WP Activity Log



Keep an activity log of everything that happens on your WordPress sites and multisite networks with the WP Activity Log plugin to:

  • Ensure user productivity
  • Improve user accountability
  • Ease troubleshooting
  • Know exactly what all your users are doing
  • Better manage & organize your WordPress site & users
  • Easily spot suspicious behavior before there are security problems.

WP Activity Log is the most comprehensive real time user activity and monitoring log plugin. It helps thousands of WordPress administrators and security professionals keep an eye on what is happening on their websites. It is also the most highly rated WordPress activity log plugin and have been featured on popular sites such as GoDaddy, Kinsta and WPBeginner.

Benefits & features | Why choose WP Activity Log | Getting started

Note: The WordPress activity log is FREE. Features such as reports, email notifications, SMS alerts, search and many others are available in the Premium Edition.

Maintained & Supported by WP White Security

WP White Security builds high-quality niche WordPress security & management plugins such as Password Policy Manager for WordPress, a plugin with which you can ensure all your users use strong passwords.

Browse our list of WordPress plugins that can help you better manage and improve the security of your WordPress websites and users.

WordPress Changes & Details the Plugin Keeps a Log Of

As a comprehensive & complete WordPress activity log solution WP Activity Log does not just tell you that a post, a user profile, or an object was updated. It tells you exactly what was changed within the post, the user profile, or the object.

Below is a summary of the changes that the plugin can keep a record of:

  • Post, Page and Custom Post Type changes such as status, content changes, title, URL, custom field & other metadata changes

  • Tags and Categories changes such as creating, modifying or deleting them, and adding or removing them from posts

  • Widgets and Menus changes such as creating, modifying or deleting them

  • User changes such as user created or registered, deleted or added to a site on multisite network

  • User profile changes such as password, email, display name and role changes

  • User activity such as login, logout, failed logins and terminating other sessions

  • WordPress core and settings changes such as installed updates, permalinks, default role, URL and other site-wide changes

  • WordPress multisite network changes such as adding, deleting or archiving sites, adding or removing users from sites etc (activity logs for multisite networks).

  • Plugins and Themes changes such as installing, activating, deactivating, uninstalling and updating them

  • WordPress database changes such as when a plugin adds or removes a table

  • Changes on WooCommerce Stores & Products, Yoast SEO, Advanced Custom Fields (ACF), MainWP and other popular WordPress plugins.

  • WordPress site file changes such as new files are added, or existing ones are modified or deleted.

For every event that the plugin keeps a log of it also reports the:

  • Date & time (and milliseconds) of when it happened,
  • User & role of the user who did the change,
  • Source IP address from where the change happened.

Refer to WordPress activity log event IDs for a complete list of all the changes WP Activity Log can keep a record of.

Extend the Functionality of WP Activity Log

Upgrade to WP Activity Log Premium to:

  • See who is logged,
  • See what everyone is doing in real time,
  • Log off any user with just a click,
  • Generate HTML and CSV reports,
  • Export the activity log in CSV (ideal for integrations),
  • Get notified via email of important changes,
  • Get instant SMS message notifications of critical site changes,
  • Search the activity log using text-based searches,
  • Use built-in filters to fine tune the searches,
  • Store activity log in an external database to improve security,
  • Mirror the WordPress activity logs to Slack, Papertrail, Syslog and other central log management and collaboration solutions,
  • Configure archiving and mirroring of logs.

Refer to the features page for more detailed information on the plugin’s features.

Free and Premium Support

Support for WP Activity Log is free on the WordPress support forums.

Premium world-class support is available via email to all WP Activity Log Premium customers.

Note: paid customers support is given priority and is provided via one-to-one email and over the phone. Upgrade to Premium to benefit from priority support.

Other Noteworthy Features

Apart from the activity logs and the already mentioned features, WP Activity Log has a number of non-logging specific features that make it a complete WordPress logging solution, such as:

Refer to the WordPress activity log plugin datasheet for a complete list of features.

As Featured On:

WP Activity Log in your language!

We need help translating the plugin and the activity log events. Please visit the WordPress Translate Project to translate the plugin. Drop us an email on support@wpwhitesecurity.com to get mentioned in the list of translators below.

WP Activity Log extensions for third party plugins

  • WP Activity Log for WooCommerce: Install this extension to keep a log of changes you and yourr team do in the WooCommerce store settings, orders, products, coupons and much more.
  • WP Activity Log for Yoast SEO: Install this extension to keep a log of the Yoast SEO plugin settings changes, and also of the on-page SEO changes you and your team make in the Yoast SEO meta box.
  • WP Activity Log for WPForms: Install this extension to keep a log of the changes your team does in the WPForms plugin settings, forms, form files, entries (leads) and more.
  • WP Activity Log for bbPress: Intall this extension to keep a log of changes in bbPress forums, topics, bbPress settings and more.
  • Activity Log for MainWP: Install this MainWP extension to keep a log of the MainWP network changes and can see the activity logs of all child sites from one central location – the MainWP dashboard.

Related Links and Documentation

Install WP Activity Log from within WordPress

  1. Visit ‘Plugins > Add New’
  2. Search for ‘WP Activity Log’
  3. Install and activate the WP Activity Log plugin
  4. Allow or skip diagnostic tracking

Install WP Activity Log manually

  1. Upload the wp-security-audit-log directory to the /wp-content/plugins/ directory
  2. Activate the WP Activity Log plugin from the ‘Plugins’ menu in WordPress
  3. Allow or skip diagnostic tracking


  • The WordPress activity logs from where the site administrator can see all the user and site changes.
  • See who is logged in to your WordPress and manage users sessions with Users Sessions Management
  • The plugin settings from where site administrator can configure generic plugin settings such as reverse proxy support, who can manage the plugin etc.
  • The WordPress audit trail settings from where you can configure automatic pruning of alerts, which timestamp should be used and more.
  • Configuring WordPress email and SMS alerts with the Email & SMS Notifications module
  • Search in the WordPress activity log with the use filters to fine tune the search results.
  • The Enable/Disable events section from where Administrators can disable or enable activity log events.
  • The Log Viewer of a Super Admin in a WordPress multisite network installation with the Site selection drop down menu.
  • WP Activity Log is integrated with the built-in revision system of WordPress, thus allowing you to see what content changes users make on your WordPress posts, pages and custom post types. For more information read Keep Record of All WordPress Content Changes
  • Mirror the WordPress activity log to an external solution such as Syslog or Papertrail to centralize logging, ensure logs are always available and cannot be tampered with in the unfortunate case of a hack attack.


Support and Documentation

Please refer to our support pages for all the technical information and product documentation.


26 February 2021
This always good to have a plugin that works an delivers what it is supposed to do. But it is important to have a great support behind. I was getting a fatal error with another plugin and Daniel did an outstanding job in debugging the issue even if the problem was not there. So 5 stars very well deserve! Keep maintaining this level of support.
24 February 2021
We looked all over for a great activity logger and we have to say that this plugin is second to none. It's comprehensive feature list is superb and it just "works". We'd highly recommend it to anyone looking for an activity logger.
17 February 2021
CM Registration Pro When the WP Activity Log plugin is activated the Lost Password function on the CM Registration Pro plugin does not work.
3 February 2021
I don't remember giving this plugin consent to use my email address for marketing purposes. After I deactivated this plugin, I received an email from the developer asking for my feedback. I never gave them my email address.
14 January 2021
Good plugin, but the missing Search option is very problematic in non-Premium version, especially for a Woocommerce site with automated huge catalog updates... (yes I know I can sort the columns). Moreover the plans for Premium are per-year only and very expensive, and there is no lifetime option. @robert681 Please, add Weeks to "Activity log retention".
Read all 317 reviews

Contributors and Developers

“WP Activity Log” is open source software. The following people have contributed to this plugin.


“WP Activity Log” has been translated into 4 locales. Thank you to the translators for their contributions.

Translate “WP Activity Log” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Change Log (2021-02-12)

  • Bug fix
    • Menus sensor causing fatal error when there are changes in a menu (support ticket 1 & 2

4.2.0 (2021-02-11)

Release notes: WP Activity Log 4.2: Support for all date & time formats & other major updates

New features
* New daet & time module that supports any type of date and time format that WordPress supports.
* An all new activity log dashboard widget.
* Added activity log coverage for several new WordPress settings, including automatic updates settings, date and time settings and application passwords.

Improved activity log coverage
* New event IDs for changes in posts
* ID 2129: User added / changed / removed a post’s excerpt
* ID 2130: User added / changed / removed a post’s featured image

  • New event IDs for changes in WordPress settings

    • ID 6035: Changed the “Your homepage displays” WordPress setting
    • ID 6036: Changed the homepage in the WordPress setting
    • ID 6037: Changed the posts page in the WordPress settings
    • ID 6040: Changed the Timezone in the WordPress settings
    • ID 6041: Changed the Date format in the WordPress settings
    • ID 6042: Changed the Time format in the WordPress settings
    • ID 6044: User changed the WordPress automatic update settings
  • New event IDs for application passwords

    • ID 4025: User added / removed application password from own profile
    • ID 4026: User added / removed application password from another user’s profile
    • ID 4027: User revoked all application passwords from own profile
    • ID 4028: User revoked all application passwords from another user’s profile
  • New event IDs for multisite network settings

    • ID 7007: The setting Allow site administrators to add new users to their site was enabled / disabled
    • ID 7008: The value of the Site upload space setting was changed
    • ID 7009: The value of the file size allowed in the site upload space setting was changed
    • ID 7010: Changed the list of allowed file types on the network
    • ID 7011: Changed the value of the maximum upload file size network setting
  • Other new event IDs

    • ID 1010: User requested a password reset.

* Improved coverage of users logins, logout and failed logins activity on custom login pages.
* Standardized the text, format and metadata formatting of all the activity log events.
* Drastically improved the coverage of the activity logs sensors with a number of new event IDs.
* Redesigned the activity logs extension UI.
* Support for URL rewrites and page names (correct page title reported even if the page is a URL rewrite).
* Default activity log SMS notifications template updated.
* Plugins version numbers are now reported in the activity log (for example when a plugin is updated).
* Users who hide the plugin from plugins page now get a notification when a plugin update is available.
* Consolidated the code that generates the activity log messages.
* Merged the Help and Contact us pages in the plugin menu.
* Improved the Reports filters queries to address timeout issues on very big websites.
* Replaced the “SHOW TABLES” queries for much better plugin performance.
* Removed the “/uploads/wp-activity-log/” directory in the free edition. This is only required in premium edition.
* Support for CloudFlare HTTP headers – plugin reports correct IP when behind CloudFlare CDN or firewall (more info on firewalls support)[https://wpactivitylog.com/support/kb/support-reverse-proxies-web-application-firewalls/].
* Reports, Email & SMS notifications and other modules now fully support metadata which contains the space character. For example the user role Shop Manager.
* Remove support for custom sensors. Custom event IDs in activity log now only supported via activity log extension plugin.
* Completely removed the code of the old promotional events (stopped using them in 2017).
* Removed the request log file setting. The request log file can now be enabled via a filter.
* Removed the working directory location setting from plugin settings. Instead introduced a new wp-config.php constant: WSAL_WORKING_DIR_PATH
* Plugin now using WP_CONTENT_DIR instead of ABSPATH were applicable (better supported by WordPress specific web hosts).
* Added event text to event IDs 1001 and 1001.
* The system information file now also includes all of the plugin’s settings saved in the wp_options table.
* Simplified the process that retrieves filnames.
* Several under the hood performance improvements (removed obsolete code, improved sensors etc)

Bug fixes
* Event ID 1000 (user login) still logged when IP address is excluded.
* Change in page template was not being logged with event ID 2048.
* Event ID 2002 was not always reported in some edge cases.
* Plugin’s directory in uploads was not being created when website was hosted on Flywheel and WordPress.com.
* Date & time were missing in CSV reports when using some specific date and time formats in WordPress.
* Super admin role was also shown for administrators on single site setup.
* Plugin was not showing the correct total of sessions when deleting all sessions.
* Plugin was generating a PHP error when a network site was deleted.
* No event was being reported when installing activity log extensions for third party plugins.
* Plugin installation was not running correctly when installed alongside the Website File Changes Monitor plugin.
* The setting to configure the number of failed logins to keep a log of was reset to default each time the settings page was saved.
* Wrong variable was used in licensing notifications, resulting in misleading error responses when license failed to activate.

Refer to the complete plugin changelog for more detailed information about what was new, improved and fixed in previous versions of the WP Activity Log plugin.