Security check failed. Please try again.

Hi @bigtrousers,

Thanks for reporting this and for sharing the details.

From the checkout HTML, it does not appear that Kitgenix CAPTCHA is the plugin currently rendering the Turnstile widget on your checkout page.

On our WooCommerce Blocks integration, the frontend output includes Kitgenix-specific markup. For example, our block checkout render includes attributes such as:
data-kitgenix-captcha-for-cloudflare-turnstile-owner="woocommerce-blocks"

However, the markup on your checkout is outputting:
stls-cfturnstile-wc_checkout-wrap

stls-cfturnstile-wc_checkout_block

That stls-cfturnstile-* prefix does not match the output generated by Kitgenix on WooCommerce Blocks, so based on the HTML you provided, it strongly suggests that another Turnstile/CAPTCHA plugin or a custom integration is active on the checkout page.

We are also aware of an issue affecting WooCommerce Blocks on a very small number of sites running a certain third-party plugin. To be clear, this issue is not related to Kitgenix CAPTCHA for Cloudflare Turnstile itself, WooCommerce itself, or WordPress core. We have already prepared an update for this in our upcoming release scheduled for 9 April 2026.

Because of the upcoming WordPress 7.0 release, we are intentionally keeping releases conservative until then, so between now and 9 April 2026 we will only publish vulnerability patch updates where necessary.

One other detail from the HTML is that the hidden cf-turnstile-response field appears empty at the point the error is shown, which suggests a token is not being generated or passed correctly on the first attempt. That would also fit with the behaviour you described where clicking Order again allows the checkout to proceed.

For now, I would recommend checking whether there is another Cloudflare Turnstile / CAPTCHA plugin active on the site and temporarily disabling it, then testing again with only one Turnstile solution active on checkout.

If you would like, please send a screenshot of the active CAPTCHA / Turnstile-related plugins on the site and I will help pinpoint the conflict.

Thanks again for the report.

Kind regards, Carl from @kitgenix

Hi @bigtrousers,

Thanks for the update, and I completely understand.

With that level of order volume, keeping checkout stable has to come first, so using an alternative solution for now was absolutely the right call. I am sorry this caused disruption at such a busy time.

I also understand your point about needing plugins to work without costing you time, especially on a live store handling that amount of demand. We are already working on the related WooCommerce Blocks compatibility improvements, and the planned update is still scheduled for 9 April 2026.

When you are ready to revisit testing after the WordPress 7 release, feel free to return to this thread and I will be happy to help you check it properly.

Thanks again for reporting it and for the clear feedback.

Kind regards,
Carl from @kitgenix