It references the script via HTTP instead of HTTPS, causing it not to load when the blog is hosted on HTTPS:

https://github.com/BlogEngine/BlogEngine.NET/blob/master/BlogEngine/BlogEngine.NET/Custom/Extensions/Recaptcha/RecaptchaControl.cs#L558