csgaku

CSGaku Site State Check is a lightweight plugin for reviewing basic WordPress site status from the admin area.
The plugin is designed for administrators and developers who want to check important maintenance and security-related signals on demand. It does not automatically repair, delete, or change site settings. It presents the current state so the site administrator can decide what to review next.
CSGaku Site State Check does not use external API communication or external vulnerability database lookups for its checks. It uses information available within the WordPress site and server environment.
The plugin can run on PHP 7.4 or later, but PHP 8.2 or later is recommended.
Design principles:
<ul>
<li>No external API or external service communication for normal checks</li>
<li>No automatic repair</li>
<li>No automatic deletion</li>
<li>No automatic setting changes</li>
<li>No direct display of secret values or full file contents</li>
<li>Results organized by status and severity</li>
<li>Latest result, simple local history, and CSV export support</li>
</ul>
Main checks include:
<ul>
<li>PHP version</li>
<li>WordPress version</li>
<li>Site URL and home URL</li>
<li>SSL status</li>
<li>Sitemap</li>
<li>Debug settings</li>
<li>wp-config.php</li>
<li>.htaccess</li>
<li>index.php</li>
<li>wp-admin, wp-content, and wp-includes</li>
<li>Public access protection for debug.log</li>
<li>PHP execution prevention setting in uploads</li>
<li>wp-config.php structure and location</li>
<li>SALT constants</li>
<li>Administrator user count</li>
<li>Presence of the admin username</li>
<li>Older administrator accounts</li>
<li>Application passwords</li>
<li>Search engine visibility setting</li>
<li>XML-RPC status</li>
<li>Core, plugin, and theme update status</li>
<li>Inactive plugins</li>
<li>Unused theme candidates</li>
<li>444 and 555 permissions under wp-content</li>
<li>uploads/YYYY/.htaccess and uploads/YYYY/MM/.htaccess</li>
</ul>
About obfuscation-related checks:
CSGaku Site State Check can review index.php for patterns that are sometimes associated with obfuscation, such as base64, eval, gzinflate, long Base64-like strings, hex escapes, and chr concatenation. If such patterns are found, they are shown as items to review. They are not treated as final proof of malicious code by themselves.
About permissions:
The plugin checks 444 and 555 permissions under wp-content. These permissions may be intentional in some environments, but they can also affect updates, deletion, and maintenance work. When such items are found under themes, the plugin can note that they may be intentional depending on the environment.
About uploads security:
The plugin checks whether uploads/.htaccess contains PHP execution prevention rules, and it also checks for .htaccess files under uploads year/month folders. If relevant .htaccess files are found in those locations, they are shown for review without displaying file contents.
About CSV export:
The latest result can be exported as CSV with a UTF-8 BOM for compatibility with spreadsheet applications. To reduce CSV formula injection risk, values starting with dangerous leading characters are escaped before export.
Important limitations:
<ul>
<li>This plugin is a confirmation tool.</li>
<li>It does not provide malware cleanup.</li>
<li>It does not provide automatic remediation.</li>
<li>It does not provide complete vulnerability assessment.</li>
<li>It does not guarantee detection of all issues.</li>
<li>Final review and response should be handled by the site administrator.</li>
</ul>

CSGaku Site State Check

Checks key WordPress site status items from the admin area without external API communication or automatic changes.

Foysal Zihak

Health Radar is a comprehensive WordPress plugin auditing and health monitoring tool for site administrators. Get a clear, real-time picture of their site’s plugin ecosystem—conflicts, performance bottlenecks, compatibility issues, and errors—without guessing or digging through logs.
Stop managing plugins blindly. Stop performance issues before they impact your users. Stop compatibility problems from becoming critical failures.
Core Features:
<ul>
<li>
🔍 Plugin Conflict Detector — Instantly detects duplicate script and style handles, identifies hook collisions between active plugins, and highlights which plugins are fighting for the same resources.
</li>
<li>
⚡ Performance Insight Panel — Measures total enqueued assets, calculates JS/CSS payload, counts database queries (when SAVEQUERIES enabled), audits wp_options autoload bloat, and generates a 0–100 health score with actionable recommendations.
</li>
<li>
🐘 PHP Compatibility Checker — Validates each plugin’s Requires PHP header against your server version, scans for deprecated WordPress function usage, and flags incompatible plugins before they break your site.
</li>
<li>
📋 Debug Log Analyzer — Intelligently parses wp-content/debug.log, categorizes errors as fatal, warnings, or notices, attributes errors to specific plugins via stack trace analysis, and shows trends over time.
</li>
<li>
🧬 Duplicate Asset Detector — Uses file fingerprinting (MD5) to identify identical JavaScript and CSS libraries loaded by multiple plugins (detects jQuery, Lodash, Moment.js, Chart.js duplicates, and more).
</li>
<li>
📄 Health Report Generator — Compiles a full site health snapshot into a single printable page; export as JSON for automation, or generate PDF from browser print dialog.
</li>
</ul>
WP-CLI Integration:
Automate plugin health audits and reporting via command line:
<ul>
<li><code>wp healthmonitor scan</code> — Trigger a full plugin health scan and display results.</li>
<li><code>wp healthmonitor score</code> — Get your current health score (0–100) instantly.</li>
<li><code>wp healthmonitor conflicts</code> — List all detected plugin conflicts and collisions.</li>
<li><code>wp healthmonitor report</code> — Generate a complete health report in table format.</li>
<li><code>wp healthmonitor report --format=json</code> — Export full report as JSON for programmatic access and dashboards.</li>
<li><code>wp healthmonitor log --last=50</code> — Display recent debug log entries (customizable number).</li>
</ul>
Perfect for scheduled audits, CI/CD integration, and headless WordPress monitoring.
Who Should Use Health Radar?
<ul>
<li>WordPress Site Administrators — Take control of your plugin ecosystem.</li>
<li>Web Hosting Providers — Offer health audits to your clients as a value-add service.</li>
<li>WordPress Developers & Agencies — Audit client sites, debug complex plugin interactions, optimize performance.</li>
<li>WP-CLI Power Users — Integrate plugin audits into automation workflows and monitoring scripts.</li>
</ul>
Security & Privacy First:
This plugin operates with zero external dependencies and complete data privacy:
<ul>
<li>✅ No external HTTP requests — All analysis happens locally on your server.</li>
<li>✅ No telemetry or tracking — We don’t collect usage data.</li>
<li>✅ No data transmission — Your plugin list, errors, and reports never leave your site.</li>
<li>✅ WPCS & Security Compliance — Follows WordPress Coding Standards and best practices.</li>
<li>✅ WP_Filesystem API — Uses WordPress’s secure file operations, never direct fopen/fread.</li>
<li>✅ Nonce-protected AJAX — All admin actions verified with WordPress security tokens.</li>
<li>✅ Capability Checks — Only administrators (manage_options) can run scans or view reports.</li>
</ul>
<h3>System Requirements</h3>
<ul>
<li>WordPress: 6.3 or newer</li>
<li>PHP: 8.1 or newer (object-oriented PHP with type hints)</li>
<li>Database: MySQL 5.7+ or MariaDB 10.2+</li>
<li>Recommended: WP_DEBUG enabled during audits for maximum visibility</li>
</ul>
<h3>Performance & Compatibility</h3>
Performance Impact: 
* Zero performance impact on front-end 
* Admin dashboard scans: 1–3 seconds (depending on plugin count) 
* Results cached for 1 hour 
* No background processes or cron jobs
Tested Compatibility: 
* ✅ WordPress 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9+ 
* ✅ PHP 8.1, 8.2, 8.3, 8.4 
* ✅ All major hosting providers (Kinsta, WP Engine, Bluehost, SiteGround, etc.) 
* ✅ Multisite WordPress installations 
* ✅ WP-CLI compatible

Health Radar

Detect plugin conflicts, performance issues, PHP compatibility risks, and debug log errors from your WordPress dashboard.

CSGaku Site State Check vs Health Radar