PLUGIN SECURITY

Is Comments Plus safe?

Disable comments globally on all posts or certain post types. Delete all comments at once, by post type or comment status. Manage links in comments.

What this plugin does

  • Slug: comments-plus
  • Author: Themeisle
  • 9000+ active installs
  • 100/100 rating (41 reviews on wordpress.org)
  • 101208 all-time downloads
  • On WordPress.org since 2017-10-17

comment moderationdelete commentsdisable commentsremove commentsspam protection

Maintenance status

  • Latest known version: 1.3.3
  • Last updated: 2026-08-20 7:28pm GMT
  • Tested up to WordPress: 7.1
  • Requires PHP: 7.4+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Comments Plus. Reported between 2026 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-42749 Disable Comments & Delete All Comments [comments-plus] < 1.3.1 High 7.1 < 1.3.1 1.3.1 2026-05-27 ✓ fixed in latest

How to fix it

Keep Comments Plus updated — 1.3.3 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.