Francisco Moreno

<p><strong>LMN Site Monitor</strong> is a lightweight WordPress monitoring plugin that keeps track of your websites and alerts you when something goes wrong. Monitor uptime, SSL certificate expiration, and response time directly from your WordPress dashboard — no external SaaS required.</p>
<p><strong>Key features</strong></p>
<ul>
<li>Uptime monitoring (HTTP/HTTPS) with configurable intervals.</li>
<li>SSL certificate expiration checks with full SNI support.</li>
<li>Domain expiry notifications.</li>
<li><strong>Malware scanning</strong> powered by Google Safe Browsing API and URLhaus (abuse.ch); per-site scheduled scans (never / daily / weekly); downloadable PDF security report.</li>
<li>Response latency tracking with full history stored in a dedicated database table.</li>
<li>Performance charts (bar, line, 3D bar, heatmap) powered by self-hosted Apache ECharts 5 — no external CDN, GDPR-safe.</li>
<li>Statistics modal with per-site avg / min / max response time and uptime %; CSV and PDF export.</li>
<li>Automatic retry after downtime to avoid false positives.</li>
<li>Instant HTML email alerts (with automatic dark mode support).</li>
<li>Dashboard widget with customizable monitor limits.</li>
<li>CSV export/import of monitored sites.</li>
<li>Fully translatable (16 languages) and optimized for modern PHP environments.</li>
</ul>
<p>LMN Site Monitor is designed to be fast, accessible, and WordPress-native — giving you essential monitoring tools without unnecessary complexity. Learn more at LMN Site Monitor official page: <a href="https://lumina.fmkr.net/site-monitor/" rel="nofollow ugc">https://lumina.fmkr.net/site-monitor/</a></p>
<h3>Localization</h3>
<p>This plugin is fully translatable and currently includes base translations for:</p>
<ul>
<li>English (en_US)</li>
<li>Spanish (es_ES)</li>
<li>Catalan (ca)</li>
<li>French (fr_FR)</li>
<li>Arabic (ar)</li>
<li>Galician (gl_ES)</li>
<li>German (de_DE)</li>
<li>Basque (eu)</li>
<li>Italian (it_IT)</li>
<li>Japanese (ja)</li>
<li>Korean (ko_KR)</li>
<li>Dutch (nl_NL)</li>
<li>Portuguese (pt_PT)</li>
<li>Turkish (tr_TR)</li>
<li>Ukrainian (uk)</li>
<li>Simplified Chinese (zh_CN)</li>
</ul>
<p>If you would like to contribute a new translation, you can do so via WordPress.org’s translation platform.</p>
<h3></h3>
<p>Version: 2026-05-26 — v1.0.0</p>
<ul>
<li>COMPAT: WordPress 7.0 full compatibility — tested and confirmed against WP 7.0 core changes (Modern theme, PHPMailer 7.0.2, PHP 7.4 minimum).</li>
<li>IMPROVE: CSS scoping fix — postbox header rule (.hndle) now correctly scoped to .lm-scope, preventing style leakage to other dashboard widgets on index.php.</li>
<li>NEW: Apache ECharts 5.6.0 + echarts-gl 2.0.8 bundled locally in /assets/ (no external CDN, GDPR-safe); Chart.js replaced as charting engine.</li>
<li>NEW: 3D bar chart of response times per site via echarts-gl (WebGL).</li>
<li>NEW: GitHub-style activity heatmap (checks per day/hour) powered by ECharts heatmap series.</li>
<li>NEW: Toggle in the charts UI to switch between 2D and 3D view.</li>
<li>IMPROVE: Dark mode for charts uses ECharts native ‘dark’ theme — no extra CSS required.</li>
<li>IMPROVE: Chart.js and date-fns adapter removed from plugin bundle; replaced by ECharts 5.6.0 (self-hosted, Apache 2.0 licence).</li>
</ul>
<h3></h3>
<p>Version: 2026-05-16 — v0.9.4</p>
<ul>
<li>NEW: Site thumbnail — each card now shows a screenshot preview via Automattic mshots (s0.wordpress.com/mshots/v1/). No API key required; images load lazily with CDN caching and dark-mode brightness filter.</li>
<li>NEW: Telegram Bot alerts — new accordion in Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Alerts: Bot Token + Chat ID. Formatted HTML messages sent for all alert types (site down, recovery, SSL expiry, domain expiry). Works alongside email and Discord.</li>
<li>NEW: Discord Webhook alerts — new accordion in Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Alerts: Webhook URL. Alerts delivered as color-coded embeds (red = down, orange = warning, green = recovery).</li>
<li>SECURITY: Full secrets encryption — SMTP password, Telegram token, Discord URL, Google Safe Browsing key, and URLhaus key are encrypted with AES-256-CBC using AUTH_KEY + SECURE_AUTH_SALT before storage. Settings forms never return secret values to the browser.</li>
<li>IMPROVE: i18n complete — 51 previously untranslated PHP strings added to the .pot template and fully translated across all 16 supported languages; all .po and .mo files recompiled. A pre-existing untranslated string (Google Safe Browsing optional key notice) also filled in for 7 languages.</li>
<li>FIX: Closing the security scan modal no longer causes a flash from dark to light mode; page reload removed, scan results update in-place.</li>
<li>FIX: Scan status label (“No incidents” / “Incidents detected”) now appears on the card immediately after scanning, without requiring a manual page reload.</li>
<li>FIX: Plural-form translations in .mo files were corrupted (drag-to-reorder label was appearing in SSL/domain expiry day fields); all 16 .mo files recompiled with correct GNU gettext plural-form encoding.</li>
<li>IMPROVE: Performance charts redesign — neon color palette for bar chart; trend chart shows filled min–max band with adaptive Y axis; distribution chart replaced with animated Polar Area chart; neon glow effect on all chart canvases in dark mode.</li>
</ul>
<h3></h3>
<p>Version: 2026-04-29 — v0.9.3</p>
<ul>
<li>NEW: Animated toast notification system — success / error / warning toasts appear bottom-right, auto-dismiss 3.8 s, click to close, slide-in/out animation. Replaces silent AJAX operations.</li>
<li>IMPROVE: “Force” and “Check all now” buttons change to “Checking…” and disable during server-side check.</li>
<li>IMPROVE: Pin/Unpin actions show a success toast; AJAX errors show an error toast with UI rollback.</li>
<li>IMPROVE: Card reorder now shows “Order saved” toast on server confirmation.</li>
<li>IMPROVE: Site cards lift 2 px on hover with smooth shadow transition; suppressed during drag.</li>
<li>IMPROVE: 5 new i18n strings added; translations for 16 languages pending.</li>
<li>SECURITY: SSRF protection — admin-supplied URLs validated against private/reserved IP ranges before acceptance; only http/https allowed.</li>
<li>SECURITY: error_msg sanitization — HTTP error body snippets sanitized with sanitize_text_field() before storage.</li>
<li>NEW: Unified action bar (top + bottom) — Select all checkbox, bulk actions, Check all now, Scan all, Export CSV, Import CSV consolidated in one strip above and below the cards.</li>
<li>NEW: Scan all — sequential background scan of all monitored sites with live badge updates and completion toast.</li>
<li>IMPROVE: 3 new i18n strings (selectAll, scanAll, scanAllDone) translated in 16 languages.</li>
</ul>
<h3></h3>
<p>Version: 2026-04-02 — v0.9.2</p>
<ul>
<li>FIX: URLhaus (abuse.ch) integration now requires an API key (Auth-Key header); added URLhaus API Key field in Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Security scanning. Without a key the URLhaus check is skipped gracefully.</li>
<li>FIX: Scan modal failed to open with “i18n is not defined” JS error — resolved by declaring i18n from cfg.i18n inside initScanModal().</li>
<li>FIX: PDF security report printed blank — modal is now temporarily moved to document.body before window.print() and restored afterwards so @media print selectors work correctly.</li>
<li>FIX: “Scanning…” text rendered as garbled bytes (double-encoded UTF-8) — replaced with an animated indeterminate progress bar.</li>
<li>IMPROVE: Scan badge button removed from card header; scan result (shield icon + date + status label) now appears as an inline row inside the card metadata block, consistent with the rest of the card layout.</li>
<li>FIX: “Scan” button font-size reduced to match the rest of the card action buttons (11 px).</li>
<li>IMPROVE: Status labels renamed to “No incidents” / “Incidents detected” (es_ES: “Sin incidencias” / “Incidencias detectadas”), color-coded green and red respectively; all 16 .po/.mo files updated.</li>
<li>NEW: Help tab with 12 documented sections covering all plugin features: Getting started, Uptime monitoring, SSL & domain expiry, Email alerts, Performance charts & statistics, Malware scanning, WHOIS / DNS lookup, Dashboard widget, CSV export / import, Card management, and step-by-step guides for both API keys (Google Safe Browsing and URLhaus).</li>
<li>IMPROVE: Top toolbar now shows a compact API keys notice with direct links to Google Cloud Console and abuse.ch, replacing the old generic description block.</li>
<li>IMPROVE: 21 new i18n strings added to all 16 supported languages.</li>
</ul>
<h3></h3>
<p>Version: 2026-03-25 — v0.9.1</p>
<ul>
<li>NEW: Malware scanning powered by Google Safe Browsing API (free key required) and URLhaus (abuse.ch, no key required). Scan button on each site card opens a security report modal.</li>
<li>NEW: Per-site automatic scan schedule (Never / Daily / Weekly) with WP Cron integration.</li>
<li>NEW: Security report modal with per-source results, threat types, global status, and one-click PDF download (window.print()).</li>
<li>NEW: Google Safe Browsing API Key field in Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Security scanning section.</li>
<li>NEW: 28 new i18n strings added to all 16 supported languages.</li>
</ul>
<h3></h3>
<p>Version: 2026-03-16 — v0.9.1</p>
<ul>
<li>NEW: Performance charts (bar, line, donut) powered by self-hosted Chart.js 4.5.1 (GDPR-safe, no external CDN).</li>
<li>NEW: Response-time history stored in a dedicated database table (<code>lmnsimo_response_log</code>); rolling 500-entry window per site; table removed cleanly on uninstall.</li>
<li>NEW: Statistics modal with per-site total checks, avg / min / max response time and uptime %; accessible from the Monitor tab.</li>
<li>NEW: CSV export and Print/PDF export of the statistics table.</li>
<li>NEW: Period selector (Last 24 h · Last 7 days · Last 30 days) for charts and statistics.</li>
<li>NEW: 25 new strings fully translated across all 16 supported languages; <code>.pot</code> and all <code>.po</code> files updated.</li>
<li>IMPROVE: Charts and statistics modal respect the plugin’s light/dark theme.</li>
</ul>
<h3></h3>
<p>Version: 2026-03-14 — v0.8.1</p>
<ul>
<li>FIX: Fix translation errors.</li>
</ul>
<h3></h3>
<p>Version: 2026-03-14 — v0.8.0</p>
<ul>
<li>NEW: New languages: Arabic, German, Basque, Italian, Japanese, Korean, Dutch, Portuguese, Turkish, Ukrainian, and Simplified Chinese.</li>
<li>NEW: Automatic retry after downtime to avoid false positives.</li>
<li>NEW: Domain expiry notifications.</li>
<li>MAINT: i18n maintained; PHPCS/WPCS compliant.</li>
</ul>
<h3></h3>
<p>Version: 2026-03-03 — v0.7.0</p>
<ul>
<li>NEW: Cards are now wider, displaying more information at a glance.</li>
<li>NEW: Bulk actions now include sorting options: alphabetical (A<span aria-hidden="true" class="wp-exclude-emoji">→</span>Z) and by date added.</li>
<li>NEW: Drag-and-drop card reordering with persistent storage between sessions.</li>
<li>NEW: Pin system — pin any site to keep it fixed at the top, excluded from sorting.</li>
<li>NEW: WHOIS / DNS lookup button on each card: shows IP, DNS provider, NS, MX records, TTL and SSL expiry. Native PHP only, no external APIs or API keys required.</li>
<li>NEW: JetBrains Mono font integrated for monospace elements, self-hosted (GDPR-safe, no external CDN).</li>
<li>IMPROVE: Full PHPCS / WPCS compliance — zero warnings. Proper nonce and capability checks, sanitization and escaping throughout.</li>
<li>IMPROVE: All new strings are fully translatable and i18n-compatible.</li>
<li>IMPROVE: Responsive design preserved and refined across all screen sizes.</li>
<li>FIX: Removed duplicate <code>wp_mail_failed</code> hook and unified error handlers.</li>
<li>FIX: Native WP cron schedules (<code>hourly</code>, <code>daily</code>) are no longer overwritten.</li>
<li>FIX: Added <code>file_exists()</code> check before reading <code>changelog.txt</code>.</li>
<li>FIX: Added missing <code>wp_unslash()</code> in widget preferences handler.</li>
<li>FIX: SSL badge severity now syncs with the user-configured expiry threshold.</li>
<li>FIX: PHPCS <code>MissingTranslatorsComment</code> resolved in alert email builders.</li>
<li>IMPROVE: Removed dead <code>load_textdomain()</code> method.</li>
<li>IMPROVE: Fixed inconsistent indentation in <code>ajax_save_order</code>.</li>
</ul>
<h3></h3>
<p>Version: 2025-10-31 — v0.6.5</p>
<ul>
<li>NEW: Full internationalization (en_US, es_ES, ca, fr_FR).</li>
<li>NEW: Added Catalan (ca) and French (fr_FR) translations.</li>
<li>IMPROVE: Hybrid textdomain loader – automatically loads WP.org language packs and falls back to /languages for ZIP installs.</li>
<li>FIX: Added translators comments for all placeholders to comply with WordPress I18n standards.</li>
<li>FIX: Escaped all dynamic outputs in admin interface and header tips.</li>
<li>MAINT: Removed deprecated load_plugin_textdomain() function per Plugin Check recommendations.</li>
</ul>
<h3></h3>
<p>Version: 2025-10-25 — v0.6.4</p>
<p>– Full sanitization and 0 warnings<br />
– All PHPCS/WPCS warnings removed.<br />
– Full sanitization and reordered nonce verification.<br />
– PHP 8.3+ and WordPress 6.8.3+ compatibility.</p>
<h3></h3>
<p>Version: 2025-10-16 — v0.6.3</p>
<p>UI:<br />
– FIX: Unique IDs in forms (nonces and submit buttons).<br />
– FIX: Console warnings removed for duplicated #_wpnonce and #submit IDs.<br />
– IMPROVE: Accessibility and DOM structure of the admin panel.</p>
<p>Maintenance:<br />
– Version bumped to v0.6.3.</p>
<h3></h3>
<p>Version: 2025-10-15 — v0.6.2</p>
<p>UI:<br />
– IMPROVE: Unified blue header (h2.hndle) with v0.6.2 badge.<br />
– ADD: Lightweight Markdown rendering (titles, lists, <strong>bold</strong>, <code>code</code>, separators).<br />
– KEEP: Consistent padding and structure (.postbox.lm-card > h2.hndle + .inside).</p>
<p>Maintenance:<br />
– Version bumped to v0.6.2.</p>
<h3></h3>
<p>Version: 2025-10-15 — v0.6.1</p>
<p>UI:<br />
– NEW: “Changelog” tab with direct reading of <code>changelog.txt</code>.<br />
– IMPROVE: Body with padding, clean background, and better typographic rhythm.<br />
– IMPROVE: Lightweight Markdown rendering: <strong>bold</strong>, <code>code</code>, titles (# ## ###), and highlighted list prefixes (NEW, FIX, IMPROVE…).</p>
<p>Maintenance:<br />
– Version bumped to v0.6.1.</p>
<h3></h3>
<p>Version: 2025-10-14</p>
<p>Functional:<br />
– SMTP operational: form aligned with real keys (<code>smtp_*</code>) and authentication.<br />
– Keeps SMTP password when saved empty (not overwritten).<br />
– Compatibility with Gmail (app passwords) and Office 365.</p>
<p>UI:<br />
– Listing replaced by responsive card grid (auto-fit/minmax).<br />
– “OK” status (green/white text) and “Down” (red/white text).<br />
– Down sites with red border + soft pulse (respects reduced motion).<br />
– Inline styles cleaned <span aria-hidden="true" class="wp-exclude-emoji">→</span> moved to <code>assets/admin-theme.css</code>.</p>
<p>Maintenance:<br />
– Nonces and handlers verified; no changes in cron or check logic.<br />
– CSV import/export and bulk actions unchanged.</p>
<h3></h3>
<p>Version: 2025-10-07 — v0.6.0</p>
<ul>
<li>NEW: CSV import using the same format as export (adds URLs without removing existing ones).  </li>
<li>NEW: Bulk actions in list (Delete selected) using standard WordPress handlers.  </li>
<li>IMPROVE: Listing UI: master checkbox, batch action bar, and confirmations.  </li>
<li>IMPROVE: Error handling and post-action messages for imports or batch actions.</li>
</ul>
<h3></h3>
<p>Version: 2025-10-06 — v0.5.3</p>
<ul>
<li>NEW: CSV export from the “About Site Monitor” section.  </li>
<li>NEW: “About Site Monitor” section with quick metrics and cron status.  </li>
<li>IMPROVE: Minor cleanup in headers and constants (VERSION).</li>
</ul>
<h3></h3>
<p>Version: 2025-10-06 — v0.5.2</p>
<ul>
<li>NEW: “About Site Monitor” box in the right column of the admin dashboard.</li>
</ul>
<h3></h3>
<p>Version: 2025-10-06 — v0.5.1</p>
<ul>
<li>CHANGE: Default light HTML email + automatic dark mode with <code>prefers-color-scheme</code>.</li>
</ul>
<h3></h3>
<p>Version: 2025-10-06 — v0.5.0</p>
<ul>
<li>NEW: HTML alert email with badges, detail table, and action buttons.  </li>
<li>NEW: Per-user preference in dashboard widget (number of sites displayed).  </li>
<li>IMPROVE: Classic UI improved (light/dark theme, responsive tables and forms).  </li>
<li>FIX: Text contrast in dark theme (labels, cells, and descriptions).</li>
</ul>
<h3></h3>
<p>Version: 2025-10-05 — v0.4.0</p>
<ul>
<li>NEW: Admin page with listing, quick actions, and settings.  </li>
<li>NEW: HTTP and SSL expiry checks with email alerts.  </li>
<li>NEW: Configurable cron (5 min, 15 min, hourly, daily) and “force check” option.</li>
</ul>
<h3></h3>


LMN Site Monitor

A lightweight WordPress uptime and SSL monitoring plugin with email alerts, ECharts performance charts (2D/3D), and dashboard widget.

Jon Otaegi

<p>This simple plugin creates a <code>/health</code> endpoint to let you monitor the status of your WordPress website. The endpoint tests the status of your database connection and returns a <code>200 OK</code> HTTP status code while your page is healthy. You can read more on HTTP status codes at the <a href="https://en.wikipedia.org/wiki/List_of_HTTP_status_codes" rel="nofollow ugc">Wikipedia article</a>.</p>
<p>External tools such as website monitoring services can access the exposed endpoint at regular intervals. This can help you verify that your WordPress website is performing correctly.</p>
<p>You can find more information about the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/health-endpoint-monitoring" rel="nofollow ugc">Health Endpoint Monitoring Pattern</a> at the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/" rel="nofollow ugc">Microsoft Azure Documentation</a> website.</p>
<h4>Development</h4>
<p>This plugin is being developed on <a href="https://github.com/jonotaegi/wordpress-health-endpoint" rel="nofollow ugc">GitHub</a>. If you want to collaborate, feel free to submit pull requests or report bugs on the issue tracker.</p>


Health Endpoint


Security utilities complain the plugin is abandoned.


Update the version number!

Creates a /health endpoint that returns a 200 OK HTTP status code while WordPress is performing correctly.

LMN Site Monitor vs Health Endpoint