Comments are sent even without hCaptcha I noticed that the comments are sent and even if I don’t hCaptcha they are sent, in the other places with contact and wp admin, it works without problems!
Thank you for a good explanation. I was able to catch this bug on your site once. And was unable to catch it on the local test site ever (for debugging). The test site runs hCaptcha v2.7.0, the same as you have.
The code related to the protection of the WP comments was significantly rewritten in v2.8.0, which will be released in days.
Upon release, kindly let me know if you see this bug in v2.8.0.