CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Pär Thernström

Simple History

<blockquote>
“So far the best and most comprehensive logging plugin” – <a href="https://wordpress.org/support/topic/so-far-the-best-and-most-comprehensive-logging-plugin/" rel="ugc">@herrschuessler</a>
</blockquote>
Simple History shows recent changes made within WordPress, directly on your dashboard, on a separate page, or in the admin bar.
The plugin acts as an audit log of the most important events that occur in WordPress.
It’s a plugin that is good to have on websites where several people are involved in editing the content.
No coding is required to use the plugin. Just install it and it will start logging events.
<h3>🔍 How Simple History Helps in Real Situations</h3>
Track what’s happening on your site 
“Has someone done anything today? Ah, Sarah uploaded the new press release and created an article for it. Great! Now I don’t have to do that.”
Identify issues and debug faster 
“The site feels slow since yesterday. Has anyone done anything special? … Ah, Steven activated ‘naughty-plugin-x’, that must be it.”
Keep Freelancers & Agencies Accountable 
“I hired a developer to optimize my site. But did they actually do anything? A quick glance at Simple History shows me exactly what they worked on, so I know I’m getting my money’s worth!”
<h3>✨ Simple History Features</h3>
Out of the box Simple History has support for:
<ul>
<li>
Posts and pages – see who added, updated or deleted a post or page
</li>
<li>
Attachments – see who added, updated or deleted an attachment
</li>
<li>
Taxonomies (Custom taxonomies, categories, tags) – see who added, updated or deleted an taxonomy
</li>
<li>
Comments – see who edited, approved or removed a comment
</li>
<li>
Widgets – get info when someone adds, updates or removes a widget in a sidebar
</li>
<li>
Plugins – activation and deactivation
</li>
<li>
User profiles – info about added, updated or removed users
</li>
<li>
User logins – see when a user login & logout. Also see when a user fails to login (good way to catch brute-force login attempts).
</li>
<li>
User edits – see when a user is added, updated or removed, and get detailed information about the changes made to the user.
</li>
<li>
Failed user logins – see when someone has tried to log in, but failed. The log will then include ip address of the possible hacker.
</li>
<li>
Menu edits
</li>
<li>
Option screens – view details about changes made in the different settings sections of WordPress. Things like changes to the site title and the permalink structure will be logged.
</li>
<li>
Privacy page – when a privacy page is created or set to a new page.
</li>
<li>
Notes – track when notes are added, edited, or removed on posts and pages. Notes is a new collaboration feature in WordPress 6.9 that lets editors leave feedback without modifying the content.
</li>
<li>
Data Export – see when a privacy data export request is added and when this request is approved by the user, downloaded by an admin, or emailed to the user.
</li>
<li>
User Data Erasure Requests – see when a user privacy data export request is added and when this request is approved by the user and when the user data is removed.
</li>
<li>
admin page access denied – see when a user tries to access an admin page they don’t have permission to access.
</li>
</ul>
<h4>Built-in logging for third-party plugins</h4>
Simple History comes with built in support for many plugins:
<ul>
<li>
Jetpack – See which Jetpack modules are activated and deactivated.
</li>
<li>
Advanced Custom Fields (ACF) – See when field groups and fields are created and modified.
</li>
<li>
User Switching – See each user switch being made.
</li>
<li>
WP Crontrol – See when cron events are added, edited, deleted, paused, resumed, and manually ran, and when cron schedules are added and deleted.
</li>
<li>
Enable Media Replace – See details about the file being replaced and details about the new file.
</li>
<li>
Limit Login Attempts – See login attempts, lockouts, and configuration changes made in the plugin Limit Login Attempts.
</li>
<li>
Redirection – See redirects and groups that are created, changed, enabled or disabled and also when the global plugin settings have been modified.
</li>
<li>
Duplicate Post –See when a clone of a post or page is done.
</li>
<li>
Beaver Builder – See when a Beaver Builder layout or template is saved or when the settings for the plugins are saved.
</li>
</ul>
Is your plugin missing? No problem – plugin authors can add support for Simple History in their plugins using the <a href="https://simple-history.com/docs/logging-api/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_logging_api" rel="nofollow ugc">logging API</a>.
<h4>Plugins that have support for Simple History includes:</h4>
<ul>
<li><a href="https://wordpress.org/plugins/extended-simple-history-for-beaver-builder/" rel="ugc">Simple History Beaver Builder Add-On</a></li>
<li><a href="https://wordpress.org/plugins/wp-optimize/" rel="ugc">WP-Optimize – Cache, Clean, Compress.</a></li>
<li><a href="https://wordpress.org/plugins/add-customer-for-woocommerce/" rel="ugc">Add Customer for WooCommerce</a></li>
<li><a href="https://wordpress.org/plugins/better-wlm-api/" rel="ugc">Better WishList API</a></li>
<li><a href="https://wordpress.org/plugins/ajax-login-and-registration-modal-popup/" rel="ugc">AJAX Login and Registration modal popup + inline form</a></li>
<li><a href="https://wordpress.org/plugins/loginpetze/" rel="ugc">Loginpetze</a></li>
<li><a href="https://wordpress.org/plugins/authorizer/" rel="ugc">Authorizer</a></li>
<li><a href="https://wordpress.org/plugins/ad-inserter/" rel="ugc">Ad Inserter</a></li>
<li><a href="https://foliovision.com/player/features/sharing/video-downloading-with-simple-history#integration-with-simple-history" rel="nofollow ugc">FV Player Pro</a></li>
<li><a href="https://wordpress.org/plugins/login-me-now/" rel="ugc">Login Me Now</a></li>
</ul>
<h3>💬 What users say</h3>
🌟 <a href="https://wordpress.org/support/plugin/simple-history/reviews/?filter=5" rel="ugc">300+ five-star reviews</a> speak to the reliability of this plugin. 🌟
<ul>
<li>
“The best history plugin I’ve found” – <a href="https://wordpress.org/support/topic/the-best-history-plugin-ive-found/" rel="ugc">Rich Mehta</a>
</li>
<li>
“Custom Logs Are Crazy Awesome!” – <a href="https://wordpress.org/support/topic/awesome-4654/" rel="ugc">Ahmad Awais</a>
</li>
<li>
“Amazing activity logging plugin” – <a href="https://wordpress.org/support/topic/amazing-activity-logging-plugin/" rel="ugc">digidestination</a>
</li>
<li>
“Fantastic plugin I use on all sites” – <a href="https://wordpress.org/support/topic/fantastic-plugin-i-use-on-all-sites/" rel="ugc">Duncan Michael-MacGregor</a>
</li>
<li>
“Useful Quick View of Activity” – <a href="https://wordpress.org/support/topic/useful-quick-view-of-activity/" rel="ugc">Dan O</a>
</li>
<li>
“The best Activity Plugin” – <a href="https://wordpress.org/support/topic/the-best-activity-plugin/" rel="ugc">Rahim</a>
</li>
<li>
“The best free history plugin ever” – <a href="https://wordpress.org/support/topic/the-best-free-history-plugin-ever/" rel="ugc">abazeed</a>
</li>
<li>
“It is a standard plugin for all of our sites” – <a href="https://wordpress.org/support/topic/it-is-a-standard-plugin-for-all-of-our-sites/" rel="ugc">Mr Tibbs</a>
</li>
</ul>
<h3>🚀 Zero-Config Activity Tracking</h3>
Simple History begins tracking your WordPress site’s activities instantly after installation – no setup required. Even better: your activity log won’t be empty on day one. Simple History automatically imports recent activity from your site’s history, giving you a useful log from the moment you activate. View your activity logs through the convenient dashboard widget or browse the full history on the dedicated ‘Simple History’ page in your WordPress admin.
<h3>📧 Weekly Email Reports – Stay Informed Without Logging In</h3>
Simple History’s <a href="https://simple-history.com/features/email-reports-weekly/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_email_reports" rel="nofollow ugc">weekly email reports</a> give you a quick look at your site’s activity straight in your inbox every Monday morning—know what happened on your site each week without logging in.
Each email report includes:
<ul>
<li>Total activity summary – See at a glance how active your site was</li>
<li>Daily activity breakdown – Identify the busiest days of the week</li>
<li>Key metrics – Login activity, content updates, plugin changes, and WordPress updates</li>
<li>Direct links – Jump straight to the full log for more details</li>
</ul>
Perfect for site owners who want to stay informed without logging in daily, agencies managing multiple client sites, and teams who need regular activity updates.
Enable email reports in the settings, add your email address, and start receiving weekly updates. You can <a href="https://simple-history.com/features/email-reports-weekly/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_email_reports#example" rel="nofollow ugc">see what the email looks like</a> before enabling it.
<h3>📡 RSS feed with changes</h3>
Using the optional password protected RSS feed you can keep track of the changes made on your website using your favorite RSS reader.
<h3>🤖 WP-CLI commands for automation</h3>
<a href="https://simple-history.com/features/wp-cli-commands/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_wp_cli_commands" rel="nofollow ugc">Multiple WP-CLI commands exist</a>, to view and search the log, and to view more information about a specific event.
WP-CLI support is perfect for system administrators and agencies managing multiple WordPress sites. Using WP-CLI commands they can automate log monitoring, create reports, or integrate with existing DevOps tools.
Example commands:
<ul>
<li><code>wp simple-history event list</code> – List the latest logged events.</li>
<li><code>wp simple-history event get</code> – Get more information about a specific event.</li>
<li><code>wp simple-history event add</code> – Add a custom event to the log.</li>
<li><code>wp simple-history event search</code> – Search for events.</li>
<li><code>wp simple-history stealth-mode</code> – See Stealth Mode status.</li>
</ul>
<h3>🥷 Stealth Mode – Hide Simple History from the WordPress Admin</h3>
<a href="https://simple-history.com/add-ons/premium?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_stealth_mode" rel="nofollow ugc">Stealth Mode</a> allows Simple History to run completely in the background, hidden from the WordPress admin interface. This is ideal for agencies, developers, and administrators who want to track user activity discreetly without exposing the logs to other users.
There are two modes:
<ul>
<li>Partial Stealth Mode – Hides the plugin but allows selected users to access the logs.</li>
<li>Full Stealth Mode – Completely hides Simple History from everyone.</li>
</ul>
When Stealth Mode is enabled, the activity log remains accessible via the REST API, WP-CLI, and RSS feed, ensuring administrators can still retrieve logs when needed.
Stealth Mode is built into the core/free version and is enabled using constants or filters. The <a href="https://simple-history.com/add-ons/premium?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_stealth_mode" rel="nofollow ugc">Simple History Premium</a> add-on provides a user-friendly GUI for managing Stealth Mode settings without writing code.
<h3>📝 Add your own events to the log using the API</h3>
Theme and plugin developers can log custom events in Simple History using the <code>simple_history_log</code> filter:
<pre><code>apply_filters(
 'simple_history_log',
 'This is a logged message'
);
</code></pre>
See the <a href="https://simple-history.com/docs/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_overview" rel="nofollow ugc">documentation</a> for examples on how to <a href="https://simple-history.com/docs/logging-api/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_logging_api" rel="nofollow ugc">log your own events</a>, <a href="https://simple-history.com/docs/query-api/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_query_api" rel="nofollow ugc">query the log</a>, and more.
<h3>🔆 Extend with Add-ons</h3>
Take your activity logging to the next level with add-ons that enhance tracking, security, and customization.
<h4><a href="https://simple-history.com/add-ons/premium?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=documentation&utm_content=readme_doc_premium" rel="nofollow ugc">Simple History Premium</a></h4>
Unlock advanced features and customization options:
<ul>
<li>Custom Log Entries – Add custom log entries using a UI. Document important changes by creating custom log entries for team actions, content updates, or system changes that aren’t automatically tracked.</li>
<li>Stealth Mode GUI – User-friendly interface for managing Stealth Mode settings without writing code.</li>
<li>Log Retention – Control how long logs are stored, from a few days to forever.</li>
<li>Export Search Results – Download logs in CSV or JSON format for deeper analysis.</li>
<li>Failed User Logins – Disable or limit logging of failed login attempts to reduce noise.</li>
<li>IP Address Anonymization – Choose whether to store full IPs or anonymize them for privacy compliance (e.g., GDPR).</li>
<li>Login Location Lookup – View the location of a specific login attempt on Google Maps to identify suspicious activity.</li>
<li>Logger Control – Enable or disable specific loggers to manage what type of events are recorded.</li>
<li>Ad-Free Experience – Remove promotional banners for a distraction-free workflow.</li>
</ul>
<h4><a href="https://simple-history.com/add-ons/woocommerce/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=addons&utm_content=readme_addon_woocommerce" rel="nofollow ugc">WooCommerce Logger</a></h4>
Track WooCommerce activity with detailed logs for:
✔️ Orders, refunds, and stock changes 
✔️ Product updates and pricing adjustments 
✔️ Settings modifications and coupon usage
<h4><a href="https://simple-history.com/add-ons/debug-and-monitor/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=addons&utm_content=readme_addon_debug_monitor" rel="nofollow ugc">Debug and Monitor</a></h4>
Gain deeper insights into your site’s background activity:
🛠️ Monitor outgoing requests and emails 
🔍 Debug HTTP API calls and server communication 
👨‍💻 Essential for developers, support teams, and anyone curious about what’s happening under the hood
<h3>💚 Sponsor this project</h3>
If you like this plugin please consider <a href="https://simple-history.com/sponsor/?utm_source=wordpress_org&utm_medium=plugin_directory&utm_campaign=sponsorship&utm_content=readme_sponsor_footer" rel="nofollow ugc">sponsoring the development of the free plugin</a>. The plugin has been free for the last 10 years and will continue to be free.

Simple History – Track, Log, and Audit WordPress Changes

This is a must have plugin in my eyes. It's an amazing plugin that lets you see ANY changes that are made to your website via the dashboard or cron system and I love seeing the changes, since now I know if a coworker already edited a certain page and what exactly changed without going to the revisions. 

It also helps me when a plugin has a bad update to troubleshoot issues and such. 

In my honest opinion, the benefits of this plugin are numerous and I wish something like this was in core since I love the concept so much.

Something that should be in core!


This is simply a great plugin.



Plug the RSS feed into a RSS reader, and you can monitor multiple sites for activity in one place.



Great work!!


Awesome plugin


I have a small number of plugins I install immediately on every site, and this is one of them. Just like the name says, it's simple, but provides a critical record of changes made on the site. I recently used it to resolve a massive issue where a client had deleted a user and inadvertently deleted all of their content.



This plugin didn't restore the content, of course — that's not what it's intended to do — but it helped me solve the mystery of what had happened, since the client didn't understand what they had done. So… install Simple History on your site! (And keep good backups. That was the rest of the story.)


Essential on every site I build

Track changes and user activities on your WordPress site. See who created a page, uploaded an attachment, and more, for a complete audit trail.

CloudAware Security Audit vs Simple History – Track, Log, and Audit WordPress Changes