salocined

<p>This plugin will automatically delete the debug.log file generated by WordPress in wp-content.<br />
The plugin will run every hour.<br />
There is no administration area but the code is clear and clean and the plugin can be easily modified for your need.</p>
<h3>Arbitrary section</h3>
<h3>A brief Markdown Example</h3>


Clear Debug.log Cron

This plugin will automatically delete the debug.log file generated by Wordpress in wp-content.

custonis

<p>Custonis detects publicly exposed files that should never be accessible on the internet.</p>
<p>Many WordPress websites unintentionally expose sensitive files such as:</p>
<ul>
<li>database backups (.sql, .zip)</li>
<li>exported user or customer data</li>
<li>configuration files (.env, wp-config backups)</li>
<li>debug logs and error logs</li>
<li>development leftovers</li>
</ul>
<p>These files are actively targeted by bots and attackers because they may expose:</p>
<ul>
<li>database credentials</li>
<li>API keys</li>
<li>user data</li>
<li>internal system information</li>
</ul>
<h3>Why Custonis?</h3>
<p>Most security plugins focus on firewalls, malware or login protection.</p>
<p>Custonis focuses on a different but critical attack surface:</p>
<p>👉 Public file exposure</p>
<p>It helps you identify risks that are often overlooked and complements traditional security plugins.</p>
<h3>Features</h3>
<p>✔ Detect exposed backup files (.zip, .sql, .gz)<br />
✔ Detect debug logs and error logs<br />
✔ Detect configuration backups and sensitive files<br />
✔ Detect exposed Git repositories<br />
✔ Detect directory listing vulnerabilities<br />
✔ Database health checks (large tables, autoload size, transients, revisions)<br />
✔ Severity classification (Critical / Elevated / Low)<br />
✔ Security score calculation<br />
✔ Risk level indicator<br />
✔ Exposure age tracking (when issues first appeared)<br />
✔ Detailed findings dashboard with explanations and fixes<br />
✔ Scan history chart<br />
✔ Fast and lightweight scanning<br />
✔ 100% local scanning (no external API calls)</p>
<h3>How it works</h3>
<ol>
<li>Install and activate the plugin</li>
<li>Open the Custonis dashboard</li>
<li>Run a security scan</li>
<li>Review detected exposures and fix issues</li>
</ol>
<p>Custonis performs read-only scans and does not modify your website.</p>
<h3>1.1.7</h3>
<p>= Fixed =<br />
* Fixed missing “first detected” timestamps for findings<br />
* Fixed finding lifecycle persistence across repeated scans<br />
* Fixed overly aggressive severity classification for transient cache findings</p>
<h4>Improved</h4>
<ul>
<li>Improved finding history tracking and exposure timeline accuracy</li>
<li>Improved database health severity evaluation</li>
<li>Improved consistency of finding status handling (new / existing)</li>
<li>More reliable exposure age tracking between scans</li>
</ul>
<h4>UX</h4>
<ul>
<li>Clearer exposure timeline information</li>
<li>More accurate risk presentation for database-related findings</li>
</ul>
<h3>1.1.6</h3>
<p>= Fixed =<br />
* Fixed detection regression for publicly exposed debug.log files<br />
* Fixed exposure validation issues on hosting environments returning soft-404 responses<br />
* Fixed multiple false positives for non-existing backup and environment files</p>
<h4>Improved</h4>
<ul>
<li>Improved HTTP exposure verification logic</li>
<li>Improved detection accuracy for publicly accessible files</li>
<li>Better filtering of invalid HTML fallback responses</li>
<li>More reliable validation of exposed backup archives and configuration files</li>
<li>Improved compatibility with modern hosting and caching setups</li>
</ul>
<h4>Security</h4>
<ul>
<li>Improved exposure validation for debug logs and backup files</li>
<li>Reduced risk of incorrect exposure reporting</li>
</ul>
<h4>UX</h4>
<ul>
<li>Cleaner and more trustworthy scan results</li>
<li>Reduced false positives and invalid findings</li>
</ul>
<h3>1.1.5</h3>
<p>= Improved =<br />
* Significantly improved exposure detection accuracy<br />
* Reduced false positives for backup and environment file detection<br />
* Improved validation of publicly accessible files and directories<br />
* Better handling of soft-404 and fallback responses on modern hosting environments<br />
* More reliable exposure verification logic</p>
<h4>Security</h4>
<ul>
<li>Improved detection quality for exposed backup archives</li>
<li>Improved ENV file validation using content-based verification</li>
<li>Improved filtering of invalid exposure results</li>
</ul>
<h4>UX</h4>
<ul>
<li>Cleaner and more trustworthy scan results</li>
<li>Reduced noise from invalid findings</li>
</ul>
<h3>1.1.4</h3>
<p>= Improved =<br />
* Fixed exposure timeline (first detected now tracked correctly)<br />
* Improved consistency of finding history across scans<br />
* Enhanced score accuracy for repeated findings</p>
<h4>Added</h4>
<ul>
<li>Score breakdown (critical / elevated issues) directly in dashboard</li>
<li>More transparent risk evaluation for users</li>
</ul>
<h4>UX</h4>
<ul>
<li>Improved clarity of exposure age and status</li>
<li>Cleaner and more understandable dashboard feedback</li>
</ul>
<h3>1.1.3</h3>
<ul>
<li>Optimized false positives</li>
</ul>
<h3>1.1.2</h3>
<ul>
<li>Fixed version inconsistency in trunk</li>
</ul>
<h3>1.1.1</h3>
<ul>
<li>Fixed dashboard live stats not updating after scan</li>
<li>Improved scan result persistence</li>
</ul>
<h3>1.1</h3>
<p>= Improved =<br />
* Significantly improved scan stability and execution flow<br />
* Optimized background scanning process<br />
* More accurate live scan progress tracking<br />
* Improved performance for large websites<br />
* Enhanced scan result storage and reliability<br />
* Refined dashboard UI and scan experience</p>
<h4>Added</h4>
<ul>
<li>Improved filesystem scanning coverage</li>
<li>Enhanced database analysis</li>
<li>More precise detection of exposed files and risks</li>
<li>Better scan step handling and progress visualization</li>
</ul>
<h4>Internal</h4>
<ul>
<li>Codebase cleanup and structural improvements</li>
<li>Optimized AJAX handling and data flow</li>
</ul>
<h3>1.0.1</h3>
<p>= Fixed =<br />
* Removed all Pro / license / cron related functionality for full compliance with WordPress.org guidelines<br />
* Replaced external CDN (Chart.js) with local asset<br />
* Fixed nonce handling (sanitization and validation)<br />
* Improved escaping for all output<br />
* Improved file path handling using WordPress functions</p>
<h3>1.0.0</h3>
<p>= Initial release =<br />
* Exposure scanner<br />
* Severity detection (Critical / Elevated)<br />
* Security score calculation<br />
* Exposure age detection<br />
* Findings dashboard<br />
* Scan history chart</p>


Custonis – Security Exposure Scanner

Detect publicly exposed backup files, debug logs and sensitive data on your WordPress site.

Clear Debug.log Cron vs Custonis – Security Exposure Scanner