Milan Petrovic

<p>CoreActivity is a free plugin for monitoring and logging various activities of the WordPress powered website. The plugin is highly modular, with events registered and controlled by multiple Components.</p>
<h4>Quick Introduction Video</h4>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/JCukiRMWjeA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p>Currently, plugin has 28 components with a total of 182 events, with direct integration with 12 popular plugins.</p>
<h4>WordPress Core Components</h4>
<ul>
<li>Attachments (3 events)</li>
<li>Comments (5 events)</li>
<li>Errors (6 events)</li>
<li>Notifications (4 events)</li>
<li>Options (7 events)</li>
<li>Plugins (9 events)</li>
<li>Posts (6 events)</li>
<li>Privacy (10 events)</li>
<li>Terms (6 events)</li>
<li>Themes (6 events)</li>
<li>Users (21 events)</li>
<li>WordPress (8 events)</li>
<li>REST API (8 events)</li>
</ul>
<h4>WordPress Network Only Components</h4>
<ul>
<li>Multisite Network (15 events)</li>
<li>Sitemeta (7 events)</li>
</ul>
<h4>CoreActivity Internal Component</h4>
<ul>
<li>Internal (4 events)</li>
</ul>
<h4>Third-party Plugins Components</h4>
<ul>
<li>bbPress (6 events)</li>
<li>BuddyPress (4 events)</li>
<li>Contact Form 7 (3 events)</li>
<li>DebugPress (9 event)</li>
<li>Duplicate Post (1 event)</li>
<li>Forminator (1 event)</li>
<li>GD Forum Manager (4 event)</li>
<li>Gravity Forms (6 events)</li>
<li>Jetpack (2 events)</li>
<li>SweepPress (11 event)</li>
<li>User Switching (4 events)</li>
<li>WooCommerce (6 events)</li>
</ul>
<h4>Geo Location of IPs</h4>
<p>The plugin can locate where the IP making the request is coming from. There are currently three methods available, with more coming in the future:</p>
<ul>
<li>Online via GeoJS.io website</li>
<li>IP2Location Local Database</li>
<li>MaxMind GeoLite2 Local Database</li>
</ul>
<p>To use IP2Location, you need to have an account on IP2Location, to get the download token, and getting the Lite versions of the database is free. To use MaxMind GeoLite2, you need to have MaxMind account, and the license for downloading the files, it is free for the GeoLite2 database files. Plugin supports use of all Lite databases for both providers, and using the provided token it can keep the database updated on a weekly basis.</p>
<h4>More Features</h4>
<ul>
<li>Instant Notifications</li>
<li>Daily Digest Notifications</li>
<li>Weekly Digest Notifications</li>
<li>IP WhoIs Information</li>
<li>Request Device Detection</li>
<li>Users login, logout, online tracking</li>
<li>Log Cleanup Tools</li>
<li>Auto Log Cleanup</li>
<li>Log Live Updates</li>
<li>Define Exceptions</li>
</ul>
<h4>Home, Documentation and GitHub</h4>
<ul>
<li>Learn more about the plugin: <a href="https://www.dev4press.com/plugins/coreactivity/" rel="nofollow ugc">CoreActivity Website</a></li>
<li>Plugin Knowledge Base: <a href="https://www.dev4press.com/kb/coreactivity/" rel="nofollow ugc">CoreActivity Support</a></li>
<li>Contribute to plugin development: <a href="https://github.com/dev4press/coreactivity" rel="nofollow ugc">CoreActivity on GitHub</a></li>
</ul>


coreActivity: Activity Logging for WordPress

Monitor and log all kinds of activity happening on the WordPress website, with fine control over events to log, detailed log and events panels...

Blobfolio

<p>Jeepers Peepers provides an extensible interface for recording WordPress events — user logins, file uploads, post deletions, etc. — to a standard system log.</p>
<p>The resulting audit trail can then be incorporated into powerful log-monitoring tools like <a href="https://ossec.github.io/" rel="nofollow ugc">OSSEC</a> for pre-emptive protection and, in the unfortunate event of a hack, used as a vital reference in the post-mortem investigation.</p>
<p>The following events are automatically logged:</p>
<ul>
<li>Content: <code>wp_die()</code> triggered;</li>
<li>Content: attachment deleted;</li>
<li>Content: attachment sideloaded;</li>
<li>Content: attachment uploaded;</li>
<li>Content: post deleted;</li>
<li>Content: post published; </li>
<li>Network: GET, HEAD, POST, etc., requests;</li>
<li>Plugin: activated;</li>
<li>Plugin: deactivated;</li>
<li>Plugin: upgraded;</li>
<li>User: deleted;</li>
<li>User: login banned (via <a href="https://wordpress.org/plugins/apocalypse-meow/" rel="ugc">Apocalypse Meow</a>);</li>
<li>User: login failed;</li>
<li>User: login succeeded;</li>
<li>User: new user;</li>
<li>User: password reset;</li>
</ul>
<p>Each log entry records:</p>
<ul>
<li>UTC timestamp;</li>
<li>Severity level;</li>
<li>User IP address (or <code>127.0.0.1</code> if automated);</li>
<li>Logged in username (if applicable);</li>
<li>Event message;</li>
</ul>
<p>It will look something like this:</p>
<pre><code>WordPressAudit 2017-05-24 16:35:45 [warning] yourdomain.com 68.256.55.123 "tiffany" "Deactivated plugin: look-see-security-scanner"
</code></pre>
<h3>Requirements</h3>
<ul>
<li>WordPress 4.7 or later.</li>
<li>PHP 7.3 or later.</li>
<li>Linux host.</li>
<li>Single-site instance.</li>
<li>Log file must be writeable by WordPress.</li>
</ul>
<p>Please note: it is <strong>not safe</strong> to run WordPress atop a version of PHP that has reached its <a href="http://php.net/supported-versions.php" rel="nofollow ugc">End of Life</a>. Future releases of this plugin might, out of necessity, drop support for old, unmaintained versions of PHP. To ensure you continue to receive plugin updates, bug fixes, and new features, just make sure PHP is kept up-to-date. 🙂</p>
<h3>Privacy Policy</h3>
<p>Jeepers Peepers records CMS events such as post and plugin changes to a standard system log for security and audit purposes. Where possible, these entries include the public IP address and/or WordPress username of the individual responsible.</p>
<p>This plugin does not send any of this information to remote locations or third parties.</p>
<p>Please note: Jeepers Peepers <em>DOES NOT</em> integrate with any WordPress GDPR “Personal Data” features. (Selective erasure of audit logs would undermine the very purpose of this plugin! Haha.)</p>


Jeepers Peepers: WP Syslog

An extensible tool for recording WordPress events to a system log.

coreActivity: Activity Logging for WordPress vs Jeepers Peepers: WP Syslog