Delta Dev Comment Lockdown
Lock down the WordPress comment attack surface with layered protections while preserving existing comment data.
Use with caution
Delta Dev Comment Lockdown works, but test it on a staging site before relying on it in 2026. Was last updated 2 months ago, and scores 60/100 on our health check.
- Tested with the latest WordPress (7.1)
- Small user base (<10 active installs)
- Very few reviews so far
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where Delta Dev Comment Lockdown stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| comment security | >100 |
| disable comments | >100 |
| hardening | >100 |
| pingbacks | >100 |
| rest-api | >100 |
About Delta Dev Comment Lockdown
From the official readme · v1.0.0Description
Delta Dev Comment Lockdown is a security-focused comment attack-surface hardening plugin developed by Delta Dev for WordPress sites that do not need the native comment system.
Instead of only hiding a comment form, the plugin applies multiple independent WordPress-native protection layers. It closes public commenting, blocks direct and core comment creation paths, removes core REST comment routes, disables comment-related XML-RPC/pingback surfaces, blocks comment feeds, and can remove related admin surfaces. It does not modify WordPress core files and it does not delete existing comments.
Default protections include:
- Forces comments closed on the public site.
- Hides existing comments without deleting them.
- Blocks normal WordPress comment submissions with HTTP 403.
- Stops new comments in the core comment approval pipeline.
- Removes and blocks the core REST API
/wp/v2/commentsendpoints. - Disables pingbacks and trackbacks.
- Removes WordPress XML-RPC comment and pingback methods.
- Removes the
X-Pingbackresponse header. - Disables comment-feed discovery links and direct comment-feed requests.
- Removes Comments and Trackbacks support from registered post types.
- Hides the Comments admin menu, toolbar item, and Recent Comments dashboard widget.
All protections can be configured from Settings > Comment Lockdown. Strict protection is enabled by default.
Security design
- Uses WordPress core hooks and APIs instead of modifying core files.
- Uses a defense-in-depth approach so disabling a theme comment form is not the only control.
- Settings are restricted to administrators with
manage_options. - Settings are saved through the WordPress Settings API and sanitized to strict boolean values.
- Admin output is escaped before rendering.
- No arbitrary code execution, file manager, remote executable downloads, telemetry, licensing gate, or external service is included.
Privacy
Delta Dev Comment Lockdown does not collect, store, transmit, or sell personal data. It does not use analytics, telemetry, cookies, external APIs, or third-party services.
Compatibility note
Some plugins use the native WordPress comment system for other features. WooCommerce product reviews are a common example. Enabling all protections can disable those comment-based review flows.
Installation
- In WordPress, go to Plugins > Add Plugin > Upload Plugin.
- Upload the Delta Dev Comment Lockdown ZIP file and activate the plugin.
- Open Settings > Comment Lockdown.
- Keep all options enabled for a strict site-wide comment shutdown, or adjust individual protections as needed.
Frequently asked questions
Does the plugin delete existing comments?
No. Existing comments remain in the WordPress database. They can be hidden publicly while the plugin is active.
What happens after deactivation?
All runtime protections stop. Existing WordPress comment data is left unchanged.
Does this block REST API comments?
Yes. The plugin removes the core comment endpoints and also blocks matching requests as a defense-in-depth measure.
Does it disable XML-RPC completely?
No. It removes comment and pingback XML-RPC methods while leaving unrelated XML-RPC functionality available for plugins or services that may still need it.
Does it affect WooCommerce product reviews?
It can. WooCommerce product reviews use the WordPress comment system. If you need product reviews, do not enable protections that conflict with your review workflow.
Does the plugin send data to Delta Dev?
No. The plugin has no telemetry, tracking, external API calls, or phone-home functionality.
Changelog
1.0.0
- Initial public release.
- Added frontend comment shutdown.
- Added direct submission and core comment insertion protection.
- Added REST API comment blocking.
- Added pingback, trackback, XML-RPC, and comment-feed protection.
- Added configurable admin UI controls.
- Added privacy-friendly, no-telemetry defaults.
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
FAQ
Delta Dev Comment Lockdown: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 17, 2026
Is Delta Dev Comment Lockdown free?
Yes. Delta Dev Comment Lockdown is free to download and use from the official WordPress.org plugin directory.
Is Delta Dev Comment Lockdown safe to use in 2026?
Delta Dev Comment Lockdown works, but test it on a staging site before relying on it in 2026. Was last updated 2 months ago, and scores 60/100 on our health check.
How many websites use Delta Dev Comment Lockdown?
Delta Dev Comment Lockdown is active on <10 WordPress websites and has been downloaded 204 times since it launched in August 2026. It was downloaded 80 times in the last 30 days.
Does Delta Dev Comment Lockdown work with WordPress 7.1?
Yes. The developer has tested Delta Dev Comment Lockdown up to WordPress 7.1.3, the latest release. It requires WordPress 6.0 or newer.
What PHP version does Delta Dev Comment Lockdown need?
Delta Dev Comment Lockdown requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was Delta Dev Comment Lockdown last updated?
The latest version, 1.0.0, was released on August 28, 2026 (2 months ago).
Who makes Delta Dev Comment Lockdown?
Delta Dev Comment Lockdown is developed and maintained by Delta Dev.
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
