Title: Avenixr – Security and Risk Monitor Author: avenixr Published: 20 June 2026 Last modified: 20 June 2026 --- Search plugins ![](https://ps.w.org/avenixr-security-and-risk-monitor/assets/banner-772x250.png? rev=3579461) ![](https://ps.w.org/avenixr-security-and-risk-monitor/assets/icon-256x256.png?rev =3579461) # Avenixr – Security and Risk Monitor By [avenixr](https://profiles.wordpress.org/avenixr/) [Download](https://downloads.wordpress.org/plugin/avenixr-security-and-risk-monitor.1.0.1.zip) * [Details](https://en-gb.wordpress.org/plugins/avenixr-security-and-risk-monitor/#description) * [Reviews](https://en-gb.wordpress.org/plugins/avenixr-security-and-risk-monitor/#reviews) * [Installation](https://en-gb.wordpress.org/plugins/avenixr-security-and-risk-monitor/#installation) * [Development](https://en-gb.wordpress.org/plugins/avenixr-security-and-risk-monitor/#developers) [Support](https://wordpress.org/support/plugin/avenixr-security-and-risk-monitor/) ## Description Avenixr – Security and Risk Monitor helps administrators review the security posture of installed WordPress plugins from a single dashboard. The plugin analyzes installed plugins by matching them with WordPress.org metadata and publicly available vulnerability intelligence. It presents the results in an easy-to-review admin dashboard table with risk indicators and update context. This plugin does not perform code-level scanning. It is designed as an informational monitoring tool to support better decision-making. #### Features * Detects installed plugins and their active or inactive status. * Matches plugins with official WordPress.org metadata when available. * Displays installed version, latest version, and version gap. * Shows WordPress compatibility signals such as “tested up to” values. * Identifies known vulnerabilities associated with plugin versions. * Displays vulnerability details in a dedicated admin modal. * Calculates a heuristic security risk score based on available public data. * Includes summary cards for total, high-risk, critical, and safe plugins. * Uses caching to reduce repeated external requests. * Provides a manual cache purge option from the admin screen. #### Current Scope Version 1.0.1 focuses on plugin monitoring only. WordPress core, themes, and PHP environment checks are not included in this release. #### External Services This plugin connects to external services to retrieve plugin metadata and vulnerability intelligence. These requests are made from the WordPress admin area when an administrator opens the plugin monitor dashboard or uses the cache purge option and the dashboard data is refreshed. The plugin caches responses to reduce repeated requests. 1. WordPress.org Plugin Information API Service provider: WordPress.org What the service is used for: Retrieve official WordPress.org plugin metadata, including latest version, tested-up-to value, minimum WordPress requirement, and last updated date. What data is sent and when: The plugin sends the installed plugin slug to WordPress.org when the monitor dashboard refreshes data for that plugin. No personal data, site URL, usernames, email addresses, passwords, or license keys are intentionally sent by this plugin. Service URL: https://api.wordpress.org/plugins/info/1.2/ Privacy policy: https://wordpress.org/about/privacy/ Terms/license information: https:// wordpress.org/about/license/ 2. WPVulnerability (public data source) Service provider: WPVulnerability, by ROBOTSTXT What the service is used for: Retrieve public vulnerability intelligence for installed plugin slugs so the dashboard can show known vulnerability information and risk indicators. What data is sent and when: The plugin sends the installed plugin slug to WPVulnerability when the monitor dashboard refreshes data for that plugin. No personal data, site URL, usernames, email addresses, passwords, or license keys are intentionally sent by this plugin. Service URL used by this plugin: https:// www.wpvulnerability.net/plugin/{plugin-slug}/ Project website: https://www.wpvulnerability. com/ Privacy policy: https://www.wpvulnerability.com/privacy/ Terms and conditions: https://www.robotstxt.es/legal/ These external requests are used only to enrich plugin information displayed in the admin dashboard. ## Screenshots [⌊Plugins Monitor dashboard showing summary cards, version gaps, compatibility signals, vulnerability status, and plugin risk scores.⌉⌊Plugins Monitor dashboard showing summary cards, version gaps, compatibility signals, vulnerability status, and plugin risk scores.⌉[ Plugins Monitor dashboard showing summary cards, version gaps, compatibility signals, vulnerability status, and plugin risk scores. ## Installation 1. Upload the `avenixr-security-and-risk-monitor` folder to the `/wp-content/plugins/` directory, or install the plugin through the WordPress plugins screen. 2. Activate the plugin through the `Plugins` screen in WordPress. 3. Open `Plugins Monitor` from the `Tools` menu in WordPress admin. 4. Review plugin status, update gaps, compatibility data, vulnerabilities, and risk indicators. 5. Use the `Purge Cache` button to refresh cached data manually. ## FAQ ### What does this plugin analyze? This version analyzes installed plugins only. ### Does the plugin modify or update plugins automatically? No. The plugin is read-only and does not make any changes to installed plugins. ### What happens if a plugin does not have WordPress.org metadata? The dashboard will indicate that no official metadata or compatibility information is available. ### Does the plugin contact external services? Yes. It requests plugin metadata from WordPress.org and vulnerability intelligence from WPVulnerability. See the External Services section for details. ### Does a higher risk score mean the plugin is vulnerable? Not necessarily. The risk score is a heuristic indicator based on multiple signals such as known vulnerabilities, update status, and metadata context. It should not be considered a definitive security assessment. ## Reviews There are no reviews for this plugin. ## Contributors and Developers “Avenixr – Security and Risk Monitor” is open source software. The following people have contributed to this plugin. Contributors * [ avenixr ](https://profiles.wordpress.org/avenixr/) [Translate “Avenixr – Security and Risk Monitor” into your language.](https://translate.wordpress.org/projects/wp-plugins/avenixr-security-and-risk-monitor) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/avenixr-security-and-risk-monitor/), check out the [SVN repository](https://plugins.svn.wordpress.org/avenixr-security-and-risk-monitor/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/avenixr-security-and-risk-monitor/) by [RSS](https://plugins.trac.wordpress.org/log/avenixr-security-and-risk-monitor/?limit=100&mode=stop_on_copy&format=rss). ## Change Log #### 1.0.1 * Initial public release. * Added plugin monitoring dashboard. * Added WordPress.org metadata matching. * Added vulnerability intelligence integration. * Added version gap and compatibility display. * Added vulnerability details modal. * Added heuristic risk scoring and summary cards. * Added caching with manual purge option. ## Meta * Version **1.0.1** * Last updated **4 months ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.0.7** * PHP version ** 7.4 or higher ** * Language * [English (US)](https://wordpress.org/plugins/avenixr-security-and-risk-monitor/) * Tags * [plugin monitor](https://en-gb.wordpress.org/plugins/tags/plugin-monitor/)[plugin security](https://en-gb.wordpress.org/plugins/tags/plugin-security/) [security](https://en-gb.wordpress.org/plugins/tags/security/)[wordpress security](https://en-gb.wordpress.org/plugins/tags/wordpress-security/) * [Advanced View](https://en-gb.wordpress.org/plugins/avenixr-security-and-risk-monitor/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/avenixr-security-and-risk-monitor/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/avenixr-security-and-risk-monitor/reviews/) ## Contributors * [ avenixr ](https://profiles.wordpress.org/avenixr/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/avenixr-security-and-risk-monitor/)