Comment Controller Security & Risk Analysis
wordpress.org/plugins/comment-controllerAllow users to disable comments for their account, or disable comments site-wide per post type or role.
Is Comment Controller Safe to Use in 2026?
Generally Safe
Score 100/100Comment Controller has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.
The static analysis of 'comment-controller' v1.1.5 reveals a generally strong security posture, with no identified vulnerabilities in the attack surface, dangerous functions, file operations, or external HTTP requests. The plugin demonstrates good practices by utilizing prepared statements for all SQL queries and incorporating nonce and capability checks. However, a significant concern arises from the output escaping analysis, which indicates that 100% of its outputs are not properly escaped. This presents a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, as malicious scripts could be injected and executed within the WordPress environment through user-generated content or plugin output.
Key Concerns
- No proper output escaping
Comment Controller Security Vulnerabilities
Comment Controller Code Analysis
Output Escaping
Comment Controller Attack Surface
WordPress Hooks 12
Maintenance & Trust
Comment Controller Maintenance & Trust
Maintenance Signals
Community Trust
Comment Controller Alternatives
![Disable Comments – Remove Comments & Stop Spam [Multi-Site Support]](https://ps.w.org/disable-comments/assets/icon-128x128.png){kind=icon}
Disable Comments – Remove Comments & Stop Spam [Multi-Site Support]
disable-comments
Allows administrators to globally disable comments on their site. Comments can be disabled according to post type. Multisite friendly.
Disable Comments
disable-comments-rb
Disable Comments - easy tool to disable comments for your blog posts, and pages. Admin can disable comments in just a few clicks.
WP Comment Cleaner – Delete All Comments, Disable Comments, Bulk Delete & Remove Comments
delete-all-comments-of-website
Delete comments, disable comments, and remove comments in one click. Bulk delete spam and all comments to optimize your WordPress database easily.
Disable Comments
wpsimpletools-disable-comments
Completely disables comments functionality from backend and frontend. Just install it, nothing to configure!
Comment Link Remove and Other Comment Tools
comment-link-remove
Remove Comment Author Link & Links from Comments, Unlink, Disable Comments, Delete All Pending Comments. AI Auto Comment Reply, Voice, Attachments
Comment Controller Developer Profile
20 plugins · 140K total installs
How We Detect Comment Controller
Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.
Asset Fingerprints
/wp-content/plugins/comment-controller/vendor/widgitlabs/simple-settings/class-simple-settings.php/wp-content/plugins/comment-controller/includes/admin/settings/register-settings.php/wp-content/plugins/comment-controller/includes/misc-functions.php/wp-content/plugins/comment-controller/includes/profile.phpHTML / DOM Fingerprints
comment_controller_disallowcomment_controller_disable