Bulk Delete Users by Email

Bulk Delete Users by Email has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2022; all 2 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Bulk Delete Users by Email has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by WPScanTeam. Bulk Delete Users by Email is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.5/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Bulk Delete Users by Email vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2022-4266

Bulk Delete Users by Email <= 1.2 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

2 records
Bulk Delete Users by Email banner
Latestv2.0.1

Bulk Delete Users by Email

Ben Konyn

Author

Ben Konyn

4.1(10)
82/100
Last Updated
2026-09-07 (5d ago)
Active Installs
100+
Downloads
6,410
Requires WP
4.0+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2014-09-04 (12y ago)

Bulk Delete Users by Email provides a simple, effective way for administrators to remove multiple WordPress user accounts using email addresses. Tool for cleaning up spam accounts, removing inactive and fake users, processing GDPR deletion requests, and maintaining a clean, organized user base. This plugin enables bulk deletion by allowing you to input a list of email addresses in plain text format. It automatically matches email addresses to user accounts and deletes them along with all associated data and metadata. Designed for high-volume operations, it employs batch processing to prevent server timeouts and ensure reliable execution. Works great in combination with Simple Customer CSV Exporter for WooCommerce to create lists of user’s emails for removal. Features Efficient bulk user deletion with email list input Easy copy-and-paste plain text format for email addresses Automatic matching and deletion of user accounts Complete removal of user data and custom metadata Batch processing to handle large deletion tasks Server timeout prevention during high-volume operations User-friendly interface with minimal configuration Use Cases Removing spam or bot accounts Cleaning up inactive users Processing GDPR deletion requests seamlessly Merging or consolidating user databases Maintaining a healthy, organized user base Support You can contact us at our website wpgenie.org if you have problems or questions.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C