CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Ártica PFMS

Pandora FMS WP is a monitoring plugin for WordPress. 100% free and OpenSource. It collect basic information from your WordPress and allow Pandora FMS to retrieve it remotely using a REST API. Some examples are new posts, comments or user logins in last hour. It also monitor if new plugins or themes has been isntalled, if a new user has been created of if a bruteforce login attempt has been made recently. You can expand easily by defining custom SQL queries to monitor other plugins or create your own SQL to collect information and sent it to Pandora FMS.
This plugin has been developed by <a href="https://pandorafms.com" title="Pandora FMS team" rel="nofollow ugc">Pandora FMS team</a>. Sourcecode is available at <a href="https://github.com/articaST/pandorafms-wp/" title="https://github.com/articaST/pandorafms-wp/" rel="nofollow ugc">https://github.com/articaST/pandorafms-wp/</a>
Sections:
<ul>
<li>
Dashboard: here, you can view a summary of the items monitored: plugins updated, version of WP and if they need an update, total users, new posts in last 24hr, new replies in 24hr and other checks.
</li>
<li>
Audit records: You can view a table with user access data: users, IP, if the login has been correct or incorrect and how many times, and the date of the last access. Also can see if new plugins or themes have been installed and the date on which these events occurred.
</li>
<li>
General Setup: Set general options:
<ul>
<li>API Settings
<ul>
<li>List of IPs with access to the API.</li>
<li>Set the time to show new data in the API.</li>
</ul>
</li>
<li>Delete Logs Time
<ul>
<li>Clean fields of filesystem table with status deleted for data older than X days</li>
<li>Remove the status ¨new¨ on fields of filesystem table for data older than X days</li>
</ul>
</li>
<li>Custom SQL queries</li>
</ul>
</li>
</ul>
<h3>Prerequisites</h3>
<ul>
<li>
PandoraFMS-WP requires (optionally) a plugin for REST API, called “JSON REST API”. Only needed if you want to integrate the monitoring/status information of the WP site into a central management console with Pandora FMS. This is an optional feature, you can manage all information from WordPress itself.
</li>
<li>
If your WordPress version is lower than 4.7, you must have the <a href="https://es.wordpress.org/plugins/rest-api/" title="WP REST API (v2)" rel="nofollow ugc">WP REST API (v2)</a> plugin installed to use the API. (This plugin requires version 4.6 or higher).
</li>
</ul>
<h3>Limitations</h3>
<ul>
<li>WP Multisite not supported on this version. </li>
<li>To use the WordPress API REST, you need version 4.6 or higher.</li>
</ul>

Pandora FMS WP – Monitoring WordPress from Pandora FMS

Do as expected. Useful for monitoring low level wordpress.

It works

Plugin for monitoring Wordpress with Pandora FMS. Collect data from your wordpress and make it accessible from outside using the REST API.

CloudAware Security Audit vs Pandora FMS WP – Monitoring WordPress from Pandora FMS