404ops Activity Log

Record security-relevant site events in your own database: logins and failed logins, post and page changes, plugin and theme installs and updates, user and role changes, settings changes and more. Each event stores its time, the acting user, a truncated IP address, the event type, the object affected and a summary. Retention is set in days, 90 by default, and purged daily.

Features

• Logs logins, failed logins and logouts, and profile, email, password and application-password changes. Passwords and password hashes are never stored.
• Logs post and page create, edit, trash, restore and delete, plugin and theme changes, WordPress core updates, and file editor saves (the file and its size, never its content).
• Logs user create, delete and role changes, and what a role may do.
• Logs changes to the General, Writing, Reading, Discussion and Permalinks settings, menus, widgets and media, and content and personal-data exports and erasures.
• With WooCommerce active, also records order status and product price and stock changes.
• A filterable log viewer with free-text search, pagination and CSV export.
• A daily summary email digest.
• A read-only REST route and WP-CLI commands for administrators.
• Exclude chosen users or roles from the log, and import history from other activity-log plugins.
• IP addresses are truncated by default. Country and city come from a MaxMind database you supply, looked up on your own server.
• Works with WordPress's personal-data export and erasure tools.

Free version

The free version is available on WordPress.org once it is listed there.