WP-Safety

MASS Users Password Reset Security & Risk Analysis

wordpress.org/plugins/mass-users-password-reset

Tired of resetting passwords one by one? Bulk reset user passwords by role and email secure one-time access links instantly.

600 active installs v2.2.0 PHP 8.1+ WP 6.3+ Updated Jun 18, 2026
logsreset-passwordschedulesecureuser-role
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is MASS Users Password Reset Safe to Use in 2026?

Generally Safe

Score 100/100

MASS Users Password Reset has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The "mass-users-password-reset" plugin v2.1.1 exhibits a generally strong security posture based on the provided static analysis. The absence of dangerous functions, file operations, and external HTTP requests is a positive sign. Crucially, all detected SQL queries utilize prepared statements, significantly mitigating the risk of SQL injection. The plugin also demonstrates good practice with a high percentage of properly escaped output and the presence of nonce checks.

Key Concerns

  • Missing capability checks on AJAX handlers
Vulnerabilities
None known

MASS Users Password Reset Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

MASS Users Password Reset Release Timeline

v2.2
v2.2.0Current
v2.1.1
v2.1
v2.0
v1.9
v1.8
v1.7
v1.6
v1.5
v1.4
v1.3
v1.2
v1.1
v1.0
Code Analysis
Analyzed Mar 16, 2026

MASS Users Password Reset Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
16
155 escaped
Nonce Checks
3
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

91% escaped171 total outputs
Attack Surface

MASS Users Password Reset Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 6

authwp_ajax_send_reset_password_mail_actionincludes\class-mupr.php:156
noprivwp_ajax_send_reset_password_mail_actionincludes\class-mupr.php:157
authwp_ajax_mupr_plugin_dataincludes\class-mupr.php:158
noprivwp_ajax_mupr_plugin_dataincludes\class-mupr.php:159
authwp_ajax_mupr_display_filter_actionincludes\class-mupr.php:165
noprivwp_ajax_mupr_display_filter_actionincludes\class-mupr.php:166
WordPress Hooks 7
actionnetwork_admin_menuincludes\class-mupr.php:150
actionadmin_menuincludes\class-mupr.php:151
actionadmin_enqueue_scriptsincludes\class-mupr.php:153
actionadmin_initincludes\class-mupr.php:154
filterplugin_row_metaincludes\class-mupr.php:163
filtermupr_password_reset_email_templateincludes\class-mupr.php:168
actionplugins_loadedmass-users-password-reset.php:52
Maintenance & Trust

MASS Users Password Reset Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJun 18, 2026
PHP min version8.1
Downloads29K

Community Trust

Rating80/100
Number of ratings14
Active installs600
Alternatives

MASS Users Password Reset Alternatives

Password Policy Manager | Password Manager

Password Policy Manager | Password Manager

password-policy-manager

A
97

Enforce strong passwords with expiry, reset, score checks, inactive user lock, and user password management using Password Policy Manager.

6K 2 CVEs
Password Reset Enforcement

Password Reset Enforcement

password-reset-enforcement

A
100

Easily enforce password reset for WordPress users. Choose to force password changes site-wide, by user and/or by role, to boost your site's security.

200 No CVEs
Blog Password Protection – BPP

Blog Password Protection – BPP

blog-password-protection-bpp

A
92

A simple and secure plugin to protect your entire blog or specific categories with a password popup.

10 No CVEs
Pravin Smart Content Scheduler

Pravin Smart Content Scheduler

pravin-smart-content-scheduler

A
100

Schedule content visibility based on dates, times, and user roles with a simple shortcode.

0 No CVEs
WP User Admin

WP User Admin

wp-user-admin

A
85

WP User Admin will feature a set of tools dedicated to WordPress administrators aiming to make their daily routine easier and safer to work with.

0 No CVEs
Developer Profile

MASS Users Password Reset Developer Profile

KrishaWeb

14 plugins · 17K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
655 days
View full developer profile
Detection Fingerprints

How We Detect MASS Users Password Reset

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/mass-users-password-reset/admin/css/style.css/wp-content/plugins/mass-users-password-reset/admin/js/common.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr-pro.js
Script Paths
/wp-content/plugins/mass-users-password-reset/admin/js/common.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr.js/wp-content/plugins/mass-users-password-reset/admin/js/mupr-pro.js
Version Parameters
mass-users-password-reset/admin/css/style.css?ver=mass-users-password-reset/admin/js/common.js?ver=mass-users-password-reset/admin/js/mupr.js?ver=mass-users-password-reset/admin/js/mupr-pro.js?ver=

HTML / DOM Fingerprints

CSS Classes
mass-users-password-reset-wrapmupr-pro-section
HTML Comments
<!-- MU-PR Pro Section -->
Data Attributes
data-mupr-pro-url
JS Globals
mupr_ajax_objectmupr_pro_ajax_object
REST Endpoints
/wp-json/mupr/v1/users
FAQ

Frequently Asked Questions about MASS Users Password Reset