Deleting safely

Deletion happens in one place — Media → Usage → Unused — and only when you ask for it. Nothing is deleted on a schedule, nothing is deleted by a scan, and there is no delete verb on the command line. This page is the one to read before you press anything.

The two actions

Delete selected — tick the rows you want and press it. The button sits above and below the table, so it is in reach from either end of a long list.

Delete all unused (400) — the button on the heading row, deliberately styled as a destructive link rather than as the screen's primary action. The number in the label is the set it will act on.

Both re-check first (below), both report what happened, and both obey the media trash.

Filters, and why the button label changes

Above the list there is a filter bar: uploaded from / to, filename contains, min size, max size. It is a plain GET form, so the URL is the filter state — it survives pagination and can be bookmarked.

When a filter is active, three things change together:

the heading counts both numbers — Unused files (37 of 400) — so a subset can never be misread as the whole library;
the delete-all button becomes Delete all matching (37);
its confirmation spells the filter out in words: Delete all 37 unused attachments matching the current filter (uploaded on or after 2024-01-01, at least 2 MB)?

A control that still said all over a screen showing a subset is exactly how the wrong files get deleted, so it doesn't.

One caveat the screen states for itself: while a size filter is applied, files whose size cannot be read are left out of the list rather than being counted as zero.

Every file is re-checked in the instant before it goes

The list you are looking at reflects the last scan. Between that scan and your click, someone may have placed one of those files in a post.

So the delete pass does not trust the list. Each ID is scanned again, right there, and anything that has become used is skipped rather than deleted. The result says so:

Deleted 12, skipped 1 (found in use on re-check), failed 0.

Every confirmation dialog states the promise before you accept it:

Each one is re-checked first; anything still in use is skipped.

One honest limit: the re-check is not atomic. A reference written in the fraction of a second between the re-check and the deletion is not seen. The upload grace covers the realistic version of that race — a file placed in the editor before its post is saved — and MEDIA_TRASH covers the rest.

Trash, or permanence

The plugin has no trash of its own and does not want one. It respects WordPress'.

With MEDIA_TRASH enabled, deleted files go to the media trash and every confirmation ends:

Deleted files go to the media trash and can be restored from there.

Without it, deletion is permanent, and the confirmation says exactly that:

Deletion is permanent and cannot be undone.

The Unused tab also carries a standing notice above the list when there is no safety net: MEDIA_TRASH is not enabled — deletions are permanent. Add define( 'MEDIA_TRASH', true ); to wp-config.php to get a trash safety net.

That is the whole safety story, and it is deliberately short: respecting the setting WordPress already has, and saying which side of it you are on at the moment you press the button. If you are about to clean a library you cannot re-upload, enable it first.

What deletion does and does not touch

It deletes attachments through WordPress' own deletion, so files, generated sizes and metadata go with the post — trashed or erased, according to MEDIA_TRASH.
It never deletes a file it has not just re-verified as unused.
It records how much was freed, so the space totals [Pro feature] can report it. With MEDIA_TRASH on, files that went to trash are not counted as reclaimed — nothing is freed until the trash is emptied.
It changes nothing else on the site: no posts are edited, no options rewritten.

Before a big clean-up

Enable MEDIA_TRASH, or take a backup you have actually restored from before.
Run a full scan and let it finish — the Not scanned count on the Scan tab should be zero.
If a plugin on your site keeps media references in its own tables, check what it holds (the blind spot).
Spot-check a handful of files on the Unused list: open one, read the Usage box, agree with it.
Then delete — filtered first, if you want to start small.

Next: What a license adds.