EffortLess Disable All Comments Security & Risk Analysis

wordpress.org/plugins/effortless-disable-all-comments

Completely disables comments, trackbacks, and avatars site-wide or network-wide with a single toggle. Multisite compatible.

0 active installs v1.8.7 PHP 7.0+ WP 4.7+ Updated Nov 7, 2025
avatarscommentsdisable-commentsmultisitetrackbacks
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is EffortLess Disable All Comments Safe to Use in 2026?

Generally Safe

Score 100/100

EffortLess Disable All Comments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "effortless-disable-all-comments" plugin version 1.8.7 exhibits a very strong security posture based on the provided static analysis. The absence of any identified entry points, dangerous functions, file operations, or external HTTP requests significantly minimizes the potential attack surface. Furthermore, the plugin demonstrates excellent coding practices with 100% of its SQL queries using prepared statements and all output being properly escaped. The presence of a nonce check and the lack of critical or high-severity taint flows further solidify its secure design. The plugin also has a clean vulnerability history with zero recorded CVEs, which is a very positive indicator of ongoing security diligence. Overall, this plugin appears to be exceptionally well-secured, with no immediate or evident security risks identified.

Vulnerabilities
None known

EffortLess Disable All Comments Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

EffortLess Disable All Comments Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
3 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped3 total outputs
Attack Surface

EffortLess Disable All Comments Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 19
actionadmin_menuclass-eldac.php:29
actionnetwork_admin_menuclass-eldac.php:30
actionadmin_initclass-eldac.php:31
actionadmin_enqueue_scriptsclass-eldac.php:32
actioninitclass-eldac.php:35
filtercomments_openclass-eldac.php:36
filterpings_openclass-eldac.php:37
filtercomments_arrayclass-eldac.php:38
filtercomments_templateclass-eldac.php:39
filterget_avatarclass-eldac.php:40
filtershow_avatarsclass-eldac.php:41
filterwp_insert_commentclass-eldac.php:42
filterpre_get_commentsclass-eldac.php:43
filterrest_endpointsclass-eldac.php:44
actionadmin_menuclass-eldac.php:46
actionadmin_initclass-eldac.php:47
actionwp_before_admin_bar_renderclass-eldac.php:48
actioninitclass-eldac.php:50
actionnetwork_admin_edit_eldac_update_network_optionsclass-eldac.php:328
Maintenance & Trust

EffortLess Disable All Comments Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 7, 2025
PHP min version7.0
Downloads135

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

EffortLess Disable All Comments Developer Profile

domclic

10 plugins · 20 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect EffortLess Disable All Comments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/effortless-disable-all-comments/assets/css/eldac-checkbox.css/wp-content/plugins/effortless-disable-all-comments/assets/css/eldac-hide-comments.css
Version Parameters
effortless-disable-all-comments/assets/css/eldac-checkbox.css?ver=effortless-disable-all-comments/assets/css/eldac-hide-comments.css?ver=

HTML / DOM Fingerprints

CSS Classes
eldac_disable_comments
REST Endpoints
/wp/v2/comments/wp/v2/comments/(?P<id>[\d]+)
FAQ

Frequently Asked Questions about EffortLess Disable All Comments