Does Customize Comments have any unpatched vulnerabilities?

No. All known vulnerabilities in Customize Comments have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Customize Comments compatible with WordPress 4.9.29?

According to WordPress.org data, Customize Comments 0.1.0 has been tested up to WordPress 4.9.29. Check the plugin's changelog for the latest compatibility information.

Is Customize Comments compatible with PHP 5.4+?

Customize Comments requires PHP 5.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Customize Comments updated?

Customize Comments was last updated on Nov 27, 2017. Frequent updates are generally a positive security signal.

What is Customize Comments's security score?

Customize Comments has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Customize Comments Security & Risk Analysis

wordpress.org/plugins/customize-comments

Edit comments with live preview and bundle edits in Customizer changesets.

0 active installs v0.1.0 PHP 5.4+ WP 4.9+ Updated Nov 27, 2017

commentscustomizecustomizer

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Customize Comments Safe to Use in 2026?

Generally Safe

Score 85/100

Customize Comments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago

Risk Assessment

The "customize-comments" plugin v0.1.0 exhibits a strong security posture based on the provided static analysis. The absence of any detected dangerous functions, raw SQL queries, unsanitized taint flows, or unescaped output is commendable. Furthermore, the plugin demonstrates good security practices by implementing capability checks for its entry points, suggesting an intention to protect sensitive operations. The lack of any recorded vulnerabilities or CVEs in its history further reinforces this positive assessment.

Key Concerns

No Nonce Checks Found
File Operation Without Context

Vulnerabilities

None known

Customize Comments Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Customize Comments Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

2 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped2 total outputs

Attack Surface

Customize Comments Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 10

actionplugins_loadedcustomize-comments.php:35

filterget_commentphp\class-customize-comment-content-setting.php:64

actioncustomize_registerphp\class-plugin.php:34

filtercustomize_dynamic_setting_argsphp\class-plugin.php:35

filtercustomize_dynamic_setting_classphp\class-plugin.php:36

filtercustomize_dynamic_partial_argsphp\class-plugin.php:37

actioncustomize_controls_enqueue_scriptsphp\class-plugin.php:39

actioncustomize_controls_print_footer_scriptsphp\class-plugin.php:40

actioncustomize_preview_initphp\class-plugin.php:41

actionwp_enqueue_scriptsphp\class-plugin.php:42

Maintenance & Trust

Customize Comments Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29

Last updatedNov 27, 2017

PHP min version5.4

Downloads2K

Community Trust

Rating0/100

Number of ratings0

Active installs0

Alternatives

Customize Comments Alternatives

Kirki Customizer Framework

kirki

100

The Ultimate Customizer Framework for WordPress Theme Developers

500K No CVEs

LoginPress | wp-login Custom Login Page Customizer

loginpress

LoginPress is a Custom Login Page Customizer plugin allows you to easily customize the layout of login, admin login, client login, register pages.

200K 6 CVEs

Customizer Export/Import

customizer-export-import

Easily export or import your WordPress customizer settings!

100K 3 CVEs

Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More

themeisle-companion

Add modules like share buttons, header & footer scripts, disable comments, reading progress bar, custom fonts, custom login page & more in one plugin.

100K 20 CVEs

Advanced Import: One-Click Demo Import for WordPress

advanced-import

Advanced Import simplifies importing demo data for WordPress sites, enabling users to import posts, pages, media, widgets, customizer settings, and Gu …

90K 1 CVE

Developer Profile

Customize Comments Developer Profile

Weston Ruter

22 plugins · 437K total installs

trust score

Avg Security Score

91/100

Avg Patch Time

4499 days

View full developer profile

Detection Fingerprints

How We Detect Customize Comments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/customize-comments/js/controls.js/wp-content/plugins/customize-comments/js/controls.min.js/wp-content/plugins/customize-comments/js/preview.js/wp-content/plugins/customize-comments/js/preview.min.js

Script Paths

Version Parameters

customize-comments-controlscustomize-comments-preview

HTML / DOM Fingerprints

JS Globals

customizeCommentsControlscustomizeCommentsPreview

FAQ