User Spam Remover
Avoid: vulnerability published 4 Dec 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 4 Dec 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.18 Dec 2025Evidence
- CriticalMNT-1No release in 32 months (last release 3 Mar 2024). Plan a replacement if the plugin is important to your site.3 Mar 2025Evidence
- WarningMNT-2Tested up to WordPress 6.4.14, 7 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| joelhardi | 27 Aug 2010 to 3 Mar 2024, 46 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.4 vs 7.1
- Requires PHP
- not stated supported 8.2+
Last release 3 Mar 2024. Tested up to 6.4, 7 major versions behind WordPress 7.1. Release history builds as we see new versions.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 4 Dec 2025 | User Spam Remover <= 1.1 - Unauthenticated Information Exposure | 5.3 | <= 1.1 | No fix | n/a |
| 5 Apr 2024 | User Spam Remover <= 1.0 - Unauthenticated Sensitive Information Exposure | 5.3 | <= 1.0 | 1.1 | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 4.1 from 18 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 10 |
|---|---|
| 4 star | 5 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 31 |
|---|---|
| 11 May 2026 | 66 |
| 18 May 2026 | 79 |
| 25 May 2026 | 63 |
| 1 Jun 2026 | 49 |
| 8 Jun 2026 | 69 |
| 15 Jun 2026 | 47 |
| 22 Jun 2026 | 41 |
| 29 Jun 2026 | 45 |
| 6 Jul 2026 | 43 |
| 13 Jul 2026 | 43 |
| 20 Jul 2026 | 67 |
| 27 Jul 2026 | 64 |
| 3 Aug 2026 | 67 |
| 10 Aug 2026 | 63 |
| 17 Aug 2026 | 76 |
| 24 Aug 2026 | 63 |
| 31 Aug 2026 | 59 |
| 7 Sep 2026 | 56 |
| 14 Sep 2026 | 80 |
| 21 Sep 2026 | 76 |
| 28 Sep 2026 | 90 |
| 5 Oct 2026 | 71 |
| 12 Oct 2026 | 74 |
| 19 Oct 2026 | 122 |
| 26 Oct 2026 | 113 |
| 2 Nov 2026 | 55 |
Weekly downloads over the last 4 weeks are 39% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.1 |
|---|---|
| Author | Joel |
| Added | 27 Aug 2010 |
| Last updated | 3 Mar 2024 |
| Active installs | 1,000+ |
| Requires WordPress | 3.9 |
| Tested up to | 6.4.14 |
| Requires PHP | not stated |
| Category | Site Administration & Utilities > Bulk Operations & Batch Editing |
| Tags | spam, user, admin, users, registration |
Other plugins by this author: Logout Clear Cookies
Questions
Is User Spam Remover still maintained?
User Spam Remover was last updated on 3 Mar 2024. Its Canary status is Avoid.
Is User Spam Remover safe?
User Spam Remover has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns User Spam Remover?
The wordpress.org author is Joel. Recent committers: joelhardi, plugin-master. We have recorded no ownership change.
What can I use instead of User Spam Remover?
Plugins in the same category with a higher Canary Score: hCaptcha for WP, ActiveLayer Anti-Spam: Spam Protection for Forms & Comments, SilentShield - Captcha & Anti-Spam for WordPress (CF7, WPForms, Elementor, WooCommerce), Akismet Anti-spam: Spam Protection, Captcha by BestWebSoft - Advanced Spam Protection, Math & OCR-Friendly Captcha for Site Forms.