videowhisper

VideoWhisper Security Audit creates WordPress site health, exposure, vulnerability, integrity, readiness, and performance reports for site administrators. The plugin is designed to help administrators review site activity and configuration with AI agents or by using the built-in admin report.
The free plugin is read-only. It reports findings and does not perform cleanup, quarantine, updates, file changes, role changes, or other remediation actions.
Main features:
<ul>
<li>Admin Scan tab with scan mode selector, cooldown-aware Run Scan button, scan date, report summary, and report findings.</li>
<li>Importance-based scan modes: full, critical/high/medium, and critical-only.</li>
<li>Report filters for issues only or all check results, including passed informational checks when available.</li>
<li>JSON and plain-text Markdown report output.</li>
<li>Optional token-protected REST report endpoint.</li>
<li>Optional token-protected MCP endpoint for read-only AI-agent reports.</li>
<li>Read-only integration with <a href="https://wordpress.org/plugins/videowhisper-site-manager/" rel="ugc">VideoWhisper AI Site Manager – Using ChatGPT Claude Codex</a> when both plugins are active.</li>
<li>Separate REST and MCP enable/disable settings.</li>
<li>Generated local tokens with rotation controls and last-used metadata.</li>
<li>REST/MCP per-minute rate limiting and optional exact IP allowlist.</li>
<li>Admin scan cooldown, hourly scan limit, and separate agent scan cooldown.</li>
<li>Category toggles for security, integrity, performance, readiness, commerce, community, and backup checks.</li>
<li>Redacted AI report defaults, with optional exact version and path disclosure for MCP reports.</li>
<li>Optional WPVulnerability API lookups for installed plugin vulnerability data.</li>
<li>Disclaimers in the admin report and Agents tab about report limits, sensitive information, and third-party AI analysis.</li>
</ul>
<h4>Local checks</h4>
Security Audit currently checks local WordPress signals including:
<ul>
<li>Plugin and theme updates.</li>
<li>Inactive plugins.</li>
<li>Administrator account count.</li>
<li>Expected WordPress database tables.</li>
<li>Administrator role capabilities.</li>
<li>Upload directory writability.</li>
<li>Debug log file presence.</li>
<li>Git metadata in the web root.</li>
<li>XML-RPC availability.</li>
<li>Common homepage security headers.</li>
<li>Autoloaded option size.</li>
<li>Expired transient count.</li>
<li>WP-Cron disabled state.</li>
<li>Permalink structure.</li>
<li>Search engine visibility setting.</li>
<li>Privacy Policy page presence.</li>
<li>Basic WooCommerce page readiness when WooCommerce is active.</li>
<li>Optional WPVulnerability plugin vulnerability lookups.</li>
</ul>
<h4>Agent and API reports</h4>
REST and MCP endpoints are disabled by default. When enabled, Security Audit automatically generates local tokens. Anyone with a valid token can read the selected report until the token is rotated, so treat tokens as sensitive secrets.
The REST report endpoint supports:
<ul>
<li><code>key</code>: generated REST token. A bearer token can also be used.</li>
<li><code>mode</code>: <code>full</code>, <code>important</code>, <code>critical</code>, or <code>changed</code>.</li>
<li><code>report</code>: <code>issues</code> or <code>all</code>.</li>
<li><code>format</code>: omit for JSON, or use <code>markdown</code> for plain Markdown output.</li>
</ul>
The MCP endpoint supports read-only tools for security summary, vulnerability, exposure, integrity, performance risk, readiness, and Markdown audit reports. Tool arguments include <code>mode</code> and <code>report</code>.
Endpoint protection controls include:
<ul>
<li>REST/MCP requests per minute per IP.</li>
<li>Separate agent scan cooldown.</li>
<li>Optional exact IPv4/IPv6 allowlist.</li>
<li>Token rotation.</li>
</ul>
<h4>Important limitations and disclaimers</h4>
Security Audit reports are informational only. Findings and AI-ready reports may be incomplete, inaccurate, outdated, or unsuitable for a specific site or legal situation.
Security Audit does not provide legal advice, compliance certification, professional security advice, malware cleanup, incident response, or a guarantee that a site is secure. Administrators should verify findings and consult an experienced security, technical, or legal provider before making important changes.
REST and MCP reports may expose sensitive operational information, including site configuration, component versions, possible vulnerabilities, paths, and other details. Enable agent endpoints only when you understand where the data will be sent and who can access the token.
Third-party AI agents may produce incomplete, incorrect, unsafe, or unsuitable recommendations. Review all recommendations before acting and do not perform destructive changes without backups and appropriate professional review.
This plugin is not a firewall, malware cleaner, legal compliance tool, vulnerability scanner guarantee, or replacement for backups, security monitoring, dedicated scanners, or experienced administrators.
<h4>External services</h4>
By default, Security Audit does not call external vulnerability services.
If the administrator enables WPVulnerability lookups, the plugin sends installed plugin slugs to the public WPVulnerability API at <code>https://www.wpvulnerability.net/</code> to retrieve vulnerability data. No API key is required for normal component lookups. Responses are cached locally. See:
<ul>
<li>https://www.wpvulnerability.com/</li>
<li>https://docs.wpvulnerability.com/</li>
<li>https://www.wpvulnerability.com/privacy/</li>
<li>https://www.wpvulnerability.com/license/</li>
</ul>
During scans, Security Audit may also make a local HTTP HEAD request to the site’s own homepage URL to inspect response headers. This request is sent to the configured site URL, not to a third-party vulnerability service.

VideoWhisper Security Audit

AI-ready WordPress site health and security reports for administrators, with optional read-only REST and MCP access.

Freemius

Gaucho Plugins

Brandon Ernst

alpipego

<h4>🛡️ THE ESSENTIAL TECHNICAL HUD FOR EVERY WORDPRESS PROFESSIONAL</h4>
Stop digging through hidden menus or leaving insecure <code>phpinfo()</code> files on your server. <a href="https://versioninfoplugin.com/" title="Visit the Version Info website" rel="nofollow ugc">Version Info</a> is the essential technical dashboard that brings your site’s most vital environment data directly into your daily workflow — the admin footer, the admin bar, or a dedicated dashboard widget.
Whether you’re a freelancer managing dozens of client sites, a developer debugging a complex plugin conflict, or an agency maintaining a portfolio of high-value properties, having instant access to your PHP version, MySQL version, WordPress version, and web server type is a mission-critical utility.
Version Info has been trusted by WordPress professionals since 2015 and is now supercharged with a complete PRO + Agency suite for serious site monitoring. Learn more at <a href="https://versioninfoplugin.com/" title="Version Info official website" rel="nofollow ugc">versioninfoplugin.com</a>.
<h4>✨ What Makes Version Info Different?</h4>
Most server info plugins show you a wall of data you don’t need. Version Info is designed around the data you actually use every day, placed exactly where you need it — no extra pages, no bloat, no performance impact.
<ul>
<li>Zero Configuration — Install, activate, done. Versions appear in your footer immediately.</li>
<li>Surgical Precision — Only shows WP, PHP, MySQL, and Server versions. No fluff.</li>
<li>Performance First — Uses native WordPress APIs. Literally zero impact on page load.</li>
<li>Developer Hooks — Every data point is filterable for custom integrations. See the <a href="https://docs.versioninfoplugin.com/advanced-configuration-hooks-and-filters" title="Version Info developer documentation" rel="nofollow ugc">developer docs</a>.</li>
</ul>
<h4>🚀 Core Features (100% Free, Forever)</h4>
These features will always be free. No bait-and-switch.
<ul>
<li>🛠️ Admin Footer Display — See WordPress, PHP, MySQL, and Web Server versions at the bottom of every admin page. Includes a one-click update link when a new WP version is available.</li>
<li>🚦 WP-Admin Bar Nodes — Pin your version stack to the admin bar for instant visibility while navigating between pages, posts, and settings.</li>
<li>📊 Dashboard Widget — A dedicated “At a Glance” style widget showing your complete technical stack. Enable it via Screen Options.</li>
<li>🔄 Core Update Alerts — Automatically compares your WP version with the latest available and shows an update link right in the footer.</li>
<li>💻 Server Detection — Instantly identify Apache, Nginx, LiteSpeed, or any other server software without leaving WordPress.</li>
<li>🌐 Translation Ready — Fully localized with translations in 13+ languages including Spanish, German, French, Japanese, Chinese, and more. <a href="https://translate.wordpress.org/projects/wp-plugins/version-info/" title="Translate Version Info on WordPress.org" rel="nofollow ugc">Help translate</a>.</li>
</ul>
<h4>🔥 PRO Plan — Advanced Site Intelligence</h4>
Unlock real-time performance monitoring, environment safety, and proactive health checks. Built for developers who take their stack seriously.
<a href="https://versioninfoplugin.com/pricing" title="Version Info PRO pricing" rel="nofollow ugc">Upgrade to PRO →</a> Starting at $19/year.
🖥️ Live System Resources HUD in the Dashboard Widget
Turn your dashboard widget into a full server-health command center. One toggle lights up 30+ live stats in clean groups:
<ul>
<li>Identity — Environment, Server Location, OS, Hostname, IP, Port, Document Root, Uptime</li>
<li>Live Resources — CPU + Memory bars with sparklines, PHP memory, Disk usage</li>
<li>Database — Size with data/index split, tables, max connections, max packet</li>
<li>PHP — Runtime limits, loaded modules</li>
<li>WP Status — Core / plugin / theme updates, cron, Health Advisor counts</li>
<li>Diagnostics — HTTPS, WP_DEBUG, object cache, timezones</li>
</ul>
The modern replacement for the abandoned wp-server-stats plugin.
📈 Live CPU & RAM Sparklines
Visual bars plus inline sparklines showing the last ~7.5 minutes of activity — direction-of-travel at a glance, not just current values. Recolors green → orange → red at 70% / 90% thresholds. Works on Linux, Windows, and every managed host we’ve tested.
🌍 Server Location — 4 Pluggable Providers
Know exactly which datacenter your site lives in. Pick the provider that fits your privacy needs:
<ul>
<li>Version Info Geolocation (anonymous) — our own Cloudflare Worker, logs nothing, richest data</li>
<li>Cloudflare cdn-cgi/trace — country-only, zero auth</li>
<li>ip-api.com — free legacy provider</li>
<li>MaxMind GeoLite2 — best ASN accuracy (license-key)</li>
</ul>
30-day cache + a one-click “Detect now” button. <a href="https://docs.versioninfoplugin.com/pro-features-server-location/" rel="nofollow ugc">Provider comparison →</a>
💾 Database Size + Connection Limits
Know how bloated your database is before it becomes a problem. Tracks <code>data</code> vs <code>index</code> size for every WP table, plus DB max connections and max packet — critical for WooCommerce stores hitting connection caps during Black Friday. 12-hour cache + “Scan Now” for fresh data.
🛰️ wp-server-stats Parity — and Beyond
Closes the feature gap with the abandoned 2017-era wp-server-stats plugin — without inheriting its <code>shell_exec()</code> dependency that breaks on managed hosts. Adds:
<ul>
<li>Server OS, Hostname, IP, Port, Document Root (path-masked)</li>
<li>Server Uptime (formatted)</li>
<li>PHP Modules accordion (every loaded extension with version)</li>
<li>Disk Usage bar</li>
<li>One-click “Purge VI Caches” button</li>
</ul>
🚨 Smart Environment Indicators
Never accidentally run a destructive query on production again. High-visibility color badges in the admin bar:
<ul>
<li>🔴 Red — Production</li>
<li>🟠 Orange — Staging</li>
<li>🟢 Green — Development / Local</li>
</ul>
Auto-detects Bedrock, Kinsta, WP Engine, Pantheon, Flywheel, and core <code>WP_ENVIRONMENT_TYPE</code>. Optional admin-bar border highlight matches the environment color.
📜 Version History Audit Log
A persistent timeline of every shift in your WordPress core, PHP, MySQL, plugin, and theme versions. Know exactly when and what changed for fast troubleshooting. Last 50 entries; auto-pruned.
🛡️ Health Advisor
Proactive alerts that predict problems before they happen. Checks your PHP and MySQL versions against known End-of-Life dates and flags critical security risks. Integrates with the native WordPress Site Health screen.
📤 JSON System Info Export
One-click download of your entire technical stack as structured JSON. Perfect for support tickets, host conversations, and pre-migration archives. Includes WordPress config, PHP + extensions, database details, active theme, and every active plugin with version.
<a href="https://docs.versioninfoplugin.com/pro-features" title="Version Info PRO documentation" rel="nofollow ugc">See the full PRO feature documentation →</a>
<h4>🏛️ Agency Plan — The Command Center for Client Portfolios</h4>
Everything in PRO, plus enterprise-grade tools for agencies, freelancers, and hosting companies managing multiple sites.
<a href="https://versioninfoplugin.com/pricing" title="Version Info Agency pricing" rel="nofollow ugc">Upgrade to Agency →</a> Starting at $49/year.
🏷️ Full Agency White-Labeling
Make it your plugin. Replace “Version Info” and “Gaucho Plugins” everywhere — plugins list, widget, admin bar, footer, settings page. Hide Freemius branding. Optionally:
<ul>
<li>Lock the White Label tab to a single admin so clients can’t undo your branding</li>
<li>Hide every in-plugin docs link sitewide</li>
</ul>
👥 Role-Based Admin Visibility
Keep client dashboards clean. A checkbox matrix controls exactly which WordPress roles see version info in the admin bar, footer, and widget. Default: administrators only.
🌐 Multisite Network Dashboard
A single page under Network Admin → Settings showing WP / PHP / MySQL versions and database size for every site on the network. Cached, capped at 100 sites for performance.
📧 System Change Email Alerts
Get notified the instant something changes — PHP version flips, WP core updates, any plugin or theme version shift. Configurable recipient list, per-component toggles, sensible defaults.
🔍 PHP Error Log Dashboard
Debug without FTP or SSH. View the last 100 lines of your <code>debug.log</code> directly inside WordPress. Efficient tail reading, automatic path masking, ZIP download for offline analysis.
<a href="https://docs.versioninfoplugin.com/agency-features" title="Version Info Agency documentation" rel="nofollow ugc">See the full Agency feature documentation →</a>
<h4>🎯 Real-World Use Cases</h4>
“The Support Hero” 
A client reports a bug. Instead of asking for their login credentials, you ask them to screenshot their admin footer. You instantly know their PHP version, MySQL version, WordPress version, and web server — without ever logging into their site.
“The WooCommerce Specialist” 
Black Friday is coming. You use Database Tracking to monitor table size growth during the high-traffic event. When <code>wp_options</code> grows 300% overnight, you catch the autoloaded transient bloat before it takes down the store.
“The Agency Owner” 
You hand over a beautifully built site to a high-ticket client. With White-Labeling, the client never sees “Gaucho Plugins” — they see your agency name everywhere. With Role-Based Visibility, the client’s editors see a clean dashboard without confusing server information.
“The Safety-First Developer” 
You manage staging and production environments for the same client. The bright red “Production” badge in your admin bar prevents you from ever accidentally running a migration script on the live site. The admin bar highlight makes the environment unmistakable.
“The Managed Hosting Reseller” 
You run 40 sites on a Multisite installation. The Network Dashboard gives you a single page showing WP, PHP, and MySQL versions across every site — perfect for planning bulk upgrades. When a host updates PHP overnight, the Email Alert hits your inbox before the first support ticket arrives.
“The Remote Debugger” 
A client’s site throws a white screen. You open the Error Log Dashboard directly in wp-admin — no FTP client, no SSH terminal. The last 100 lines show a fatal error from a plugin update. The Version History tab confirms the plugin updated 10 minutes ago. Root cause found in under 60 seconds.
“The wp-server-stats Replacer” 
You’ve been using the abandoned WP Server Health Stats plugin since 2017 because nothing modern replaced it — until now. The Version Info PRO dashboard widget gives you CPU/RAM bars with live sparklines, disk usage, database size with <code>data</code> vs <code>index</code> split, server OS / hostname / IP / port / uptime / location — all in one widget, on every dashboard load, refreshed via the WordPress Heartbeat API. No <code>shell_exec()</code> (so it works on Kinsta, WP Engine, Cloudways), no abandoned dependencies, no rebuilds required.
<h4>⚡ Performance & Architecture</h4>
Version Info is built with performance as the #1 priority:
<ul>
<li>Transients API — All resource-heavy metrics (CPU, RAM, DB size) are cached. CPU/RAM uses 60-second TTL; database size uses 12-hour TTL.</li>
<li>Heartbeat API — Live resource updates use the native WordPress Heartbeat, ensuring data refreshes only when the admin page is active.</li>
<li>Provider Pattern — A <code>ProviderInterface</code> abstracts all detection logic, making it trivial to add custom providers for AWS, Kinsta, or any host-specific API.</li>
<li>Hook-First Architecture — Every data point fires a WordPress filter (<code>version_info_wp_version</code>, <code>version_info_php_version</code>, etc.) and every render point fires an action. Extend anything without editing core files. See the <a href="https://docs.versioninfoplugin.com/advanced-configuration-hooks-and-filters" title="Version Info hooks reference" rel="nofollow ugc">hooks reference</a>.</li>
<li>Broad Compatibility — The codebase deliberately avoids language features that would lock out legacy hosts, so the plugin still installs on PHP 5.6+ and WordPress 4.7+ (which is, after all, who this plugin is built for). Modern PHP is auto-detected and used where available.</li>
<li>WordPress Coding Standards — Follows WPCS, uses proper escaping, nonce verification, capability checks, and prepared SQL queries throughout.</li>
</ul>
<h4>🌍 Works With Your Stack</h4>
Version Info auto-detects and works seamlessly with:
<ul>
<li>Hosts: Kinsta, WP Engine, Pantheon, Flywheel, Cloudways, SiteGround, and any standard LAMP/LEMP host</li>
<li>Environments: Bedrock, Trellis, Local by Flywheel, MAMP, WAMP, Docker, DevKinsta</li>
<li>Servers: Apache, Nginx, LiteSpeed, OpenLiteSpeed, IIS</li>
<li>Multisite: Full network-level support with dedicated Network Admin page (Agency)</li>
<li>Translations: 13+ languages with full RTL support</li>
</ul>
<h4>📣 What WordPress Professionals Are Saying</h4>
<blockquote>
“I install this on every client site. It saves me at least 5 minutes per support ticket.” — ★★★★★
“The environment badges alone are worth the upgrade. I’ll never accidentally nuke production again.” — ★★★★★
“Finally, a server info plugin that isn’t bloated with stuff I don’t need.” — ★★★★★
</blockquote>
<a href="https://wordpress.org/support/plugin/version-info/reviews/?filter=5" title="Version Info 5-star reviews" rel="ugc">Read more reviews →</a>
<h4>🔗 Resources & Links</h4>
<ul>
<li><a href="https://versioninfoplugin.com/" title="Visit the Version Info website" rel="nofollow ugc">Version Info Website</a></li>
<li><a href="https://docs.versioninfoplugin.com/" title="Version Info documentation" rel="nofollow ugc">Documentation & Guides</a></li>
<li><a href="https://versioninfoplugin.com/pricing" title="Version Info pricing" rel="nofollow ugc">PRO & Agency Pricing</a></li>
<li><a href="https://docs.versioninfoplugin.com/advanced-configuration-hooks-and-filters" title="Version Info hooks reference" rel="nofollow ugc">Developer Hooks Reference</a></li>
<li><a href="https://wordpress.org/support/plugin/version-info/" title="Version Info support" rel="ugc">Support Forum</a></li>
<li><a href="https://translate.wordpress.org/projects/wp-plugins/version-info/" title="Translate on WordPress.org" rel="nofollow ugc">Translate Version Info</a></li>
</ul>
<h4>🆘 Support</h4>
Free support is available in the <a href="https://wordpress.org/support/plugin/version-info/" rel="ugc">WordPress.org support forum</a>. PRO and Agency customers can use <a href="https://versioninfoplugin.com/" rel="nofollow ugc">priority support through versioninfoplugin.com</a>.
<h3>GAUCHO PLUGINS PORTFOLIO</h3>
<a href="https://wordpress.org/plugins/payment-page/" rel="ugc">Payment Page</a>: Start accepting payments in a beautiful payment form in less than 60 seconds
<a href="https://wordpress.org/plugins/bsd-woo-stripe-connect-split-pay/" rel="ugc">Split Pay Plugin</a>: Split WooCommerce payments across multiple connected Stripe accounts.
<a href="https://wordpress.org/plugins/login-stripe-customer-portal/" rel="ugc">Login for Stripe Customer Portal</a>: Create an Account login area for your Stripe customers.
<a href="https://wordpress.org/plugins/gyta-buyback/" rel="ugc">Gyta Buyback</a>: Create a trade-in / buyback business using WooCommerce.
<a href="https://wordpress.org/plugins/version-info/" rel="ugc">Version Info</a>: Show WP, PHP, MySQL & Web Server Versions in the WP-Admin Dashboard.
<a href="https://wordpress.org/plugins/wp-stripe-global-payments/" rel="ugc">China Payments Plugin</a>: Accept WeChat Pay and Alipay payments from Chinese customers.
<a href="https://wordpress.org/plugins/blocked-in-china/" rel="ugc">Blocked in China</a>: Check if your website is available in the Chinese mainland.
<a href="https://wordpress.org/plugins/speed-in-china/" rel="ugc">Speed in China</a>: Check your website’s speed in the Chinese mainland.

Version Info – Server Health Monitor, PHP & MySQL Version Display, Environment Indicators

This plugin is just as much as it has to be. Couldn't have written it better ;)

Simple, but very useful

Live CPU/RAM/disk monitoring with sparklines, server location auto-detect, uptime, environment indicators, version history, PHP/MySQL EOL alerts.

VideoWhisper Security Audit vs Version Info – Server Health Monitor, PHP & MySQL Version Display, Environment Indicators