Our website runs Joomla 5.1.0 and we use invisible reCAPTCHA for a user form. In the Joomla! Project plugin "CAPTCHA - invisible reCAPTCHA" version 3.8, I introduced the proper Google reCAPTCHA v3 codes. And everything seemed to work fine. During the second half of may, numerous "attacks" on our user form happened. I could see that, using the Google reCAPTCHA graphical visualisation of the attacks. There I saw numerous "attacks" having scores of 0,1 (this points to high risk users of the form). BUT, these "attacks" were NOT stopped by reCAPTCHA! So we ended up with numerous junk mails. I tried to see where I misconfigured the plugin or where I could set a threshold for the score (e.g. 0,5), but I didn't find it.
So I turned to a third-party plugin, the SharkyKZ plugin "Captcha - reCAPTCHA v3" version 1.1.1. In this plugin a threshold value for the score can be added. I added 0,5.
And a couple of days ago, we again had two "attacks". And this time, both of them were stopped by reCAPTCHA.
So I came to the conclusion that the default Joomla! Project plugin "CAPTCHA - invisible reCAPTCHA" version 3.8 DOES NOT DO THE JOB! Or am I not using it properly?