PLUGIN SECURITY

Is Disable Comments safe?

Allows administrators to globally disable comments on their site. Comments can be disabled according to post type. Multisite friendly.

What this plugin does

  • Slug: disable-comments
  • Author: WPDeveloper
  • 1000000+ active installs
  • 94/100 rating (280 reviews on wordpress.org)
  • 34493621 all-time downloads
  • On WordPress.org since 2011-05-27

delete commentsdisable commentsremove commentsspam protectionstop spam

Maintenance status

  • Latest known version: 2.8.0
  • Last updated: 2026-07-30 8:52am GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 7.0+
  • Max supported PHP (analyzed): 8.4

Known vulnerabilities

1 known CVE on file for Disable Comments. Reported between 2014 and 2014.

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2014-2550 Disable Comments – Remove Comments & Stop Spam [Multi-Site Support] [disable-comments] < 1.0.4 Cross-Site Request Forgery (CSRF) High 8.8 < 1.0.4 1.0.4 2014-08-01 ✓ fixed in latest

How to fix it

Keep Disable Comments updated — 2.8.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.