From 465e660fe2176cbc2ed46fd38cd737fe1a2456d6 Mon Sep 17 00:00:00 2001 From: "Dave (translate via Sonnet 4.6)" Date: Thu, 9 Jul 2026 18:41:52 -0600 Subject: [PATCH] wip: update captcha rate limit docs --- docs/addons/captcha/index.mdx | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/addons/captcha/index.mdx b/docs/addons/captcha/index.mdx index fdd00b0ff..ab0d9d952 100644 --- a/docs/addons/captcha/index.mdx +++ b/docs/addons/captcha/index.mdx @@ -110,6 +110,10 @@ When a visitor exceeds the rate limit, the plugin responds with: ### Configuration +#### Checkout Defaults + +Ultimate Multisite: Captcha v1.6.1 uses safer checkout rate-limit defaults: **20 attempts per 10-minute window** with a **10-minute block duration** after the limit is exceeded. This wider threshold reduces false positives for legitimate shoppers who retry checkout after payment, billing, or validation errors while still blocking abusive retry patterns used in card-testing attacks. + #### Tarpit Timing Control the randomised delay applied to rate-limited requests: