Milan Petrovic

CoreActivity is a free plugin for monitoring and logging various activities of the WordPress powered website. The plugin is highly modular, with events registered and controlled by multiple Components.
<h4>Quick Introduction Video</h4>
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/JCukiRMWjeA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
Currently, plugin has 28 components with a total of 182 events, with direct integration with 12 popular plugins.
<h4>WordPress Core Components</h4>
<ul>
<li>Attachments (3 events)</li>
<li>Comments (5 events)</li>
<li>Errors (6 events)</li>
<li>Notifications (4 events)</li>
<li>Options (7 events)</li>
<li>Plugins (9 events)</li>
<li>Posts (6 events)</li>
<li>Privacy (10 events)</li>
<li>Terms (6 events)</li>
<li>Themes (6 events)</li>
<li>Users (21 events)</li>
<li>WordPress (8 events)</li>
<li>REST API (8 events)</li>
</ul>
<h4>WordPress Network Only Components</h4>
<ul>
<li>Multisite Network (15 events)</li>
<li>Sitemeta (7 events)</li>
</ul>
<h4>CoreActivity Internal Component</h4>
<ul>
<li>Internal (4 events)</li>
</ul>
<h4>Third-party Plugins Components</h4>
<ul>
<li>bbPress (6 events)</li>
<li>BuddyPress (4 events)</li>
<li>Contact Form 7 (3 events)</li>
<li>DebugPress (9 event)</li>
<li>Duplicate Post (1 event)</li>
<li>Forminator (1 event)</li>
<li>GD Forum Manager (4 event)</li>
<li>Gravity Forms (6 events)</li>
<li>Jetpack (2 events)</li>
<li>SweepPress (11 event)</li>
<li>User Switching (4 events)</li>
<li>WooCommerce (6 events)</li>
</ul>
<h4>Geo Location of IPs</h4>
The plugin can locate where the IP making the request is coming from. There are currently three methods available, with more coming in the future:
<ul>
<li>Online via GeoJS.io website</li>
<li>IP2Location Local Database</li>
<li>MaxMind GeoLite2 Local Database</li>
</ul>
To use IP2Location, you need to have an account on IP2Location, to get the download token, and getting the Lite versions of the database is free. To use MaxMind GeoLite2, you need to have MaxMind account, and the license for downloading the files, it is free for the GeoLite2 database files. Plugin supports use of all Lite databases for both providers, and using the provided token it can keep the database updated on a weekly basis.
<h4>More Features</h4>
<ul>
<li>Instant Notifications</li>
<li>Daily Digest Notifications</li>
<li>Weekly Digest Notifications</li>
<li>IP WhoIs Information</li>
<li>Request Device Detection</li>
<li>Users login, logout, online tracking</li>
<li>Log Cleanup Tools</li>
<li>Auto Log Cleanup</li>
<li>Log Live Updates</li>
<li>Define Exceptions</li>
</ul>
<h4>Home, Documentation and GitHub</h4>
<ul>
<li>Learn more about the plugin: <a href="https://www.dev4press.com/plugins/coreactivity/" rel="nofollow ugc">CoreActivity Website</a></li>
<li>Plugin Knowledge Base: <a href="https://www.dev4press.com/kb/coreactivity/" rel="nofollow ugc">CoreActivity Support</a></li>
<li>Contribute to plugin development: <a href="https://github.com/dev4press/coreactivity" rel="nofollow ugc">CoreActivity on GitHub</a></li>
</ul>

coreActivity: Activity Logging for WordPress

Monitor and log all kinds of activity happening on the WordPress website, with fine control over events to log, detailed log and events panels...

wpazleen

Sabbir Sam

wpxpertise

Function Deck

Activity Guard is a powerful all-in-one WordPress Activity Log, WooCommerce Events, and Security Plugin designed to track every activity happening on your WordPress website.
It monitors user behavior, admin changes, WooCommerce events and analytics, forum activities, and system-level changes in real time. Whenever a critical change occurs, it instantly sends notifications via the Admin Dashboard, Slack, Telegram, and Email.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/KXT0QcnFLOg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
🚀 <a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Activity Guard</a> | 📖 <a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a> | 💬 <a href="https://wpazleen.com/support/" rel="nofollow ugc">Pro Support</a>
Let’s grow, connect, and build together! 🚀
<ul>
<li>
🤝 Join our community on Facebook: <a href="https://www.facebook.com/wpazleens" rel="nofollow ugc">Facebook</a>
</li>
<li>
🎥 Subscribe to our YouTube channel: <a href="https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA" rel="nofollow ugc">YouTube</a>
</li>
<li>
🐦 Follow us on X (Twitter): <a href="https://x.com/wpazleen" rel="nofollow ugc">X / Twitter</a>
</li>
</ul>
This top-rated Activity Log and Security Plugin helps you track user activity in WordPress efficiently. From user login and logout, role changes, plugin activation or deactivation, to tracking and blocking suspicious IP addresses- everything can be managed easily through Activity Guard. As a result, your user log and email log always remain clean, organized, and accessible.
The plugin’s detailed logging system clearly records where the change originated from (IP or source address), who made the change (user or admin), and when it occurred. This makes it a powerful Activity Log plugin with built-in IP address tracking.
It is one of the best WordPress plugins for tracking all changes and plays a vital role in keeping your website secure. Whether you are a site owner, developer, WooCommerce store manager, or an agency, Activity Guard helps you detect threats early, monitor changes accurately, and take immediate action.
Trusted by administrators and security professionals, Activity Guard offers real-time user monitoring, a comprehensive audit log, and advanced WordPress security features. With the built-in User Session Management, you can instantly log off any suspicious user, ensuring maximum protection for your website.
<h3>🔝 All Features at a Glance  </h3>
<ul>
<li>
🔐 Website Security & Advanced Protection 
Proactively protect your site against unauthorized access, attacks, and suspicious behavior with layered security controls.
</li>
<li>
📊 Complete Activity Log System 
Log every meaningful event across WordPress core, users, content, plugins, themes, and WooCommerce all in one place.
</li>
<li>
🧩 User Tracking & System Logs 
Monitor user sessions, role changes, login history, system actions, cron jobs, and background processes.
</li>
<li>
🛎️ Multi-Channel Notifier System 
Receive real-time alerts via Slack, Telegram, Email, and Admin Notifications for critical events and security incidents.
</li>
<li>
🛒 WooCommerce Monitoring & Analytics 
Includes a full WooCommerce activity log, sales analytics, customer insights, and order behavior tracking.
</li>
<li>
🔍 Plugin Vulnerability Scanner 
Detect vulnerable, outdated, abandoned, or risky plugins before they become a threat.
</li>
<li>
📈 WordPress Forum Monitoring 
Track forum activities, topic changes, replies, moderation actions, and user interactions.
</li>
<li>
🧱 Firewall with Emergency Shutdown 
Instantly block malicious traffic and force-logout active sessions during emergencies.
</li>
<li>
⏱ Cron Job & Downtime Monitoring 
Monitor scheduled tasks, detect failures, and get alerts when your site goes down.
</li>
</ul>
<h3>🛍️ Perfect for</h3>
<ul>
<li>
Enhancing Website Security 
Instantly detect suspicious activity on WordPress, block threats, and remotely trigger emergency shutdowns.
</li>
<li>
Admin & Team Management 
Learn how to monitor user activity on a WordPress site with detailed audit logs, role tracking, and accountability.
</li>
<li>
Developers & Agencies 
Track plugin/theme updates, configuration changes, fatal errors, and debug logs across multiple client sites.
</li>
<li>
Real-Time Activity Logging 
Track who changed a WordPress page or post, including edits, deletions, status changes, and metadata updates.
</li>
<li>
WooCommerce Store Owners 
Receive alerts for orders, payments, refunds, coupons, stock changes, shipping updates, and customer actions.
</li>
<li>
WooCommerce Incomplete Orders Analytics 
Analyze abandoned carts, checkout drop-offs, recovery potential, recovery rate, and customer cart interactions.
</li>
</ul>
<h3>🛡️ Advanced Security Features</h3>
<ul>
<li>IP Blocking (Manual, CIDR, Conditional Rules) </li>
<li>Emergency shutdown for active user sessions </li>
<li>Cloudflare Turnstile login protection </li>
<li>Custom HTTP security headers & WordPress version hiding </li>
<li>Core file integrity scanner </li>
<li>Bot detection and automatic blocking </li>
<li>Disable or restrict XML-RPC </li>
<li>File Integrity Monitoring (core, plugins, themes) </li>
<li>404 error tracking </li>
<li>Block vulnerability scanners </li>
<li>Block TOR network access </li>
<li>Admin dashboard visitor tracking </li>
<li>Login rate limiting (login log protection) </li>
<li>Suspicious HTTP request alerts </li>
<li>Cron job and downtime monitoring</li>
</ul>
<h3>🧱 Plugin Security Scanner</h3>
<ul>
<li>Automatically scan plugins, themes, and core files for known vulnerabilities </li>
<li>Detect outdated or insecure plugins </li>
<li>Flag abandoned or poorly rated plugins </li>
<li>Confirm compatibility with current WordPress version </li>
<li>Cross-check issues against multiple vulnerability databases</li>
</ul>
<h3>🔔 Updates and Notifier System  </h3>
<ul>
<li>🚨 Real-time alerts for Core File Changes via Slack, Telegram, and Email </li>
<li>📦 Plugin and theme update alerts with updater name  </li>
<li>🛍 WooCommerce sales and coupon usage notifications  </li>
<li>🕒 Incomplete order follow-ups to recover lost sales  </li>
<li>✏️ Product edits, stock changes, and shipping updates  </li>
<li>📪 Billing and shipping address modifications  </li>
<li>🌟 Daily review and 🆘 support notifications  </li>
<li>📈 Weekly plugin download summaries  </li>
<li>📝 Page, post, taxonomy updates and deletions (Helps Track who changed a page or post)  </li>
<li>📬 Track logins, registrations, user role changes (Comprehensive login log)  </li>
<li>🛠 Admin settings updates and form submission alerts </li>
</ul>
<h3>👨‍💻 Admin & Developer Tools  </h3>
<ul>
<li>🔒 Maintenance mode toggle  </li>
<li>🧭 Menu and widget activity tracking  </li>
<li>📑 Plugin/theme activation and deactivation logs  </li>
<li>🧰 Script modification detection  </li>
<li>🧾 Log all HTTP security header changes  </li>
<li>📉 Debug logs and fatal error detection  </li>
<li>📤 Email delivery tracking through detailed email log  </li>
<li>👀 Form integration alerts (Contact Form 7, Simple Form, more)  </li>
</ul>
<h3>📈 Why Choose Activity Guard Over Other Activity Log Plugins?  </h3>
Activity Guard is your comprehensive solution for Real-time user monitoring WP. With robust Security features, WooCommerce integrations, and Real-time alerts for critical changes, it offers unparalleled functionality compared to other plugins. 
<ul>
<li>✅ Rich, intuitive Activity Log with advanced filtering  </li>
<li>📊 Visual charts and graphs for clear audit log summaries (Easily Generate activity log reports for WordPress)  </li>
<li>⚡ Real-time Slack and email notifier alerts  </li>
<li>🛠 Smart automation and developer-friendly tools  </li>
<li>🔐 Military-grade security features with minimal bloat  </li>
<li>🛍 Tailored support for WooCommerce events (A must-have WooCommerce activity log)  </li>
<li>📧 Built-in email log and User Tracking  </li>
<li>🧘 Clean, modern interface anyone can use</li>
</ul>
<h3>Final Thoughts</h3>
Activity Guard is the Best WordPress plugin to track all changes, acting as your all-in-one activity log, notifier, user log, email log, and security plugin designed to keep your WordPress site safe, efficient, and well-monitored.
With real-time alerts, detailed logs, and robust features, you’ll never miss a thing from How to monitor user activity on a WordPress site to site vulnerabilities.
Try Activity Guard today and bring total visibility and WordPress Security to your WordPress site.
Don’t just take our word for it – try Activity Guard yourself and experience the difference!
Secure your WordPress site and stay informed with Activity Guard – your all-in-one solution for Real-time user monitoring WP and WordPress activity log plugin.
<h3>Documentation & Support</h3>
<ul>
<li><a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Website</a></li>
<li><a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://www.youtube.com/@WPAzleen/playlists" rel="nofollow ugc">Tutorials</a></li>
<li><a href="https://youtu.be/jOyU2jxTmfY?si=xoaxFLgFhszXmuFx" rel="nofollow ugc">Setup Video</a></li>
</ul>
<h3>External services</h3>
<h3>Slack Webhook Integration</h3>
Activity Guard allows you to send notifications of all active actions directly to your Slack workspace using Slack webhooks. This feature enables real-time monitoring of plugin activities.
<h3>🔧 Webhook Configuration</h3>
The plugin uses the Slack incoming webhook URL you provide to send notifications to your Slack channel.
To set up an incoming webhook for your Slack workspace:
<ol>
<li>Create a new app or use an existing one </li>
<li>Activate <a href="https://api.slack.com/messaging/webhooks" rel="nofollow ugc">Incoming Webhooks</a> for your app </li>
<li>Add a new webhook to your workspace </li>
<li>Copy the webhook URL and paste it into the plugin settings</li>
</ol>
<h3>Cloudflare Turnstile</h3>
Activity Guard also uses <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> to enhance security and prevent spam. For more details, please refer to Cloudflare’s <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">privacy policy</a>.
<h3>Plugin Security Scanner</h3>
This component checks for known vulnerabilities in installed WordPress plugins by analyzing various public and private data sources. It runs a series of automated security checks and provides recommendations.
<h3>Features</h3>
<ul>
<li>Detects outdated plugins</li>
<li>Flags abandoned plugins (not updated in over a year)</li>
<li>Checks WordPress version compatibility</li>
<li>Warns about low install counts</li>
<li>Analyzes plugin ratings</li>
<li>Checks against multiple vulnerability databases</li>
</ul>
<h3>Data Sources</h3>
<ul>
<li>
WordPress.org Plugin API 
Used to retrieve plugin metadata such as latest version, last updated date, rating, active installs, etc. 
📄 <a href="https://wordpress.org/about/privacy/" rel="ugc">Privacy Policy</a>
</li>
<li>
WPAzleen API (<code>/wp-json/wpx/v1/plugin-vulnerabilities</code>) 
Custom API endpoint to fetch known vulnerabilities for specific plugins and versions. 
📄 No sensitive data is transmitted. Private API complies with plugin author’s data policy. <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
WPVulnerability.net 
Public API used to retrieve CVE-based vulnerability data for WordPress plugins. 
📄 <a href="https://www.wpvulnerability.com/privacy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
National Vulnerability Database (NVD) 
Checks against known CVEs using official NVD data. 
📄 <a href="https://www.nist.gov/oism/site-privacy" rel="nofollow ugc">Privacy Policy</a>
</li>
</ul>
Activity Guard does not collect, store, or transmit any sensitive or personal information to performed the scan. All scans and checks are performed locally using public plugin metadata and vulnerability sources.
<h3>Freemius</h3>
Activity Guard an renamed version of Notifier to Slack utilizes the <a href="https://freemius.com/" rel="nofollow ugc">Freemius</a> SDK to collect limited telemetry data, only upon the user’s explicit confirmation. This data helps us troubleshoot issues efficiently and improve our product for a better user experience.
<h3>🔐 Key Points:</h3>
<ol>
<li>
No Data Collected by Default 
The Freemius SDK does not collect any data by default. Data collection only begins when the user consents via the admin notice displayed in the plugin interface.
</li>
<li>
User Confirmation Required 
Integration of the Freemius SDK does not automatically enable data collection. Data is only gathered after users confirm their consent.
</li>
<li>
Purpose of Data Collection 
The collected data is used solely to enhance the user experience, resolve issues more effectively, and improve the plugin’s functionality.
</li>
</ol>
For more details about Freemius and its data practices, please visit their <a href="https://freemius.com/privacy/" rel="nofollow ugc">FAQ page</a>.
Additionally, you can review WPAzleen’s <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">privacy policy</a> for further information.

Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard


Excellent plugin and easy to setup thanks for the video.


Original idea and super useful plugin!

Track user, support forum & system activity log, monitor WooCommerce analytics with complete WordPress Security with activity guard.

coreActivity: Activity Logging for WordPress vs Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard