PLUGIN SECURITY
Is Delete All Comments Of Website safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Delete All Comments Of Website WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
delete-all-comments-of-website - Max supported PHP (analyzed): 8.4
Known vulnerabilities
- WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 [WordPress Delete All Comments of wordpress plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability]
- WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 [WordPress Delete All Comments of wordpress plugin <= 4.2 - Sensitive Information Disclosure vulnerability]
- WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] < 4.3 [Freemius SDK <= 2.4.2 - Missing Authorization Checks]
- WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments [delete-all-comments-of-website] <= 5.3 (unfixed) [CVE-2023-33999, WordPress Delete All Comments of wordpress Plugin <= 5.1 is vulnerable to Cross Site Scripting (XSS)]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Bulk Delete Comments — 5000+ active installs — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.