PLUGIN SECURITY

Is Delete All Comments Of Website safe?

Delete, disable, and clean all comments in one click. Easily manage, bulk delete, or completely disable comments across your entire WordPress site.

What this plugin does

  • Slug: delete-all-comments-of-website
  • Author: royalnavneet
  • 20000+ active installs
  • 94/100 rating (58 reviews on wordpress.org)
  • 595143 all-time downloads
  • On WordPress.org since 2015-08-23

bulk delete commentsdelete all commentsdelete commentsdisable commentsremove comments

Maintenance status

  • Latest known version: 7.1
  • Last updated: 2026-10-16 10:24am GMT
  • Tested up to WordPress: 7.1.3
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

3 known CVEs on file for Delete All Comments Of Website. Reported between 2022 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-107791 WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] >= 6.1 - < 7.2 Missing Authorization Unknown 6.1–7.2 7.2 2026-10-05 ⚠ update needed
CVE-2023-33999 WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] <= 5.3 (unfixed) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') High 7.1 < 5.3 5.3 2023-07-18 ✓ fixed in latest
— WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 Missing Authorization Medium 6.3 < 4.3 4.3 2022-03-04 ✓ fixed in latest
CVE-2026-105059 WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 7.2 Missing Authorization Medium 6.5 < 7.2 7.2 2022-03-04 ⚠ update needed
— WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 — Unknown < 4.3 4.3 2022-02-28 ✓ fixed in latest
— WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 — Unknown < 4.3 4.3 2022-02-28 ✓ fixed in latest
— Unauthorised AJAX Calls via Freemius — Unknown < 4.3 4.3 — ✓ fixed in latest

How to fix it

Keep Delete All Comments Of Website updated — 7.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.