About this plugin
WebOsmotic Diagnostics Dashboard is a WordPress diagnostics toolkit that goes beyond the default Site Health screen. It runs a collection of checks across your WordPress environment and presents the findings through a dedicated dashboard with a health score and prioritised recommendations. The plugin helps identify issues related to: PHP version compatibility WordPress core version and pending updates Plugin health, including pending updates and inactive plugins Theme health, including pending updates and unused themes REST API availability File permissions on critical paths WP-Cron and scheduled tasks Server configuration, including memory, execution time, upload limits, and PHP extensions Security hardening, including HTTPS, debug output, the file editor, and the default “admin” user Database and performance, including object cache, autoloaded options, transients, and post revisions Debug log issues WordPress core file integrity Deprecated and incompatible code Known vulnerabilities, when WPScan integration is configured WebOsmotic Diagnostics Dashboard provides a dedicated dashboard where scan results are grouped by severity and accompanied by explanations and recommendations. The plugin also integrates its checks with the native WordPress Site Health screen. Background scans can be scheduled, and scan results are stored so previous results can be reviewed and compared. Features Dedicated WebOsmotic Diagnostics Dashboard dashboard Health score from 0-100 Categorised diagnostic checks Critical, recommended, and passing statuses Background scheduled scans Scan history and reports Markdown, JSON, and printable HTML report exports Selected one-click remediation actions Configuration snippets and relevant admin links Optional email and webhook alerts for new critical issues Optional WPScan vulnerability checking WordPress.org core file integrity checking Individual check enable/disable controls Developer filters for extending the check system One-click fixes Where supported, WebOsmotic Diagnostics Dashboard provides one-click remediation actions for issues such as: Clearing expired transients Flushing the object cache Regenerating rewrite rules Deleting unused themes Deleting inactive plugins Destructive actions require explicit confirmation before they are performed. Extending The plugin provides a filter for registering custom checks. Example: add_filter( 'wodd_registered_checks', function ( $checks ) { $checks[] = 'My_Custom_Check'; return $checks; } ); Custom checks can extend the built-in WODD_Check class and use the plugin’s standard result helpers. Configuration WebOsmotic Diagnostics Dashboard → Settings provides configuration options for: Background scan schedule Scan history retention Alert email Alert webhook WPScan API token Individual check enable/disable settings For locked-down or version-controlled environments, the following values can also be defined in wp-config.php : define( 'WODD_VULN_API_KEY', 'your-token' ); define( 'WODD_ALERT_EMAIL', '[email protected]' ); define( 'WODD_ALERT_WEBHOOK', 'https://hooks.slack.com/services/XXX' ); When configured through constants, the corresponding settings are treated as locked values. Available filters include: wodd_vuln_api_key wodd_alert_email wodd_alert_webhook wodd_registered_checks External Services WebOsmotic Diagnostics Dashboard can communicate with the following external services when the related functionality is used. WPScan Vulnerability Database API Service: https://wpscan.com/api The optional Known Vulnerabilities check uses the WPScan API to look up installed WordPress plugins, themes, and WordPress core against its vulnerability database. The service is contacted only when a WPScan API token has been configured. The plugin sends component slugs and version numbers required for the vulnerability lookup. Terms: https://wpscan.com/terms/ Privacy: https://automattic.com/privacy/ WordPress.org Checksums API Service: https://api.wordpress.org The Core File Integrity check uses the WordPress.org API to obtain official checksums for the installed WordPress version and locale. The request uses the WordPress version and locale required to retrieve the appropriate checksums. Privacy: https://wordpress.org/about/privacy/ Alert Webhook If you configure an alert webhook, WebOsmotic Diagnostics Dashboard sends alert information to the exact endpoint you provide when a new critical issue is detected. The webhook destination is controlled by the site administrator. Documentation Full documentation: https://webosmotic.com/webosmotic-diagnostics-dashboard/documentation/ Plugin website: https://webosmotic.com/webosmotic-diagnostics-dashboard/