WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments
WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 5.0, and the most serious one scores 6.3 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (100%).
Every one of the 3 issues recorded for WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks
Read the full analysisVulnerability Records

WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments
Author
royalnavneet
WP Comment Cleaner is a smart and lightweight plugin designed to help you take full control over WordPress comments. Whether you want to delete all comments, disable them site-wide, bulk delete spam, or export comments — this tool does it all in just a few clicks. Ideal for store owners, bloggers, developers, and agencies, the plugin offers both free and premium features for complete comment management. Clean up unnecessary clutter, stop spam, and improve your site performance with confidence. 🎯 Key Features Delete all types of comments: Approved, Pending, Spam, Trash Disable comments globally or by post type Bulk delete spam comments in one click Export comments to CSV before deleting (Premium) Smart date filtering for safe deletion Role-based exclusions – allow specific user roles to comment even when globally disabled (Premium) Scheduled automatic spam cleanup (Premium) Clean, user-friendly interface with confirmation alerts Unlimited deletion (Premium) Priority support 🚀 Free Features One-click comment deletion Disable comments site-wide Filter comments by status Automatic spam detection Smart date filtering Export options Friendly admin interface No personal data collected Safe and secure performance 💎 Premium Features Export comments to CSV Role-based exclusions for disabling Scheduled spam cleanup (daily, weekly, monthly) Priority email support Lifetime access with one-time payment Privacy Policy This plugin does not store or share any user data. All operations are performed locally on your WordPress site. Development Services Need custom WordPress development? As a premium user, you can access our expert development services at just $5/hour. We offer: Custom plugin development Theme customization Site performance optimization WooCommerce solutions 📧 Reach us at: info@lytechx.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C