I'm having the same issue, the messages are all exactly 3 minutes apart, and are mostly in Greek.

Im having the same issue on multiple websites as well... Recaptcha weirdly scores the messages really high as well (0.8 - 0.9)... On other websites with third part contact forms (same recaptcha though) this problem doesnt occur...

Having the same issue on older websites (4.3.4 running SP Page Builer 5.0.8) and newer ones (5.1.2 running SP Page Builder 5.3.6)

I'm having the same exact issues. The characters appear to be Cyrillic as others have indicated. I have received hundreds of spam emails over the last few weeks and 85 just this morning.

I am on Joomla 4.4.4 running SP pagebuilder 5.3.0.

Whichever bot farm is behind this, they've really increased the volume now, 400 plus overnight, all in Cyrillic.

As a temporary solution (other than disabling the contact form) - you can block this spam bot (for now) by adding this code to your .htaccess file. These IP's was sending all the spam to all the websites I suddenly got this spam problem with.

<RequireAll>

Block specific IP addresses

Require not ip 191.96.168.193
Require not ip 165.231.182.63
Require not ip 165.231.182.11
Require not ip 143.244.41.231
Require not ip 196.196.53.54

# Allow all other IP addresses
Require all granted

</RequireAll>

In addition to this I can really recommend using the joomla plugin from cleantalk.org. I think they still offer 7 days trial, which comes in real handy now... :)

Same problem, across the board

Hi I am having the same problem, to the point where I have had 3 customers contact me regarding this issue. Further my host Ionos has now blocked all sending of emails from all my customers, this needs addressing immediately!

Same problem

Hi there,

Thank you for reaching out, and I apologize for any inconvenience this may have caused. We're close to resolving the issue and will release the fix as soon as possible.

Best regards,

Toufiqur Rahman (Team Lead, Support)

Will the built in default captcha work in the interim? The one where you put in two numbers and the answer, and and is the problem specific to google captcha plugins/joomla? Looking for a temporary workaround while you fix it.

You can add the following IPs to your banned list (spam received this morning) :

167.65.231.182.112

165.231.182.11

Wanted to post about that as well, glad to see that we are not a specific target by these bots. Recieved about 8000 requests through the form this weekend, until IONOS deactivated our webspace mail automatically. I dont think blacklisting IP Adresses is a sustainable solution. Saw that a staff member replied that they are working on the problem, so I hid the form for now, while telling customers to just write an e-mail directly. If there wont be a fix soon, I will check out cleantalk.org as Daniel suggested, thanks Daniel.

Initial solution: Use the default number captcha system.

We have solved the capctha issue. Hold on for the next release.

Initial solution: Use the default number captcha system.

Hello Toufiq, No the problem has not been solved, we are still receiving mass spam, despite an update of SP Page Builder Pro version 5.3.6, both with Google Recaptcha and also with the default number captcha system. Please solve this problem as soon as possible. Thank

Change your form to this one. Turn on recaptcha and spam will disappear. https://www.tassos.gr/joomla-extensions/convert-forms

Yeah, for me it's too late because we've been blacklisted on Gmail, where the forms were supposed to be sent. I have major complaints from my client and don't know what to do.

I see the problem is with an additional address added by spammers, so the form is being sent to two addresses: the correct one defined in the form settings and the additional one added by spammers. There is no stright problem with CAPTCHA because emials are sent corectly but for additional spam address too. There should be no possibility to put any additional receiver address in form. Anyway, this vulnerability is also present in previous versions of SPPB (I had version 3 on one old page).

Please check the latest version. Thanks

Hello everyone! I have the same problem here! I use “SecurImage” as a captcha and it is set up correctly. This has also worked reliably for years in combination with, for example, “Contact Enhanced”.

With “FormBuilder” in the current PageBuilder 5.3.7, however, my customers had around 1000 SPAM messages again over the last weekend. Some of them received Cyrillic SPAM mails every 2 to 3 minutes. It seems that the captcha can be bypassed.

Please check this as soon as possible! Many thanks in advance!

I also installed the new version and then reactivated the contact form with the supported captcha. Within a very short time, SPAM emails were sent again via the form.

Please finally put a stop to this problem. You get money from us users for the PageBuilder and it is used on countless productive websites. A security problem like this over two weeks can no longer be explained to customers in good conscience. In addition, orders are lost as a result.

I've had great success installing CleanTalk on my sites.

One site in particular seems to be being targeted. CleanTalk has very successfully filtered legitimate from spam messages via the contact forms.

The 3 rows are Today, Yesterday and Week

Have the same problem for about 3 weeks now, update didn't work, just trying the addon - looks good for now. @Joomshaper - do you know when a fix will be there or even where the problem is?

WHY IS THIS NOT A PRIORITY ??? When will this be fixed? This problem has been going on for over a month now and my customers are very annoyed. I have no way of fixing the issue and they are losing business and I will lose my customers if this is not dealt with. Why are you not taking this seriously?

Guys, just remove that addon from the site and use something else for forms. I know it may be a lot of work, but it will definitely be faster and safer than using SPPB forme builder. I lost one client permanently and am having issues with two others.

Anyway, because of this problem, I started looking for another form builder and found something better, where the developer also offers a page builder. After testing, I’ve decided not to purchase SPPB again. There were too many issues, and that CMS is still far from perfect. Sorry to say that.

Could someone please provide me with a staging site to resolve this issue more quickly? I have checked it on my own server but couldn't identify the problem. I apologize for the inconvenience and need your assistance. I'll aim to have a hotfix ready by tomorrow.

I don't understand why, with such an error that affects all users (and is therefore a programming error and not a setting error on the website), the admin access data for the websites is required. Not very secure and not data protection compliant.

I have activated access data for one website. See below

You can take access from my site. I have the same problem since month. we get daily about 10K Spammers on my site! We have RSFirewall - so this semms to be save for the moment.

P.S. Maybe you fix btw my anther problem from here ... https://www.joomshaper.com/forum/question/34764

Because of this unresolved ongoing issue for the last month+, my hosting company has disabled the form on my website to prevent it from being blacklisted. I pay a subscription to use JoomaShapers proucts and this product has not been working for longer than acceptable.

I am due to renew my Joomshaper subscription and would like to know what will be done to compensate your subscribers for this issue that has had no effective resolution, has caused clients and business to be lost, and has ruined the reputation of your subscribers.

Thank you

I just think everyone needs to stop just relying on reCaptcha as the sole method of stopping SPAM. Just do a quick Google search on how to bypass reCaptcha. This very issue is being discussed on Wordpress forums as well.

This is an example of what we're up against:-

https://nextcaptcha.com/p/recaptcha_v3

Hey Toufiq how is the progress with the bug fix? Another two days without an update and more annoyes costumers as well.

No one loged into the website since I provided the login...

Same problem here, no matter which type of protection i use, spams keep coming in cyrillic. Is it safe Toufiq to installa the version above?

I have installed the latest version from the link above and i can confirm still getting spam.

Hi! Yesterday we started to have spam sent from one of our websites (hundreds of them). To stop this, w had to take the site offline for a few minutes. After that we found this thread and applied the SPPB version that Toufiq provided above. So far, 16 hours later, no SPAM was received.

We'll let you know if SPAM starts again.

Toufiq, it's been 2 days since i installed the new version. The spam has been significally less. i got like 3 or 4 spam emails. In my case the problem is 99% solved. my site is www.getcert.gr