WP Manifestindependent plugin directory
manifest / forms / wpproatoz-bulkdelete-gf-entries

Gravity Forms WPProAtoZ Bulk Delete for Individual Gravity Forms WP Registry grade D+. High-severity findings · 3 findingsWP RegistryHigh-severity findings · 3 findingsOpen the reportD+

This plugin helps you remove bulk entries for Gravity Forms, a great way to deal with spam.

★ 0stars
v1.3latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ahkonsu/wpproatoz-bulkdelete-gf-entries/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

Bulk Delete Gravity Forms Entries

Gravity Forms WPProAtoZ Bulk Delete

A powerful WordPress plugin to bulk delete entries from individual Gravity Forms, perfect for cleaning up spam or unwanted submissions.


Overview

The Gravity Forms WPProAtoZ Bulk Delete plugin provides an intuitive tool for WordPress administrators to remove large volumes of entries from a specific Gravity Form. Whether you're tackling a spam flood or clearing out old data, this plugin offers customizable batch processing, real-time progress tracking, a stop feature, dry run simulation, and detailed logging—all accessible from your WordPress dashboard.

Developed by WPProAtoZ, this plugin integrates seamlessly with Gravity Forms to streamline form management.


Features

  • Targeted Deletion: Delete entries from a single, selected Gravity Form without affecting others.
  • Status Selection: Choose to delete Active, Spam, Trash entries, or any combination.
  • Customizable Processing: Adjust batch size (default: 250) and pause time (default: 15 seconds) to suit your server’s capacity.
  • Real-Time Monitoring: Track progress with a visual progress bar, loading spinner, and detailed status updates via AJAX.
  • Stop Control: Halt the deletion process mid-run with a confirmation prompt.
  • Dry Run Mode: Simulate deletions without removing entries for safe testing.
  • Logging: Record deletion activities in a log file (bulk-delete-log.txt) for auditing.
  • Entry Count Preview: See the total entries to be deleted before starting.
  • Reset Settings: Revert to default settings with one click.
  • Robust Error Handling: Includes AJAX retries (up to 3 attempts) and extended execution time (5 minutes per batch) for large datasets.
  • Dependency: Requires the Gravity Forms plugin.

Installation

  1. Download: Get the latest release from the Releases page.
  2. Upload: In your WordPress admin, go to Plugins > Add New > Upload Plugin, and upload the .zip file.
  3. Activate: Activate the plugin via the Plugins menu.
  4. Verify Dependency: Ensure Gravity Forms is installed and active.
  5. Configure: Navigate to Settings > GF Bulk Delete to start using the tool.

Alternatively, clone this repository into your /wp-content/plugins/ directory and activate it:


git clone https://github.com/Ahkonsu/wpproatoz-bulkdelete-gf-entries.git wpproatoz-bulkdelete-gf-entries
cd wpproatoz-bulkdelete-gf-entries

Releases

5 releases.

Tag
Published
v1.3 latest
Apr 3, 2025 1 year ago
Apr 1, 2025 1 year ago
Apr 1, 2025 1 year ago
Apr 1, 2025 1 year ago
Apr 1, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

D+ grade

Security

Gravity Forms WPProAtoZ Bulk Delete for Individual Gravity Forms 1.3 · audited by WP Registry

High-severity findings.

2 high 1 medium
Audited release
1.3
Findings
3
Worst severity
high
Content hash
063e357fd69dace465c3b7ca…

Findings

  • high AJAX update_option/delete_option accept arbitrary option names without capability

    missing_capability

    wpproatoz_gf_update_option and wpproatoz_gf_delete_option only check a nonce (localized on the manage_options settings page) but never current_user_can. Worse, the option name comes from $_POST['option'], so a CSRF'd admin (or any principal holding a valid nonce) can update/delete arbitrary WP options.

    gravity-forms-bulkdelete-entries.php:362-377

  • high Bulk GF entry deletion AJAX lacks capability check

    missing_capability

    wpproatoz_gf_bulk_delete_process deletes Gravity Forms entries in batches with only nonce verification — no manage_options/gform capability check in the handler.

    gravity-forms-bulkdelete-entries.php:220-221

  • medium Arbitrary option mutation via unsafe AJAX input

    unsafe_input

    Option name/value taken from request and passed to update_option/delete_option without allowlist — unsafe_input enabling site takeover if combined with CSRF of an admin session.

    gravity-forms-bulkdelete-entries.php:363-377

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.