Matt Watson

WordPress Audit provides information, advice and plugin recommendations across a number of key areas, including:
<ul>
<li>Shortcodes: Find all of the shortcodes that have been added to content within your site. Using the dashboard you can quickly click through and edit them.</li>
<li>Unpublished Content: View if you have any posts that have not been published</li>
<li>Content Revisions</li>
<li>Short Content: Identify short content within your site</li>
<li>HTTPS: Discover any non-HTTPS links in your database</li>
<li>Plugins: Review inactive plugins</li>
<li>Themes: Review inactive themes</li>
<li>Slugs: Identify duplicate slugs</li>
<li>Database: Check your database indexes</li>
<li>Images: View unattached images</li>
<li>Test Content: Identify all test content that may be published by mistake</li>
<li>Security: Increase your website security</li>
</ul>

WordPress Audit

WPZOOM

User History tracks all changes made to user profiles and displays a complete history log on the user edit page. It also lets admins lock or unlock user accounts, change usernames, monitor login/logout activity, manage active sessions, and search for users by their previous details.
Profile Change Tracking:
<ul>
<li>Track Profile Changes – Automatically logs changes to username, email, display name, first/last name, nickname, website, bio, and role</li>
<li>Password Change Logging – Records when passwords are changed (without storing any password data)</li>
<li>See Who Made Changes – Each log entry shows whether the user changed their own profile or if an admin made the change</li>
<li>IP Address Tracking – Records the IP address for each change (can be disabled for GDPR compliance)</li>
<li>Search by Previous Values – Find users on the All Users page by their old email or username</li>
<li>Clear History – Admins can clear the history log for any user</li>
</ul>
Login & Session Monitoring:
<ul>
<li>Login/Logout Tracking – Records successful logins, logouts, and failed login attempts with date, IP address, and browser info</li>
<li>Failed Login Attempts – Track failed login attempts for existing user accounts</li>
<li>Active Sessions – View all active WordPress sessions for any user, including login time, IP address, browser, and expiry</li>
<li>Log Out Everywhere – Destroy all active sessions for a user with one click</li>
<li>Browser & OS Detection – Automatically detects and displays the browser and operating system from the user agent</li>
</ul>
Lock/Unlock User Accounts:
<ul>
<li>Lock User Accounts – Prevent users from logging in by locking their account</li>
<li>Instant Session Termination – Locked users are logged out immediately and all active sessions are destroyed</li>
<li>Application Password Blocking – Locked users cannot authenticate via application passwords (REST API, XML-RPC)</li>
<li>Status Column – See which users are locked at a glance with a status column on the All Users page</li>
<li>Bulk Lock/Unlock – Lock or unlock multiple users at once from the All Users page</li>
<li>Row Actions – Quickly lock or unlock individual users from the All Users list</li>
<li>Locked Users Filter – Filter the All Users list to show only locked accounts</li>
<li>Custom Lock Message – Set a custom message shown to locked users on the login screen (Settings > User History)</li>
<li>WP-CLI Access – Locked users can still be managed via WP-CLI</li>
</ul>
Admin Tools:
<ul>
<li>Change Username – Allows admins to change usernames directly from the user edit page (WordPress normally doesn’t allow this)</li>
<li>Delete User Button – Quick access button to delete a user directly from their profile page</li>
<li>Data Retention – Automatically delete old logs after a configurable number of days (default: 30 days)</li>
<li>Clear All Logs – Bulk delete all history logs for every user from the settings page</li>
</ul>
Privacy & Compliance:
<ul>
<li>IP Tracking Toggle – Enable or disable IP address recording for GDPR compliance (Settings > User History)</li>
<li>Configurable Retention – Set how long logs are kept (1-365+ days, or keep forever)</li>
<li>Automatic Cleanup – Daily cron job removes logs older than the configured retention period</li>
</ul>
Compatibility:
<ul>
<li>Multisite Compatible – Works with WordPress multisite installations, including super admin username changes</li>
<li>Members Plugin Compatible – Correctly tracks role changes when using the Members plugin for multiple role assignments</li>
<li>Migration from Lock User Account plugin – Automatically migrates locked users from the Lock User Account plugin</li>
</ul>
Use Cases:
<ul>
<li>Find customers who changed their email after making a purchase</li>
<li>Track when and who changed user roles</li>
<li>Audit user profile modifications for security</li>
<li>Monitor login activity and detect suspicious access</li>
<li>View and manage active user sessions</li>
<li>Allow username changes without database access</li>
<li>Lock compromised or suspended accounts instantly</li>
<li>Temporarily disable user access without deleting accounts</li>
</ul>

WPZOOM User History – Lock Users & Change Usernames

Track changes made to user accounts, lock/unlock users, change usernames, and monitor login activity.

WordPress Audit vs WPZOOM User History – Lock Users & Change Usernames