is detected, the WordPress file editor is automatically blocked. This helps prevent further infection and prevents attackers from changing other files through the built-in editor. You can manage the modes:

Auto – the editor is blocked only when there is a threat;

On – the editor is always disabled;

Off – blocking is disabled.

2. SecurityLog – changing user role
   In the security log, you can now change the role of users directly from the interface. This is especially useful for administrators when investigating suspicious activity.
3. New signature for JS files
   The scanner has been improved for analyzing and detecting malicious code in JavaScript files. This increases the depth and accuracy of site analysis.

How to update
The update is available in the WordPress.org repository. Just go to the admin panel → Plugins → Update CleanTalk Anti-Spam and Security to the latest versions.

You can track the changelog here
https://wordpress.org/plugins/cleantalk-spam-protect/#developers
https://wordpress.org/plugins/security-malware-firewall/#developers

If you have any ideas, wishes or want to share feedback – we are always in touch via support. Just write your opinion, questions or suggestions in the comments