Does Private User Comments have any unpatched vulnerabilities?

No. All known vulnerabilities in Private User Comments have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Private User Comments compatible with WordPress 4.2.39?

According to WordPress.org data, Private User Comments 1.0 has been tested up to WordPress 4.2.39. Check the plugin's changelog for the latest compatibility information.

How often is Private User Comments updated?

Private User Comments was last updated on Jul 24, 2015. Frequent updates are generally a positive security signal.

What is Private User Comments's security score?

Private User Comments has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Private User Comments Security & Risk Analysis

wordpress.org/plugins/private-user-comments

Allow WordPress users to make their comments private (visible by themselves and admins).

10 active installs v1.0 PHP + WP 3.5+ Updated Jul 24, 2015

commentsprivateprivate-commentsprivate-user-commentsuser-comments

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Private User Comments Safe to Use in 2026?

Generally Safe

Score 85/100

Private User Comments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10yr ago

Risk Assessment

The "private-user-comments" v1.0 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, raw SQL queries, file operations, or external HTTP requests is commendable. Furthermore, the plugin utilizes prepared statements for all SQL queries, mitigating the risk of SQL injection. The limited attack surface with zero unprotected entry points is also a positive indicator.

Key Concerns

Only 50% of output properly escaped
No nonce checks on entry points

Vulnerabilities

None known

Private User Comments Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Private User Comments Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

1 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared2 total queries

Output Escaping

50% escaped2 total outputs

Attack Surface

Private User Comments Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 4

actionshow_user_profileprivate-user-comments.php:38

actionedit_user_profileprivate-user-comments.php:39

actionpersonal_options_updateprivate-user-comments.php:40

filtercomments_arrayprivate-user-comments.php:42

Maintenance & Trust

Private User Comments Maintenance & Trust

Maintenance Signals

WordPress version tested4.2.39

Last updatedJul 24, 2015

PHP min version

Downloads2K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

Private User Comments Alternatives

Private Comment

private-comment

Allow commenters to choose restrict their comments exhibition only to site owners

60 1 CVE

Private Notes

private-notes

Lets an author keep private notes with a post.

10 No CVEs

Whisper Comment Reloaded

whisper-comment-reloaded

Whisper Comment Reloaded is a WordPress plugin for commenters to control comment visibility for other viewers.

10 No CVEs

Akismet Anti-spam: Spam Protection

akismet

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam solution for WordPress and WooCommerce.

6.0M 2 CVEs

Disable Comments – Remove Comments & Stop Spam [Multi-Site Support]

disable-comments

Allows administrators to globally disable comments on their site. Comments can be disabled according to post type. Multisite friendly.

1.0M 1 CVE

Developer Profile

Private User Comments Developer Profile

Scott Grant

6 plugins · 70 total installs

trust score

Avg Security Score

85/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Private User Comments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

CSS Classes

form-table

Data Attributes

name="private_comments"id="private_comments"

FAQ