CloudAware

<p>This plugin adds auditing functionality to WordPress. It does this by adding extra<br />
REST API endpoints. Using these endpoints it is possible to:<br />
– see the version of core<br />
– see whether there is an update available for core<br />
– see what plugins are installed<br />
– see whether these plugins have been actived<br />
– see whether these plugins have autoupdate enabled<br />
– see whether these plugins have updates<br />
– see a list of vulnerabilities for these plugins<br />
– see what themes are installed<br />
– check if 2FA is enabled<br />
– see MD5 hashes of all theme and plugin folders</p>
<p>For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint.<br />
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the<br />
cronjob.</p>
<h3>Dependancies</h3>
<p>For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin<br />
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin<br />
will work without the information from WPVulnerabilty plugin.<br />
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/<br />
for more information.</p>
<h3>External services</h3>
<p>In order to determine the latest version of installed software components this plugin uses the following<br />
external services:<br />
<em>GitHub</em><br />
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service<br />
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement<br />
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases)<br />
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases)<br />
<em>Slider Revolution</em><br />
Terms of Service: https://www.sliderrevolution.com/terms/<br />
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/<br />
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)</p>
<p>Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services.<br />
Specifically no version information is transmitted to external services.</p>
<p>If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request<br />
with the audit data to this URL daily.</p>


CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Patrick Lumumba

WP Corner

jfcby

<h4>About</h4>
<p>WP Blame lets you keep a record of everything that has happened on your website by logging the actions of your users in a simple but useful table of data.</p>
<p>This plugin is your go-to solution for maintaining a complete audit trail of all user activities on your WordPress site. Whether you’re a site administrator, developer, or security professional, WP Blame provides you with the insights you need to keep your site secure and well-managed.</p>
<h4>Key Features</h4>
<ul>
<li><strong>Comprehensive Logging:</strong> Track all user actions including post edits, plugin activations, theme changes, and more.</li>
<li><strong>User-Friendly Interface:</strong> View all logged activities in an easy-to-read table right in your WordPress admin area.</li>
<li><strong>Detailed Information:</strong> Each log entry includes the user, action type, affected item, and date stamp.</li>
<li><strong>User-Based Log Control:</strong> Decide which usernames of people who should not have their actions logged.</li>
</ul>
<h4>Perfect For</h4>
<ul>
<li>Troubleshooting unexpected changes</li>
<li>Monitoring user activity for security purposes</li>
<li>Maintaining compliance with audit requirements</li>
<li>Tracking the history of your site’s development and content changes</li>
</ul>
<h4>Developers</h4>
<p>There are currently no hooks available for this plugin as of yet, however whilst it is discouraged, you can log actions using the <code>WPB_Log_Hooks::save_new_log</code> function.</p>
<h4>Stay Updated and Contribute</h4>
<p>WP Blame is an open-source project and we welcome contributions! Follow the development, report issues, or contribute code on our <a href="https://github.com/wpcorner/wp-blame" rel="nofollow ugc">GitHub repository</a>.</p>
<h4>Privacy Notice</h4>
<p>WP Blame logs user activities on your WordPress site. This includes usernames, IP addresses, and details of actions performed. Please ensure you have necessary consent and include this information in your site’s privacy policy if required by local laws and regulations.</p>


WP Blame

Keep a record of the activity on your website.

CloudAware Security Audit vs WP Blame