in general, it is strange that we have the same spam. most likely it is a spam bot that found holes (loophole) in the wpForo registration. and now looks for sites on this plugin and attacks them. I would recommend to the administration to change the captcha to version 3