Ártica PFMS

Pandora FMS WP is a monitoring plugin for WordPress. 100% free and OpenSource. It collect basic information from your WordPress and allow Pandora FMS to retrieve it remotely using a REST API. Some examples are new posts, comments or user logins in last hour. It also monitor if new plugins or themes has been isntalled, if a new user has been created of if a bruteforce login attempt has been made recently. You can expand easily by defining custom SQL queries to monitor other plugins or create your own SQL to collect information and sent it to Pandora FMS.
This plugin has been developed by <a href="https://pandorafms.com" title="Pandora FMS team" rel="nofollow ugc">Pandora FMS team</a>. Sourcecode is available at <a href="https://github.com/articaST/pandorafms-wp/" title="https://github.com/articaST/pandorafms-wp/" rel="nofollow ugc">https://github.com/articaST/pandorafms-wp/</a>
Sections:
<ul>
<li>
Dashboard: here, you can view a summary of the items monitored: plugins updated, version of WP and if they need an update, total users, new posts in last 24hr, new replies in 24hr and other checks.
</li>
<li>
Audit records: You can view a table with user access data: users, IP, if the login has been correct or incorrect and how many times, and the date of the last access. Also can see if new plugins or themes have been installed and the date on which these events occurred.
</li>
<li>
General Setup: Set general options:
<ul>
<li>API Settings
<ul>
<li>List of IPs with access to the API.</li>
<li>Set the time to show new data in the API.</li>
</ul>
</li>
<li>Delete Logs Time
<ul>
<li>Clean fields of filesystem table with status deleted for data older than X days</li>
<li>Remove the status ¨new¨ on fields of filesystem table for data older than X days</li>
</ul>
</li>
<li>Custom SQL queries</li>
</ul>
</li>
</ul>
<h3>Prerequisites</h3>
<ul>
<li>
PandoraFMS-WP requires (optionally) a plugin for REST API, called “JSON REST API”. Only needed if you want to integrate the monitoring/status information of the WP site into a central management console with Pandora FMS. This is an optional feature, you can manage all information from WordPress itself.
</li>
<li>
If your WordPress version is lower than 4.7, you must have the <a href="https://es.wordpress.org/plugins/rest-api/" title="WP REST API (v2)" rel="nofollow ugc">WP REST API (v2)</a> plugin installed to use the API. (This plugin requires version 4.6 or higher).
</li>
</ul>
<h3>Limitations</h3>
<ul>
<li>WP Multisite not supported on this version. </li>
<li>To use the WordPress API REST, you need version 4.6 or higher.</li>
</ul>

Pandora FMS WP – Monitoring WordPress from Pandora FMS

Do as expected. Useful for monitoring low level wordpress.

It works

Plugin for monitoring Wordpress with Pandora FMS. Collect data from your wordpress and make it accessible from outside using the REST API.

WP Fix It - WordPress Experts

Guard Dog Security & Site Lock helps WordPress administrators keep their installations clean and secure.
Over time, it’s common for orphaned plugin or theme folders to build up in your wp-content directory. These stray folders may be the result of incomplete uninstallations, leftover files from updates, or abandoned code that was never fully removed. While they might seem harmless at first glance, they can create confusion, waste storage space, and in some cases pose a serious security risk.
Hackers often exploit these forgotten folders by hiding backdoors or malicious scripts inside them, knowing that site owners rarely check for or even notice such files. An orphaned folder can act as an open invitation for unauthorized access, giving attackers a quiet place to operate undetected. 
By identifying and removing these unused folders, you not only keep your WordPress installation clean and organized but also close off potential entry points that could otherwise be used to compromise your site. The Guard Dog Security plugin makes this process simple, scanning your directories to uncover anything that doesn’t belong and highlighting it for review before it becomes a problem.
SITE LOCK – Only found here!
One of the easiest ways for a hacked user to damage your site is by adding or changing the physical files that WordPress relies on. If attackers can place hidden scripts, modify plugin or theme files, or inject malicious code, they gain the power to compromise your entire site.
The Site Lock feature in Guard Dog Security protects against this by allowing you to lock all folders and files in your installation and make them read-only. Once locked, no new files can be added, no existing files can be changed, and nothing can be removed. This ensures that the foundation of your WordPress site remains untouched, even if someone attempts to exploit vulnerabilities or gain access.
When updates or changes are needed, you can unlock the system with a single action, perform your updates, and then reapply the lock. This simple but powerful safeguard gives you complete control over your site’s file structure and adds a layer of security that goes beyond what most WordPress plugins offer.
This plugin scans the following directories: 
– WordPress Root (main installation folder) 
– wp-content Folder (wp-content/) 
– Plugins Folder (wp-content/plugins/) 
– Themes Folder (wp-content/themes/) 
– Uploads Folder (wp-content/uploads/) 
– htaccess files 
– Database tables
Guard Dog Security takes a disk-first approach. It crawls your entire WordPress installation and inventories every single file and folder, not just plugins and themes. Everything is presented in a clear interface where you can open items to view their contents, mark them to ignore, delete them if they are not needed, or download a copy for backup or investigation.
Because it works directly from what is actually on disk, you are never limited by what WordPress shows in the admin. You can quickly spot unfamiliar files, tidy up leftovers from old plugins or themes, and pull down suspicious items for review, all without leaving the dashboard. It provides a fast and transparent way to see exactly what is on your server and take action immediately.
Key Features 
– Finds plugin folders not listed on the Plugins screen (hidden or orphaned) 
Scans for plugin folders that exist in your WordPress installation but aren’t showing on the Plugins screen. 
– Detects missing plugin folders referenced by active or installed plugins 
Identifies when active or installed plugins are missing their associated folders. 
– Lists top-level folders and files in key WordPress directories 
Displays top-level files and folders within critical WordPress directories for easy auditing. 
– Fully lock all folders and files to make them read only 
Lets you make all folders and files read-only for maximum protection. 
– Configure security headers 
Adds and manages HTTP security headers to harden your site against common threats. 
– Configure user security 
Provides settings to strengthen account and login security for WordPress users. 
– Infection scanner 
Scan all site files to find any suspicious files 
– Zero configuration setup 
Enable scheduled scans to find any suspicious files and send you an email report 
– As many emails receipts as you like 
Works right after install and activation—no complex setup required.

Guard Dog Security & Site Lock

Audit your site to keep WordPress clean and secure. Enable our one-of-a-kind SITE LOCK to give your site the ultimate security.

Pandora FMS WP – Monitoring WordPress from Pandora FMS vs Guard Dog Security & Site Lock