Gregory

The Plugin Inspector plugin is an easy way to check plugins installed on your WordPress and make sure that plugins do not use deprecated WordPress functions and some unsafe functions like eval, base64_decode, system, exec, etc. Some of those functions may be used to load malicious code (malware) from the external source directly to the site or WordPress database.
Features
<ul>
<li>Scans plugins for deprecated WordPress functions</li>
<li>Scans plugins for unsafe functions like eval, base64_decode, system, exec, etc.</li>
<li>Checks plugins to find vulnerabilities listed in WPScan Vulnerability Database</li>
<li>Beautiful source code viewer with highlighting</li>
</ul>
Plugin Inspector allows you to view all the deprecated functions complete with path, line number, deprecation function name, and the new recommended function to use. The checks are run through a simple admin page and all results are displayed at once. This is very handy for plugin developers or anybody who want to know more about installed plugins.
All code that uses the deprecated functions should be converted to use its replacement if one exists. Because deprecated functions are no longer supported may be removed from future versions of WordPress.
To check the theme files, please, use Theme Check plugin.
Another reliable plugins from trusted author
<ul>
<li><a href="https://wordpress.org/plugins/wp-cerber/" rel="ugc">Protect sites with Cerber Security plugin</a></li>
</ul>
Protects site against brute force attacks. Restrict login by IP access lists. Limit login attempts. Comprehensive control of user activity.
<ul>
<li><a href="https://wordpress.org/plugins/goo-translate-widget/" rel="ugc">Translate sites with Google Translate Widget</a></li>
</ul>
Make your website instantly available in 90+ languages with Google Translate Widget. Add the power of Google automatic translations with one click.

Plugin Inspector

Every plugin developer should be using this.
Thankyou Gioni.



Beautiful

Very useful for plugin developers to run a quick check of their code throughout development.



Great plugin

Works as advertised. Very scary to see so many plugins have so many security issues. As long as WordPress allows unsafe themes and plugins to get activated, it will never be safe, no matter how much they secure the core.



Very Cool !

Thank you very much for developing this plugin and keeping it up-to date.
Thankful to your efforts and time.



Nice Plugin

Checks plugins for deprecated WordPress functions, known security vulnerabilities and some unsafe PHP functions

Angry Creative

ac-robin

Sammy Nordström

The Angry Creative Inspector, or Angry Inspector for short, will weigh, measure and find possible issues with your WordPress installation. This plugin is especially recommended to maintainers of WordPress installations that needs to continously monitor the health of their sites. Got WP-CLI? Then you may even be able to repair what’s wrong with your WordPress. Read on to learn more.
The inspector has two basic types of inspection routines; regularly repeating inspections run once every 24 hours and inspections triggered by a WordPress hook or user action. Currently, the following regularly running inspection routines are supported out of the box:
<ul>
<li>File permissions check – You didn’t do a chmod 777 on all files, right?</li>
<li>Git modifications check – Is your WordPress revisioned by Git? Then we log uncomitted file changes.</li>
<li>Database collation check – Does your tables have the proper character set and collations?</li>
<li>Site visibility check – Is your website blocking search engines?</li>
</ul>
Then there’s the following WordPress hook or otherwise user action triggered routines:
<ul>
<li>Plugin enabling/disabling – Who disabled or enabled that plugin?</li>
<li>User registrations – Logs all user registrations. No more, no less.</li>
<li>User profile updates – Logs all user profile updates, even password changes.</li>
<li>User capabilitiy changes – Who promoted or demoted that user?</li>
<li>Site registrations – Who created that site in your site network?</li>
<li>Site enabling/disabling – Who disabled or enabled that site in your site network?</li>
<li>Javascript error logging – Keep track of javascript errors, even the ones that appears in your visitor’s browsers.</li>
</ul>
A little configuration is needed to take full advantage of the file permissions and site visibility routines, see installation instructions.
<h4>Doing inspections and viewing inspection logs</h4>
Login to your WordPress site with an administrator account and navigate to the Angry Inspector page under the ‘Settings/AC Inspector’ menu in the WP admin panel (in network admin if multisite). In here you should see the inspection log and may trigger the scheduled inspection routines manually by clicking the “Inspect now” button. Also take note of the “Inspection routines” and “Action routines” tabs where you among other things may change the log level for each routine. Set log level to ‘ignore’ to completely disable a routine.
<h4>Inspect and repair using WP-CLI</h4>
First make sure you have WP-CLI installed, see http://wp-cli.org for instructions. Then navigate your commandline shell to your WordPress install directory and issue the following command:
<pre><code>wp angry-inspector inspect
</code></pre>
You may also call a specific inspection routine like this (use all lowercase name of class or function without “ACI_Routine_”-prefix and replace underscores with dashes):
<pre><code>wp angry-inspector inspect file-permissions
</code></pre>
Any inspection remarks while inspecting with WP-CLI will cause the inspector to look for a possible repair method and prompt you with the question wether you would like to make an attempt at repairing if one is found. Want to skip inspection and go directly for repairing? Here’s how:
<pre><code>wp angry-inspector repair
</code></pre>
To call a repair method for a specific inspection routine:
<pre><code>wp angry-inspector repair site-visibility
</code></pre>
Please note that for utilizing a repair method like the one for file permissions, you need to run the command as super-user (root) and add –allow-root to your WP-CLI commands, like this:
<pre><code>sudo wp angry-inspector repair file-permissions --allow-root
</code></pre>
That’s all there is to it, really. Note that the given log_level option is just a default and may be overridden in the ‘Settings/AC Inspector’ menu in the WP admin panel (in network admin if multisite) like all the other registered inspection routines.
<h4>Creating your own inspection routines</h4>
Are you skilled in the arts of WordPress development and have a need for a check not covered by the above? Then you should extend the inspector with your own inspection routine! It’s really simple. Here’s an example you can put in your theme’s functions.php or in a plugin (after plugins loaded):
<pre><code>if ( function_exists( 'aci_register_routine' ) ) {

 $options = array( 'description' => 'My awesome inspection routine!',
 'log_level' => 'warning' ); // Possible values: notice, warning, fatal, ignore

 $action = 'ac_inspection'; // Default inspection action run once every 24 hrs

 aci_register_routine( 'my_inspection_routine', $options, $action );

 function my_inspection_routine() {

 $inspection_passed = false;

 // Put your inspection code here,
 // then log your results like so:

 if ( !$inspection_passed ) {
 AC_Inspector::log( 'Your WordPress-install did not pass your inspection routine.', __FUNCTION__ );
 }

 // No need to return anything...
 return;

 }

}
</code></pre>
For a bit more advanced developers, you may also register a class as an inspection routine. The syntax and function used is the same, it’s just a matter of passing the class name instead of a function name. The inspector will by default look for a class function called ‘inspect’ to register as inspection method, otherwise you may add ‘inspection_method’ => ‘your_inspection_function’ to the options array to use any class function you like as your inspection method.
The reason why you would want to register a class instead of just a function is that it gives you the ability to extend the settings for your routine beyond just the log level and maybe even add a repair method to call if the inspection fails (WP-CLI only).
First off, here’s how you extend the settings for your routine (inside your inspection routine class):
<pre><code>public static function settings_field( $options, $args = array() ) {

 $routine = $args["routine"];

 /**
 *
 * Input field name convention: aci_options[<?php echo $routine; ?>][field_name]
 * Input field id convention: aci_options_<?php echo $routine; ?>_field_name 
 *
 **/

 ?>

 <tr valign="top">
 <td scope="row" valign="top" style="vertical-align: top;">Example setting field</td>
 <td>
 Here be extra settings field :)
 </td>
 </tr>

 <?php

}

public static function settings( $options ) {

 // Here be code that parses and validates submitted values

 return $options;

}
</code></pre>
Then when you register your routine:
<pre><code>$default_options = array( 'log_level' => 'warning',
 'description' => 'My awesome inspection routine!' );

aci_register_routine( 'my_inspection_routine_class', $default_options );

// Optional extra settings fields
add_action( 'my_inspection_routine_class_settings_field', array( 'my_inspection_routine_class', 'settings_field' ), 10, 2 );
add_filter( 'my_inspection_routine_class_settings', array( 'my_inspection_routine_class', 'settings' ), 10, 1 );
</code></pre>
Your extra settings fields should now be visible in either the Inspection or the Action routines tab under the ‘Settings/AC Inspector’ menu in the WP admin panel (in network admin if multisite).
For a complete example routine class, checkout the routines/wp_mail.php file in the plugin directory.
As for registering a repair function, it works the same as when registering a class with an inspection method. The inspector looks for a class function called ‘repair’ by default. Override with any class function you like by defining ‘repair_method’ => ‘your_repair_function’ in the options array. However, a repair method will never be called automatically. You need WP-CLI ( http://wp-cli.org/ ) installed and issue the appropriate commands, see “Inspect and repair using WP-CLI” above.
Happy… no wait, angry inspecting! 🙂

Angry Creative Inspector

Inspects, logs and with the aid of WP-CLI, it may even repair possible issues with your WordPress installation.

Plugin Inspector vs Angry Creative Inspector