CloudAware Security Audit

This plugin adds auditing functionality to WordPress. It does this by adding extra

REST API endpoints. Using these endpoints it is possible to:

– see the version of core

– see whether there is an update available for core

– see what plugins are installed

– see whether these plugins have been actived

– see whether these plugins have autoupdate enabled

– see whether these plugins have updates

– see a list of vulnerabilities for these plugins

– see what themes are installed

– check if 2FA is enabled

– see MD5 hashes of all theme and plugin folders

For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint.

This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the

cronjob.

Dependancies

For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin

org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin

will work without the information from WPVulnerabilty plugin.

Without installing this dependancy no data is transferred to WPVulnerability. com/privacy/

for more information.

External services

In order to determine the latest version of installed software components this plugin uses the following

external services:

GitHub

com/en/site-policy/github-terms/github-terms-of-service

com/en/site-policy/privacy-policies/github-general-privacy-statement

com/repos/ImageMagick/ImageMagick/releases)

com/repos/curl/curl/releases)

Slider Revolution

com/terms/

com/terms/privacy/

com/documentation/changelog/)

Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services.

Specifically no version information is transmitted to external services.

If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request

with the audit data to this URL daily.