Website Security issue: There is no inbuilt captcha verification system in the theme for login/registration popup and password reset forms. 

Therefore, I have activated Wordfence recaptcha verification but not working/showing on these popups/pages.

Now every day bots are signing in through the popup with fake email ids. That's a serious issue.

Please provide recommendations on this.