WP-Safety

MASS Users Password Reset Security & Risk Analysis

wordpress.org/plugins/mass-users-password-reset

Reset passwords for multiple WordPress users at once. Filter users by role and send new passwords via email.

600 active installs v2.1.1 PHP 8.1+ WP 5.9+ Updated Mar 12, 2026
email-notificationlogsreset-passwordscheduleuser-role
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is MASS Users Password Reset Safe to Use in 2026?

Generally Safe

Score 100/100

MASS Users Password Reset has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 22d ago
Risk Assessment

The "mass-users-password-reset" plugin v2.1.1 exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, file operations, and external HTTP requests is a positive sign. Crucially, all detected SQL queries utilize prepared statements, significantly mitigating the risk of SQL injection. The plugin also demonstrates good practice with a high percentage of properly escaped output and the presence of nonce checks.

Key Concerns

  • Missing capability checks on AJAX handlers
Vulnerabilities
None known

MASS Users Password Reset Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

MASS Users Password Reset Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
16
155 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

91% escaped171 total outputs
Attack Surface

MASS Users Password Reset Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_send_reset_password_mail_actionincludes\class-mupr.php:156
noprivwp_ajax_send_reset_password_mail_actionincludes\class-mupr.php:157
authwp_ajax_mupr_plugin_dataincludes\class-mupr.php:158
noprivwp_ajax_mupr_plugin_dataincludes\class-mupr.php:159
authwp_ajax_mupr_display_filter_actionincludes\class-mupr.php:165
noprivwp_ajax_mupr_display_filter_actionincludes\class-mupr.php:166
WordPress Hooks 7
actionnetwork_admin_menuincludes\class-mupr.php:150
actionadmin_menuincludes\class-mupr.php:151
actionadmin_enqueue_scriptsincludes\class-mupr.php:153
actionadmin_initincludes\class-mupr.php:154
filterplugin_row_metaincludes\class-mupr.php:163
filtermupr_password_reset_email_templateincludes\class-mupr.php:168
actionplugins_loadedmass-users-password-reset.php:52
Maintenance & Trust

MASS Users Password Reset Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 12, 2026
PHP min version8.1
Downloads27K

Community Trust

Rating72/100
Number of ratings10
Active installs600
Alternatives

MASS Users Password Reset Alternatives

Delayed Email Notifications for Contact Form 7

Delayed Email Notifications for Contact Form 7

delayed-notifications-for-contact-form-7

A
92

Allows you to delay or schedule Contact Form 7 email notifications by the period of time of your choosing.

10 No CVEs
Email on Changing User Role

Email on Changing User Role

email-on-changing-user-role

A
85

This plugin is used to send email notification to those users whose role is changed by admin.

10 No CVEs
Pravin Smart Content Scheduler

Pravin Smart Content Scheduler

pravin-smart-content-scheduler

A
100

Schedule content visibility based on dates, times, and user roles with a simple shortcode.

0 No CVEs
WP User Admin

WP User Admin

wp-user-admin

A
85

WP User Admin will feature a set of tools dedicated to WordPress administrators aiming to make their daily routine easier and safer to work with.

0 No CVEs
WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin

WP Mail SMTP by WPForms – The Most Popular SMTP and Email Log Plugin

wp-mail-smtp

A
99

Make email delivery easy for WordPress. Connect with SMTP, Gmail, Outlook, SendGrid, Mailgun, SES, Zoho, + more. Rated #1 WordPress SMTP Email plugin.

4.0M 2 CVEs
Developer Profile

MASS Users Password Reset Developer Profile

KrishaWeb

13 plugins · 17K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
655 days
View full developer profile
Detection Fingerprints

How We Detect MASS Users Password Reset

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mass-users-password-reset/admin/css/style.css/wp-content/plugins/mass-users-password-reset/admin/js/common.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr-pro.js
Script Paths
/wp-content/plugins/mass-users-password-reset/admin/js/common.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr-pro.js
Version Parameters
mass-users-password-reset/admin/css/style.css?ver=mass-users-password-reset/admin/js/common.js?ver=mass-users-password-reset/admin/js/mupr.js?ver=mass-users-password-reset/admin/js/mupr-pro.js?ver=

HTML / DOM Fingerprints

CSS Classes
mass-users-password-reset-wrapmupr-pro-section
HTML Comments
<!-- MU-PR Pro Section -->
Data Attributes
data-mupr-pro-url
JS Globals
mupr_ajax_objectmupr_pro_ajax_object
REST Endpoints
/wp-json/mupr/v1/users
FAQ

Frequently Asked Questions about MASS Users Password Reset