Does Ghost Comment Manager have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Ghost Comment Manager compatible with WordPress 6.8.6?

According to WordPress.org data, Ghost Comment Manager 0.1.5 has been tested up to WordPress 6.8.6. Check the plugin's changelog for the latest compatibility information.

Is Ghost Comment Manager compatible with PHP 7.4+?

Ghost Comment Manager requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Ghost Comment Manager updated?

Ghost Comment Manager was last updated on Oct 16, 2025. Frequent updates are generally a positive security signal.

What is Ghost Comment Manager's security score?

Ghost Comment Manager has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Ghost Comment Manager Security & Risk Analysis

wordpress.org/plugins/ghost-comment-manager

Trust once → comments auto-publish with a moderator-only “ghost” flag. Includes a light spam shield, filters, bulk actions, and a clear dashboard.

30 active installs v0.1.5 PHP 7.4+ WP 6.0+ Updated Oct 16, 2025

commentsghostmoderationspamtrust

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Ghost Comment Manager Safe to Use in 2026?

Generally Safe

Score 100/100

Ghost Comment Manager has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago

Risk Assessment

The ghost-comment-manager plugin v0.1.5 exhibits a generally strong security posture based on the provided static analysis. A significant positive is the complete absence of SQL injection vulnerabilities, as 100% of SQL queries utilize prepared statements. Furthermore, the plugin demonstrates good practices regarding output escaping, with 84% of outputs properly escaped. The presence of nonce and capability checks on all identified entry points indicates a thoughtful approach to authorization and security. The vulnerability history is also a strong positive, showing zero known CVEs, which suggests a well-maintained and secure codebase historically.

Key Concerns

Some outputs are not properly escaped
Two file operations present without further context

Vulnerabilities

None known

Ghost Comment Manager Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Ghost Comment Manager Release Timeline

v0.1.5Current

v0.1.4

Code Analysis

Analyzed Mar 16, 2026

Ghost Comment Manager Code Analysis

Dangerous Functions

Raw SQL Queries

8 prepared

Unescaped Output

63 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared8 total queries

Output Escaping

84% escaped75 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

2 flows

maybe_show_notice (inc\Admin\Notice.php:11)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

Ghost Comment Manager Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 37

actionplugins_loadedghost-comment-manager.php:85

filtermanage_edit-comments_columnsinc\Admin\ListTableColumns.php:12

actionmanage_comments_custom_columninc\Admin\ListTableColumns.php:13

actionadmin_noticesinc\Admin\Notice.php:8

actionadmin_enqueue_scriptsinc\Base\Enqueue.php:10

actionwp_enqueue_scriptsinc\Base\Enqueue.php:11

actioncomment_unapproved_to_approvedinc\Comments\AutoTrustManager.php:9

actioncomment_approved_to_approvedinc\Comments\AutoTrustManager.php:10

actionwp_set_comment_statusinc\Comments\AutoTrustManager.php:11

filterbulk_actions-edit-commentsinc\Comments\BulkActions.php:10

filterhandle_bulk_actions-edit-commentsinc\Comments\BulkActions.php:11

actionrestrict_manage_commentsinc\Comments\FiltersUi.php:10

filtercomment_status_linksinc\Comments\FiltersUi.php:11

actionpre_get_commentsinc\Comments\FiltersUi.php:12

filtercomments_clausesinc\Comments\FiltersUi.php:93

filterpre_comment_approvedinc\Comments\GhostPublisher.php:15

actionwp_insert_commentinc\Comments\GhostPublisher.php:16

actionadmin_post_gcmgr_confirm_ghostinc\Comments\GhostPublisher.php:17

filtercomment_row_actionsinc\Comments\GhostPublisher.php:18

filtercomment_row_actionsinc\Comments\RowActions.php:10

actionadmin_post_gcmgr_trustinc\Comments\RowActions.php:11

actionadmin_post_gcmgr_untrustinc\Comments\RowActions.php:12

filtercomment_textinc\Frontend\RenderHooks.php:14

actioncomment_form_beforeinc\Frontend\RenderHooks.php:17

filtercomments_arrayinc\Frontend\RenderHooks.php:20

actionadmin_menuinc\Pages\Admin.php:12

actionadmin_initinc\Settings\SettingsPage.php:7

actionadmin_menuinc\Settings\SettingsPage.php:8

actioncomment_form_after_fieldsinc\Shield\ShieldLite.php:15

actioncomment_form_logged_in_afterinc\Shield\ShieldLite.php:16

filterpreprocess_commentinc\Shield\ShieldLite.php:19

actionpre_comment_on_postinc\Shield\ShieldLite.php:22

filterwp_allow_commentinc\Shield\ShieldLite.php:25

actionshow_user_profileinc\Users\ProfileField.php:10

actionedit_user_profileinc\Users\ProfileField.php:11

actionpersonal_options_updateinc\Users\ProfileField.php:12

actionedit_user_profile_updateinc\Users\ProfileField.php:13

Maintenance & Trust

Ghost Comment Manager Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.6

Last updatedOct 16, 2025

PHP min version7.4

Downloads363

Community Trust

Rating0/100

Number of ratings0

Active installs30

Alternatives

Ghost Comment Manager Alternatives

Disable Comments & Delete All Comments

comments-plus

Disable comments globally on all posts or certain post types. Delete all comments at once, by post type or comment status. Manage links in comments.

9K 1 CVE

Comments – GraphComment | AI-Moderated Comment System

graphcomment-comment-system

100

Don't disable comments — fix them. AI-assisted moderation, zero spam, ad-free — syncs back to your WordPress database. The Disqus alternative.

400 No CVEs

Auto Approve Comments

auto-approve-comments

Auto approve comments by Commenter (email, name, url), User and Role (Akismet and wpDiscuz compatible)

200 No CVEs

AI Comment Guard

ai-comment-guard

100

Protect your WordPress site from spam with AI-powered comment moderation. Supports OpenAI, Anthropic, and OpenRouter providers.

30 No CVEs

AOS Comment Spam Cleanup

aos-comment-spam-cleanup

100

Clean up comment spam by URL pattern, schedule auto-cleanups, block bots with a honeypot, and auto-score comment quality — all in one panel.

10 No CVEs

Developer Profile

Ghost Comment Manager Developer Profile

devfluxr

1 plugin · 30 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Ghost Comment Manager

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/ghost-comment-manager/assets/css/admin.css/wp-content/plugins/ghost-comment-manager/assets/js/admin.js/wp-content/plugins/ghost-comment-manager/assets/css/frontend.css

Script Paths

/wp-content/plugins/ghost-comment-manager/assets/js/admin.js

Version Parameters

ghost-comment-manager/assets/css/admin.css?ver=ghost-comment-manager/assets/js/admin.js?ver=ghost-comment-manager/assets/css/frontend.css?ver=

HTML / DOM Fingerprints

CSS Classes

gcm-badgegcm-badge-trustedgcm-badge-ghost

JS Globals

gcmgrAdmin

FAQ