WP Bulk Delete
Healthy: maintained, last release 13 Aug 2026, 12 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | No data |
| Reputation | 75 |
Quick answers
- Is WP Bulk Delete still maintained?
- Yes. Last release 13 Aug 2026, 12 releases in the last 24 months. 13 Aug 2026 · wordpress.org
- Who owns WP Bulk Delete, and has it changed hands?
- No change recorded. Main committer xylus since Oct 2016. 4 Nov 2026 · SVN log
- Was WP Bulk Delete removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is WP Bulk Delete safe?
- 3 known vulnerabilities, all fixed (latest in 1.4.3). Not on the exploited list. 15 Jul 2026 · Wordfence Intelligence
- Is the latest WP Bulk Delete update safe to install?
- No ownership change before 1.4.4. No one-star spike after it. 13 Aug 2026 · Release history
Active signals
Facts we detected, with links to the source.
- InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| xylus | 24 Oct 2016 to 13 Aug 2026, 93 commits |
|---|
1 committer recorded. No ownership change since 2016.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 12
- Tested up to
- 7.1 current
- Requires PHP
- 5.3 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 1 |
| Q3 2024 | 4 |
| Q4 2024 | 1 |
| Q1 2025 | 2 |
| Q2 2025 | 1 |
| Q3 2025 | 1 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 1 |
| Q3 2026 | 4 |
| Q4 2026 | 0 |
Last release 13 Aug 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 5.0 (2 reviews). Lifetime: 4.6.
| Q1 2025 | 3.0 |
|---|---|
| Q3 2025 | 4.3 |
| Q4 2025 | 4.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
| Q3 2026 | 5.0 |
Average rating rose from 3.0 to 5.0 between Q1 2025 and Q3 2026.
| 5 star | 115 |
|---|---|
| 4 star | 3 |
| 3 star | 4 |
| 2 star | 1 |
| 1 star | 8 |
- Bad company, bad plugin · 1 star · 22 Dec 2025
- Most featured are disabled in the free version · 1 star · 20 Aug 2025
- waste of time · 1 star · 20 Mar 2025
Security record
2 vulnerabilities in 24 months (3 on record), all patched (latest fixed in 1.4.3).
Show 3 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 15 Jul 2026 | WP Bulk Delete <= 1.4.2 - Authenticated (Administrator+) SQL Injection via 'delete_user_roles' Parameter | 4.9 | <= 1.4.2 | 1.4.3 | Patched before disclosure |
| 27 Aug 2025 | WP Bulk Delete <= 1.3.6 - Missing Authorization | 4.3 | <= 1.3.6 | 1.3.7 | Patched before disclosure |
| 30 Sep 2024 | WP Bulk Delete <= 1.3.1 - Reflected Cross-Site Scripting | 6.1 | <= 1.3.1 | 1.3.2 | Patched before disclosure |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 1 support threads resolved in the last 2 months.
Momentum
90,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 1,753 |
|---|---|
| 11 May 2026 | 3,781 |
| 18 May 2026 | 33,714 |
| 25 May 2026 | 7,998 |
| 1 Jun 2026 | 5,553 |
| 8 Jun 2026 | 4,780 |
| 15 Jun 2026 | 4,240 |
| 22 Jun 2026 | 4,360 |
| 29 Jun 2026 | 26,172 |
| 6 Jul 2026 | 35,140 |
| 13 Jul 2026 | 36,470 |
| 20 Jul 2026 | 9,365 |
| 27 Jul 2026 | 5,997 |
| 3 Aug 2026 | 4,989 |
| 10 Aug 2026 | 29,611 |
| 17 Aug 2026 | 10,879 |
| 24 Aug 2026 | 6,629 |
| 31 Aug 2026 | 5,463 |
| 7 Sep 2026 | 4,476 |
| 14 Sep 2026 | 4,030 |
| 21 Sep 2026 | 3,879 |
| 28 Sep 2026 | 3,605 |
| 5 Oct 2026 | 3,502 |
| 12 Oct 2026 | 2,964 |
| 19 Oct 2026 | 4,796 |
| 26 Oct 2026 | 3,383 |
| 2 Nov 2026 | 509 |
Weekly downloads over the last 4 weeks are 71% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 1.4.4 |
|---|---|
| Author | Xylus Themes |
| Added | 24 Oct 2016 |
| Last updated | 13 Aug 2026 |
| Active installs | 90,000+ |
| Requires WordPress | 4.9 |
| Tested up to | 7.1.4 |
| Requires PHP | 5.3 |
| Category | Site Administration & Utilities > Site Migration & Cloning |
| Tags | bulk, delete, bulk clean, bulk delete, clean database |
Other plugins by this author: Import Eventbrite Events, Import Social Events, WP Event Aggregator: Import Eventbrite events, Meetup events, social events and any iCal Events into Event Calendar, WP Smart Import : Import any XML File to WordPress, XT Event Widget for Social Events, Event SEO: Event Schema / Structured Data: Google Rich Snippet Schema for Event, Import Meetup Events - Meetup Sync & Event Aggregator for WordPress, Easy Events Calendar : All-in-One Events Calendar with Social Event, Eventbrite, Meetup, Google & iCal Import Support, XT Corporate ToolKit, Xylus Toolkit, XT Feed for LinkedIn, AdRotater Email Ad Reports
Questions
Is WP Bulk Delete still maintained?
Yes. Last release 13 Aug 2026, 12 releases in the last 24 months.
Who owns WP Bulk Delete, and has it changed hands?
No change recorded. Main committer xylus since Oct 2016.
Was WP Bulk Delete removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is WP Bulk Delete safe?
3 known vulnerabilities, all fixed (latest in 1.4.3). Not on the exploited list.
Is the latest WP Bulk Delete update safe to install?
No ownership change before 1.4.4. No one-star spike after it.