CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

chexwarrior

This plugin allows administrators to enable or disable other user account’s logins.
When a user is disabled: 
* They can not login to the site 
* They are immediately logged out of the site 
* Any <a href="https://make.wordpress.org/core/2020/11/05/application-passwords-integration-guide/" rel="nofollow ugc">application passwords</a> created with this user will no longer authenticate with the WP REST API
<h4>WP-CLI Integration</h4>
This plugin integrates with WP-CLI and provides the following two commands:
<pre><code># Enables the target users
wp user enable <List of User IDs, Logins or Emails> [--all]

# Disables the target users
wp user disable <List of User IDs, Logins or Emails> [--all]
</code></pre>
<h3>Support</h3>
This plugin is developed on the author’s own time so there is no guarantee that reported bugs will be fixed in a timely fashion.
To report a bug please visit the plugin’s <a href="https://github.com/ChexWarrior/wp-user-disable-login" rel="nofollow ugc">GitHub repository</a>.

User Login Disable


As per the author's FAQ, I just wanted a plugin that disabled users easily without any extra bells and whistles. Extra points for the WP-CLI integration!


Does what it says on the tin

Allows administrators to disable other user logins.

CloudAware Security Audit vs User Login Disable