{"id":228857,"date":"2025-06-30T12:41:49","date_gmt":"2025-06-30T12:41:49","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/cloudaware-security-audit\/"},"modified":"2025-08-01T11:56:30","modified_gmt":"2025-08-01T11:56:30","slug":"cloudaware-security-audit","status":"publish","type":"plugin","link":"https:\/\/os.wordpress.org\/plugins\/cloudaware-security-audit\/","author":23223685,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.12","stable_tag":"1.0.12","tested":"6.8.5","requires":"6.0","requires_php":"","requires_plugins":null,"header_name":"CloudAware Security Audit","header_author":"Jeroen Hermans","header_description":"Plugin to monitor and audit security aspects of your Wordpress installation","assets_banners_color":"","last_updated":"2025-08-01 11:56:30","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/www.cloudaware.eu","header_author_uri":"","rating":5,"author_block_rating":0,"active_installs":0,"downloads":430,"num_ratings":1,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.10":{"tag":"1.0.10","author":"cloudaware","date":"2025-08-01 11:13:08"},"1.0.11":{"tag":"1.0.11","author":"cloudaware","date":"2025-08-01 11:42:23"},"1.0.12":{"tag":"1.0.12","author":"cloudaware","date":"2025-08-01 11:56:30"},"1.0.9":{"tag":"1.0.9","author":"cloudaware","date":"2025-07-26 22:48:39"}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":1},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3320034,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3320034,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.10","1.0.11","1.0.12","1.0.9"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[8533,600],"plugin_category":[54],"plugin_contributors":[244318],"plugin_business_model":[],"class_list":["post-228857","plugin","type-plugin","status-publish","hentry","plugin_tags-audit","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-cloudaware","plugin_committers-cloudaware"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/cloudaware-security-audit\/assets\/icon-128x128.png?rev=3320034","icon_2x":"https:\/\/ps.w.org\/cloudaware-security-audit\/assets\/icon-256x256.png?rev=3320034","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>This plugin adds auditing functionality to Wordpress. It does this by adding extra \nREST API endpoints. Using these endpoints it is possible to:\n- see the version of core\n- see whether there is an update available for core\n- see what plugins are installed\n- see whether these plugins have been actived\n- see whether these plugins have autoupdate enabled\n- see whether these plugins have updates\n- see a list of vulnerabilities for these plugins\n- see what themes are installed\n- check if 2FA is enabled\n- see MD5 hashes of all theme and plugin folders<\/p>\n\n<p>For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint.\nThis will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the\ncronjob.<\/p>\n\n<h3>Dependancies<\/h3>\n\n<p>For getting vulnerabilities of Wordpress components this plugin can use the WPVulnerability plugin \n(https:\/\/wordpress.org\/plugins\/wpvulnerability\/). If this plugin is installed, it will be used, otherwise this plugin\nwill work without the information from WPVulnerabilty plugin.<br \/>\nWithout installing this dependancy no data is transferred to WPVulnerability. Please see https:\/\/www.wpvulnerability.com\/privacy\/\nfor more information.<\/p>\n\n<h3>External services<\/h3>\n\n<p>In order to determine the latest version of installed software components this plugin uses the following\nexternal services:\n<em>GitHub<\/em>\nTerms of Service: https:\/\/docs.github.com\/en\/site-policy\/github-terms\/github-terms-of-service\nPrivacy Statement: https:\/\/docs.github.com\/en\/site-policy\/privacy-policies\/github-general-privacy-statement\n- Releases list from ImageMagick github repository (https:\/\/api.github.com\/repos\/ImageMagick\/ImageMagick\/releases)\n- Releases list from curl github repository (https:\/\/api.github.com\/repos\/curl\/curl\/releases)\n<em>Slider Revolution<\/em>\nTerms of Service: https:\/\/www.sliderrevolution.com\/terms\/\nPrivacy Statement: https:\/\/www.sliderrevolution.com\/terms\/privacy\/\n- Changelog documentation from Slider Revolution website (https:\/\/www.sliderrevolution.com\/documentation\/changelog\/)<\/p>\n\n<p>Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services.\nSpecifically no version information is transmitted to external services.<\/p>\n\n<p>If you fill out an external url in the callback URL field in the settings, a Wordpress cronjob will send a POST request \nwith the audit data to this URL daily.<\/p>\n\n<!--section=installation-->\n<p>Install the plugin via the Wordpress \"Plugins\" menu in Wordpress and then \nactivate using the blue \"Activate\" button.\nYou can add a new user with restrictive role to your Wordpress installation from within the plugin settings page\nby clicking on a button.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id='is%20it%20safe%3F'><h3>Is it safe?<\/h3><\/dt>\n<dd><p>We use as little rights as possible to get the data from Wordpress.<br \/>\nThe API endpoint does not include any POST, PUT or DELETE methods, so it is read-only.\nIf you do see a problem with this plugin, please contact us:\nhttps:\/\/cloudaware.eu\/.well-known\/security.txt<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>v1.0.12<\/h4>\n\n<ul>\n<li>Format latest PHP version properly<\/li>\n<\/ul>\n\n<h4>v1.0.11<\/h4>\n\n<ul>\n<li>fix for php test (missing latest version)<\/li>\n<\/ul>\n\n<h4>v1.0.10<\/h4>\n\n<ul>\n<li>SQL server version check<\/li>\n<li>disk space check<\/li>\n<li>cron information<\/li>\n<li>file uploads enabled in PHP config?<\/li>\n<li>timezone check<\/li>\n<\/ul>\n\n<h4>v1.0.9<\/h4>\n\n<ul>\n<li>Code cleanup<\/li>\n<li>Add hashing of theme and plugin folders<\/li>\n<li>Add button to setting to add new user and role to system<\/li>\n<li>Cleaner initialisation, deinitialisation<\/li>\n<\/ul>\n\n<h4>v1.0.8<\/h4>\n\n<ul>\n<li>Added check if 2FA is enabled through Wordfence plugin<\/li>\n<\/ul>\n\n<h4>v1.0.7<\/h4>\n\n<ul>\n<li>Added documentation, removed creation of user<\/li>\n<\/ul>\n\n<h4>v1.0.6<\/h4>\n\n<ul>\n<li>Added more configuration checks<\/li>\n<\/ul>\n\n<h4>v1.0.5<\/h4>\n\n<ul>\n<li>Added more config checks<\/li>\n<li>Added new role for use in API (no more external plugin needed)<\/li>\n<\/ul>\n\n<h4>v1.0.4<\/h4>\n\n<ul>\n<li>Removed curl dependancy<\/li>\n<li>Better error handling<\/li>\n<\/ul>\n\n<h4>v1.0.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<\/ul>","raw_excerpt":"This plugin adds auditing functionality to Wordpress.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/228857","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=228857"}],"author":[{"embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/cloudaware"}],"wp:attachment":[{"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=228857"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=228857"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=228857"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=228857"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=228857"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/os.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=228857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}