My WordPress WooCommerce webshop developed a spam problem. The spam is not displayed but affects public product rating and therefore quality of google search results. The thing is I am not able to replicate the recaptcha failure. It seems to work, but it doesn’t.
Difficulity is set to max on google settings. The captcha appears to be working even via TOR browser with noscript plugin running. The issue is not limited to any particular language version of the website or products. I changed a few recaptcha plugins and settings, no success in limiting spam any further, and all equally appear to work if I try it in an incognito window.
Example of an affected page: https://shop.sin.org.pl/produkt/ketamina/
Currently deployed plugin: Advanced noCaptcha & invisible Captcha
I am pretty sure those are bots, as entries are not visible before approval. Does anyone have any idea how the SPAM is getting through?
Thank you in advance!