¿Es seguro Delete All Comments Of Website?

Qué hace este plugin

• Slug: delete-all-comments-of-website
• 20000+ instalaciones activas

bulk delete commentsdelete all commentsdelete commentsdisable commentsremove comments

Estado de mantenimiento

• Última versión conocida: 7.1
• PHP máximo soportado (analizado): 8.4

Vulnerabilidades conocidas

1 CVE conocido registrado para Delete All Comments Of Website. Reportadas entre 2022 y 2023.

CVE-2023-33999

No patched version available. Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Delete All Comments of wordpress Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has not been known to be fixed yet.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Wordfence

WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3

Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability discovered in WordPress Delete All Comments of wordpress plugin (versions <= 4.2).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3

Sensitive Information Disclosure vulnerability discovered in WordPress Delete All Comments of wordpress plugin (versions <= 4.2).

Descripción técnica mostrada en el idioma original de la fuente (inglés).

Fuente: Patchstack

Cómo solucionarlo

Mantén Delete All Comments Of Website actualizado — 7.1 es la última versión en wordpress.org, y cada CVE de arriba indica la versión exacta que lo corrigió ("Corregido en").

Este es el historial completo de vulnerabilidades conocidas del plugin, no un escaneo de una instalación específica — ejecuta un escaneo gratis de tu propio sitio para verificar tu versión instalada exacta.

Alternativas más seguras / más establecidas

• Bulk Delete Comments — 5000+ instalaciones activas — 82/100 (12) — PHP máx. 8.4