About this plugin
DGN Webs Spam User Cleaner scans your WordPress users and identifies likely spam registrations using a multi-signal scoring engine — no external API required for the core features.
Every email address is scored across multiple heuristic signals. Users scoring above your chosen minimum threshold appear in a reviewable list. You decide who to delete — nothing is removed without your confirmation.
Core Features (Free)
- Multi-signal spam scoring — blacklisted domains, invalid email format, Gmail abuse patterns (starts with number, long digit sequences, excessive dots), bot-generated usernames (consecutive consonant clustering, unseparated long strings), random alphanumeric patterns, no vowels, very short usernames
- Never-logged-in flag — optionally add +3 score to users who have never logged in
- Minimum score threshold — slider from 1–20, users below the threshold are excluded from results
- Excluded emails whitelist — protect known-good users from ever appearing in scan results
- Batch scanning — processes 1,000 users per batch, works on sites with hundreds of thousands of users
- Real-time progress bar — scan and deletion progress displayed live
- Domain filter with Only / Except toggle — show or exclude a specific email domain
- Reason filter chips — filter results by any combination of detection reasons
- Score badges — colour-coded Low / Medium / High / Critical
- Bulk selection — select current page or all results across all pages
- Deletion with content reassignment — all content (posts, comments) is safely reassigned to an admin before deletion
- Protected roles — Administrators and Editors can never appear in scan results or be deleted
- CSV export — download the full result set
- Presets — Cautious, Balanced or Aggressive, with optional custom settings
- Safe users — mark genuine users so they are never flagged or deleted
- Comment check — flags users whose comments contain spam links, promotions or repeats (local heuristics, no external service)
- Recent activity — log of your last scans and deletions
- Automatic backup — a CSV of the selected users is downloaded before they are deleted (optional)
Privacy & External Connections
This plugin performs no external connections. MX record validation uses PHP’s built-in checkdnsrr function — a standard DNS query. No user data is sent to any third party.
To support the never-logged-in option, the plugin stores a login timestamp in its own user meta key ( dgnwebs_last_login ) each time a user logs in, and stores your safe-user list and recent activity log in the options table; all of it stays in your database.