Disable Comments & Delete All Comments

Disable Comments & Delete All Comments has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 3.1, and the most serious one scores 3.1 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Disable Comments & Delete All Comments has a vendor fix available, so running the current release closes it.

All of these findings were reported by dodoh4t. Disable Comments & Delete All Comments is installed on roughly 9,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSLow
3.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Disable Comments & Delete All Comments vulnerabilities before they are exploited.

Highest severity on recordCVSS 3.1CVE-2026-42749

Disable Comments & Delete All Comments <= 1.3.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Disable Comments & Delete All Comments banner
Latestv1.3.3

Disable Comments & Delete All Comments

Themeisle

Author

Themeisle

5.0(41)
100/100
Last Updated
2026-07-29 (17d ago)
Active Installs
9,000+
Downloads
100,433
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2017-10-17 (9y ago)

Disable comments across your entire site or only for selected post types. This removes comment forms from the front end, hides comment-related menus and widgets in the dashboard, and disables pingbacks and trackbacks. Delete comments in bulk with a simple cleanup tool. You can remove all comments at once or filter them by post type or comment status. Manage links in comments by disabling the website field from the comment form for cleaner, safer comment submissions. Replace external links in comments with safe span tags so they no longer act as real, followable links. Key Features Disable comments – Disable comments globally or by post type – Hide all comment-related admin menus, dashboard widgets and settings – Disable pingbacks and trackbacks – Disable comments in RSS/Atom feeds Delete comments – Delete all comments in WordPress at once – Delete comments by post type – Delete comments by comment status (spam, unapproved, trash) Manage links in comments – Replace all external comment links with span tags via JavaScript, removing their SEO impact while keeping the text visible to users. – Remove the website/URL field from the comment form All features can be enabled or disabled safely, and comment disabling does not remove existing comments unless you choose to delete them. Why use this plugin? WordPress still loads comment features even when you don’t use them, which can clutter your dashboard, expose unused functionality, and create unnecessary moderation work. This plugin gives you complete control over WordPress comments, whether you want to disable comments globally, bulk delete comments, or just manage them more efficiently. Advanced Configuration To prevent the plugin from replacing your theme’s comment template, define the following constant: define('DISABLE_COMMENTS_REMOVE_COMMENTS_TEMPLATE', false); You can add this definition either to your wp-config.php file or to your theme’s functions.php file. Support We’re here to help. Feel free to open a new thread on the Support Forum. Useful Resources If you like this plugin, you’re sure to love our other plugins as well. Our blog is a great place to learn more about WordPress. Get the most out of your website with our helpful WordPress YouTube Tutorials.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C