CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Scott Reilly

This plugin records the IP address of the original post author when a post first gets created.
The admin listing of posts is amended with a new “Author IP” column that shows the IP address of the author who first saved the post.
The plugin is unable to provide IP address information for posts that were created prior to the use of this plugin.
Links: <a href="https://coffee2code.com/wp-plugins/post-author-ip/" rel="nofollow ugc">Plugin Homepage</a> | <a href="https://wordpress.org/plugins/post-author-ip/" rel="ugc">Plugin Directory Page</a> | <a href="https://github.com/coffee2code/post-author-ip/" rel="nofollow ugc">GitHub</a> | <a href="https://coffee2code.com" rel="nofollow ugc">Author Homepage</a>
<h3>Hooks</h3>
The plugin is further customizable via four filters. Typically, code making use of filters should ideally be put into a mu-plugin or site-specific plugin (which is beyond the scope of this readme to explain).
c2c_show_post_author_ip_column (filter)
The ‘c2c_show_post_author_ip_column’ filter allows you to determine if the post author IP column should appear in the admin post listing table. Your hooking function can be sent 1 argument:
Argument :
<ul>
<li>$show_column (bool) Should the column be shown? Default true.</li>
</ul>
Example:
<pre><code>/**
 * Don't show the post author IP column except to admins.
 *
 * @param bool $show_column Should the column be shown? Default true.
 * @return bool
 */
function post_author_ip_column_admin_only( $show ) {
 if ( ! current_user_can( 'manage_options' ) ) {
 $show = false;
 }
 return $show;
}
add_filter( 'c2c_show_post_author_ip_column', 'post_author_ip_column_admin_only' );
</code></pre>
c2c_get_post_author_ip (filter)
The ‘c2c_get_post_author_ip’ filter allows you to customize the value stored as the post author IP address. Your hooking function can be sent 2 arguments:
Arguments :
<ul>
<li>$ip (string) The post author IP address.</li>
<li>$post_id (int) The post ID.</li>
</ul>
Example:
<pre><code>/**
 * Store all IP addresses from local subnet IP addresses as the same IP address.
 *
 * @param string $ip The post author IP address.
 * @param int $post_id The post ID.
 * @return string
 */
function customize_post_author_ip( $ip, $post_id ) {
 if ( 0 === strpos( $ip, '192.168.' ) ) {
 $ip = '192.168.1.1';
 }
 return $ip;
}
add_filter( 'c2c_get_post_author_ip', 'customize_post_author_ip', 10, 2 );
</code></pre>
c2c_get_current_user_ip (filter)
The ‘c2c_get_current_user_ip’ filter allows you to customize the current user’s IP address, as used by the plugin. Your hooking function can be sent 1 argument:
Argument :
<ul>
<li>$ip (string) The post author IP address.</li>
</ul>
Example:
<pre><code>/**
 * Overrides localhost IP address.
 *
 * @param string $ip The post author IP address.
 * @param int $post_id The post ID.
 * @return string
 */
function customize_post_author_ip( $ip, $post_id ) {
 if ( 0 === strpos( $ip, '192.168.' ) ) {
 $ip = '192.168.1.1';
 }
 return $ip;
}
add_filter( 'c2c_get_post_author_ip', 'customize_post_author_ip', 10, 2 );
</code></pre>
c2c_post_author_ip_allowed (filter)
The ‘c2c_post_author_ip_allowed’ filter allows you to determine on a per-post basis if the post author IP should be stored. Your hooking function can be sent 3 arguments:
Arguments :
<ul>
<li>$allowed (bool) Can post author IP be saved for post? Default true.</li>
<li>$post_id (int) The post ID.</li>
<li>$ip (string) The post author IP address.</li>
</ul>
Example:
<pre><code>/**
 * Don't bother storing localhost IP addresses.
 *
 * @param bool $allowed Can post author IP be saved for post? Default true.
 * @param int $post_id The post ID.
 * @param string $ip The post author IP address.
 * @return string
 */
function disable_localhost_post_author_ips( $allowed, $post_id, $ip ) {
 if ( $allowed && 0 === strpos( $ip, '192.168.' ) ) {
 $allowed = false;
 }
 return $allowed;
}
add_filter( 'c2c_post_author_ip_allowed', 'disable_localhost_post_author_ips', 10, 3 );
</code></pre>

Post Author IP

Records the IP address of the original post author when a post first gets created.

CloudAware Security Audit vs Post Author IP