CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Masahiro Sakamoto

WordPressの投稿・プラグイン・テーマ・ログイン／ログアウト操作を記録し、 
管理画面でフィルタ、CSVエクスポート、保持日数設定、自動削除が可能です。
RSCSoft Activity Audit Log helps administrators monitor and review key actions on their WordPress site. 
RSCSoft Activity Audit Log は、WordPressサイト上で行われた主要な操作を監査・記録し、管理者が容易に確認できるようにします。
Features / 主な機能 
– Records actions for posts and pages (create, update, delete, trash, restore) 
 投稿・固定ページの作成／更新／削除／ゴミ箱移動／復元を記録 
– Tracks plugin and theme activation, deactivation, deletion, and updates 
 プラグイン・テーマの有効化／停止／削除／更新を記録 
– Logs user login, logout, and failed login attempts 
 ユーザーのログイン／ログアウト／ログイン失敗を記録 
– Filterable log view in the admin panel 
 管理画面でフィルタ可能なログ一覧を表示 
– CSV export with UTF-8 BOM for spreadsheet compatibility 
 UTF-8 BOM付きCSVでエクスポート可能（Excel互換） 
– Adjustable retention period and daily automatic cleanup via WP-Cron 
 保持日数を設定し、WP-Cronで古いログを自動削除
Privacy / プライバシー 
– Stores: username, user ID, IP address, action, object type/ID, title, and additional details 
 保存項目：ユーザー名、ユーザーID、IPアドレス、アクション、対象種別／ID、タイトル、詳細情報 
– IP and user agent are sanitized before storage 
 IPアドレスとユーザーエージェントは保存前にサニタイズされます 
– Please review your local privacy policy to ensure compliance 
 運用時は貴サイトのプライバシーポリシーと法令をご確認ください

RSCSoft Activity Audit Log

Record WordPress user activity: posts, plugins, themes, logins. Filter logs, export CSV, and automatically clean old records.

CloudAware Security Audit vs RSCSoft Activity Audit Log