Inspite of ReCaptcha some spam forms are filled

Replies: 1

I have a WordPress website for more than 2 years.

For last 1 week, suddenly I have started getting 2 forms on my websites getting filled by spammers with junk values.

1. Support Request Form (intranetssl.net)

2. Contact Secure Network Traffic for inquiries, resellers (intranetssl.net)

Also noticed 2 posts getting spam comments.

In the Forminator plug-in checked Google ReCaptcha and now added hCaptcha codes also. Still problem continues.

Surprise is that spam attack on 2 forms only out of about 7-8 forms.

One Survey form is filled up once. User Feedback Survey – SecureNT Intranet SSL/TLS Certificate

My setup: latest WordPress, Forminator, Sucuri, Stop Spammers, WordFence plug-ins used.

Any clue how to stop this menace?

One more thing. Recently we shifted from a shared WP setup (Plesk managed) to a shared virtual server with Ubuntu 24.04. Everything worked correctly for 4-5 weeks. Suddenly noticed 100% CPU utilisation and also this spam menace. Restarted server and and server utilisation returned back to 4-5%. Once again CPU utilisation shot to 100%. Restarted server. CPU utilisation is normal (4-8%). But once again spam started. Added hCaptcha to Forminator plug-in and added ReCaptcha plug-in. Still spams are coming.

Can anyone help or give some hint to solve the problem?