Security snapshot
Across the 5 limit-comments-and-word-count sites we've scanned, compared to the all-WordPress average.
Limit Comments and Word Count
This plugin adds an active letter counter, word counter, and comment counter above the comment box, providing users with constant visual access to their input activity. Any comment that exceeds the word limit will result in a red change in its count as the user types more words. If users try to post anyway, a warning dialogue will appear below the comment box stating the limit, and the comment will not post. Once the user edits the words that exceed the limit, the comment can be posted. User types are defined when a rule is created, allowing a rule to restrict a specific user type. Multiple rule types can be made if different rules are required.
The plugin never restricts or limits the WordPress default user types Administrator, Editor, Author, and Contributor. If the blog administrator creates a rule for any of the three roles (Editor, Author, or Contributor) separately, that rule supersedes the default setting. Other user types that may appear in the user type dropdown do not default to WordPress and would require a rule to be created if limits are needed.
This plugin also allows the blog administrator to limit the number of comments. The defined limit applies to each day, week, month, or year. Once the limit set by the selected time span is reached, an alert message explains why further comments are not allowed.
The plugin settings allow you to disable the default WordPress flood protection notice, which blocks a user from quickly submitting successive posts and results in a 404 error. Additionally, a user is blocked by default from pasting the same comment, letter-for-letter, under any post. This can also be disabled.
The latest addition enables activating a Comment Rules pop-up modal within the post. It can be deactivated in the settings, but is active by default. It appears in the top-left corner above the post’s comment box. You may create the rules to read however you wish in settings, but keep the text rules short, as in the sample text, or they will wrap and distort the appearance of the window.
The plugin as a whole is straightforward, uses nearly no system resources, and is compatible with all tested blog add-ons loaded to the initial staging site. This includes membership platforms like Magic Members, MemberPress, Memberships Pro, Restrict Content Pro, LearnDash, S2Member and WooCommerce Memberships. Additionally, the plugin works with any other WordPress module that requires users to register before commenting. To clarify, for the plugin to track activity, a user must be registered and active. Logically, no plugin can monitor or limit unregistered anonymous comments. The plugin limits cannot control guests; only registered users can.
As of version 1.1.3, you can now, from the metabox in each post, select the post to be exempt from the limit rules saved in the plugin’s settings. This has been a repeat feature request.
As of version 1.1.8, an administrator can optionally enter a global value in the settings panel to limit the total number of comments allowed on all posts. If the field is left blank, WordPress’s default value is maintained.
Notes: This plugin will not work with wpDiscuz where it uses its own hook and templates. If the limit is set to 2 comments in 24 hours, for example, and the moderator deletes one, the subscribers’ comments will now show that another comment remains. Previously, any comments in the trash within a limited time were counted against the subscriber.
The plugin’s language support includes: English, Spanish, German, French, and Russian.
Using in Multisite Installation
- Extract the zip file contents in the wp-content/mu-plugins/ directory of your WordPress installation. (This is not created by default. You must create it in the wp-content folder.) The ‘mu’ does not stand for multi-user, as it did for WPMU; it stands for ‘must-use’, as any code placed in that folder will run without needing to be activated.
- Access the Plugins settings panel named ‘Limit Comments and Word Count’ under options.
- Configure your settings with two different error messages and save the settings.
Technical Details for Release 1.2.4
Load time: 0.311 s; Memory usage: 3.56 MiB
PHP up to tested version: 8.3.28
MySQL up to tested version: 8.4.7
MariaDB up to tested version: 12.0.2
cURL up to tested version: 8.17.0, OpenSSL/3.6.0
PHP 7.4, 8.0, 8.1, 8.2, and 8.3 compliant. Not tested on 8.4 yet.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| j*i*e*t*r*.com | F | Sep 2, 2026 | |
| n*t*c*a*v*v*.com (WP 6.1.10) | F | Aug 2, 2026 | |
| a*a*y*s*g*s*a*a*.com | F | Jul 25, 2026 | |
| h*n*a*u*b*a*.com (WP 5.0.22) | F | Jul 21, 2026 | |
| a*o*a.us (WP 6.1.10) | F | Jul 16, 2026 |