Impossible config hCaptcha

Bug Report: hCaptcha for WP 4.22.0 – Settings Form Fields Are Readonly and Submit Button Is Disabled Environment

• WordPress: 6.9 (latest stable)
• Theme: X 10.7.11 (latest stable)
• hCaptcha for WP: 4.22.0
• Browser: Chrome (latest), also tested with Firefox
• Server: Nginx + DirectAdmin + CloudLinux

Description

On the hCaptcha General settings page (wp-admin/admin.php?page=hcaptcha), the Site Key and Secret Key input fields are rendered with readonly="readonly" attribute, and the “Save Changes” submit button has disabled="disabled". This makes it completely impossible to enter or modify the hCaptcha credentials through the normal browser interface.

The fields cannot be clicked, typed into, or pasted into. The submit button cannot be clicked either.

I was only able to configure the plugin by using Claude Code (an AI assistant) with Playwright browser automation to programmatically:

1. Remove the readonly attribute from both #site_key and #secret_key inputs via document.getElementById('site_key').removeAttribute('readonly')
2. Set the values using JavaScript’s native input value setter and dispatching input/change events
3. Remove the disabled attribute from the #submit button before triggering the click

Without this programmatic workaround, the plugin is unconfigurable through normal user interaction. Steps to Reproduce

1. Install and activate hCaptcha for WP 4.22.0
2. Navigate to hCaptcha > General
3. Try to click on the Site Key or Secret Key fields
4. Observe: fields are readonly, cursor shows no-edit icon
5. Try to click “Save Changes” button
6. Observe: button is disabled and unresponsive

Expected Behavior

Fields should be editable and the Save button should be enabled, allowing users to enter their hCaptcha credentials normally. Additional Note

There is also an unrelated SVG icon bug in the X theme (x/framework/setup.php line 150) where add_menu_page() concatenates 'data:image/svg+xml;base64,' . x_admin_menu_logo() but the function x_admin_menu_logo() already returns the full data URI including the prefix, resulting in a doubled data:image/svg+xml;base64,data:image/svg+xml;base64,... that triggers net::ERR_INVALID_URL in the console. This is a theme bug, not an hCaptcha bug, but it appears on the same admin page and may cause confusion.

https://multimedia.castris.com/videos/hcapctha-WP.mp4

The page I need help with: [log in to see the link]