WP Activity Log plugin changelog

This is the plugin’s changelog, which is mainly a detailed list of all the plugin changes and bug fixes introduced in every version update. Refer to the WP Activity Log release notes for a high level overview of what is new and improved with every plugin version update.

5.6.5 (2026-07-21)

New activity log event ID

• Event ID 6073 – Requested to change the Administrator email address. The event records the current and requested addresses across single sites, multisite networks, and individual subsites.

Security fixes

• Fixed a CSRF vulnerability reported by Levon Balyan.

Improvements

• Hardened request handling in Premium user session management and removed obsolete code.
• Enforced nonce verification before legacy settings save and import callbacks can run.
• Updated AI connector events 6081 and 6082 to High severity.
• Replaced the large post-update changelog banner with a smaller, dismissible notification linking to the changelog.
• Hardened Activity Log AJAX handlers with stricter nonce verification, capability checks, and input validation.
• Added standard UTM tracking parameters to the Melapress link in the plugin header and menu.
• Updated the bundled jQuery UI CSS for improved compatibility with the version included in WordPress.

Bug fixes

• Fixed Activity Log icon alignment issues introduced by WordPress 7.0.1 styling changes.
• Fixed broken WP Activity Log styling in the MainWP dashboard after updating to WordPress 7.0.
• Fixed clearing Activity Log search results from MainWP redirecting users outside the site.
• Fixed the Redirection sensor returning null from the rest_dispatch_request filter when REST route callbacks use closures. This could discard responses supplied by WordPress or other plugins, including optimized WooCommerce REST responses. Thanks to Paul from WooCommerce POS for reporting this issue.
• Fixed invalid MySQL connection settings being saved under Integrations → Connections. New connections that fail validation are no longer saved, while failed edits preserve the previous settings and display the MySQL error. Connection attempts to unreachable hosts are now limited by PHP’s default_socket_timeout.
• Fixed the Archiving tab’s Test Connection button incorrectly reporting success when the database connection failed.
• Fixed mirroring exclusion selectors remaining open when multiple selectors were expanded.
• Fixed the custom Slack recipient for built-in notification event 2046 not being saved or used.
• Fixed Activity Log search returning no results in the Free edition in some environments.
• Fixed Administrator email change events on multisite subsites. Requested changes are recorded with event 6073, while confirmed changes continue to use event 6003 and are associated with the correct subsite.

5.6.4 (2026-06-2)

New WordPress AI Connector events (from WordPress 7.0)

• Added four new event IDs (6081 to 6084) to track the WordPress 7.0 AI connectors, which are:
  • ID 6081 – AI connector connected
  • ID 6082 – AI connector disconnected
  • ID 6083 – AI master switch enabled/disabled
  • ID 6084 – AI plugin feature enabled/disabled

Security fixes

• Fixed a stored XSS vulnerability in the MainWP integration.
• Fixed a PHP object injection issue related to the handling of failed login event data.

Improvements

• Updated plugin copy, and reorganized the menu for a cleaner, more consistent layout.
• Updated the setup wizard to include information about related plugin features.
• Added information in the search placeholder about additional capabilities.
• Added inline references on selected events to highlight additional activity that can be tracked.
• Removed the “red dot badge” in the plugin menu that previously displayed the banner count.
• Updated the following third party libraries; Moment.js and bootstrap-select.
• Applied additional security hardening and input sanitization across the plugin.

Bug fixes

• Fixed a fatal TypeError in the WPForms sensor (event_form_saved) triggered when the Divi page builder fired a heartbeat autosave on a WPForms form, caused by preg_match() running before its subject was validated as a non-null string.
• Fixed wizard radio buttons not rendering correctly under WordPress 7.0.
• Fixed an alignment issue on the User Sessions page under WordPress 7.0.
• Fixed an alignment issue with the “Add note” button on the Log Viewer page under WordPress 7.0.
• Removed an obsolete notification shown when the license was disconnected from the plugin.

5.6.3.1 (2026-05-1)

Plugin improvement & Enhancement

• Added support for additional AWS CloudWatch regions in the mirroring configuration.

Security fix

• Fixed an XSS vulnerability responsibly reported by Daroo.

Bug fix

• Fixed an issue with the CSS styles being used inside the red notification badge displayed next to the plugin title in the side-menu.

5.6.3 (2026-04-28)

Plugin improvements & Enhancements

• Improved deactivation feedback data collection with additional logic checks.
• Improved translation support for JavaScript strings, ensuring all plugin text in JS files is available for translation.
• Updated the jquery-validation library to the latest version 1.22.1.
• Updated developer dependencies and resolved flagged security advisories to keep the codebase aligned with current security standards.
• Updated links and help text in the plugin’s Help & Contact Us page.

Bug fixes

• Fixed event ID 4002 which was not capturing secondary role changes correctly.
• Fixed additional minor warnings appearing in certain server environments.
• Fixed IP address lookup links in the activity log viewer now correctly pointing to the lookup provider’s website.

5.6.2 (2026-04-01)

New event IDs for Learndash

• ID 11020 – A course was viewed.
• ID 11021 – A course was opened in the editor.
• ID 11215 – A lesson was viewed.
• ID 11216 – A lesson was opened in the editor.

New functionality

• Implemented a plugin deactivation form to allow users to share their feedback.

Plugin improvements & Enhancements

• Twilio and Slack API credentials (Account SID, Auth Token, Bot Token) can now be defined as PHP constants in wp-config.php. When a constant is defined, it takes priority over the value stored in the database, reducing exposure in the event of a database compromise.
• Added the seconds in the report’s time column for improved precision and consistency with other export formats.
• Added enabled/disabled status meta field to plugin and theme update event IDs (5004, 5031) so users can see whether the plugin or theme was active at the time of the update.
• Improved Slack integration test button behavior: the button now correctly reflects failure when the Slack API responds with {"ok": false}, and a proper error message is shown instead of a false success indicator.
• Renamed the “Send test slack” button to “Send test Slack message”. Added a warning callout when encrypted API key constants are in use, and refined other button labels and validation messages in the Slack settings UI.
• wsal_generate_reports_cron and all other WSAL custom cron events are now properly cleared on plugin deactivation, preventing WordPress from logging Cron reschedule event error: invalid_schedule errors after deactivation.
• Weekly automated reports now correctly respect the “Week Starts On” setting configured under Settings > General, ensuring reports are scheduled from the correct start day of the week.
• Reduced noise from event ID 2055 triggered during collaborative post editing (introduced in WordPress Core 7.0 beta). Events are now better filtered to avoid generating hundreds of redundant log entries during a single collaborative editing session.
• Security hardening across the plugin: fixed multiple WordPress coding standards violations, added missing direct file access protection guards, addressed unescaped output (XSS exposure), added CSRF protection to notice dismissal AJAX calls, and resolved other issues identified via a WordPress Core PCP audit.
• License declarations in classes/Helpers/ PHP file headers have been reviewed and corrected to ensure consistency with the plugin’s GPL v3 license.

Bug fixes

• Fixed: Fatal error Call to a member function get_name() on bool in WooCommerce_Sensor_Helper_Second::event_order_items_removed() when order items have no associated WooCommerce product.
• Fixed: Fatal error triggered when restoring a WooCommerce order via the admin.
• Fixed: Rank Math sensor store_old_values() and store_old_values_delete() were registered using add_action() instead of add_filter() on update_post_metadata and delete_post_metadata. Both callbacks also declared void return types and did not return $check, silently resetting the filter chain and causing short-circuits from third-party plugins (e.g. Events Calendar Pro) to be ignored.
• Fixed: PHP Warning Undefined array key "alert_id" in class-mainwp-helper.php on line 535 when using the MainWP integration.
• Fixed: Several small UI/UX issues with the settings export/import feature.
• Fixed: Removed some orphaned code leftovers from obsolete event ID 2106.
• Fixed: Added additional JS-side tag validations in the mirroring setup wizard, to prevent edge-case issues involving certain special characters.

5.6.1 (2026-03-05)

Plugin improvements & Enhancements

• Multisite network performance improvement: plugin now caches plugin activation data, rather than querying it on every request. The cache is updated only when a plugin is activated or deactivated (events 5001/5002).
• Changed the link and text of the Melapress Login Security plugin promotion in event ID 1002.
• Improved the survey banner behaviour. It now appears after 15 days on new installs, and on upgrades it shows right away; dismissing it via the “x” will show it again on the next upgrade; completing the survey suppresses it on upgrades.

Bug fixes

• Fixed: Email summary reports displaying incorrect usernames for users with numeric-only login names, caused by array_slice() mishandling numeric string keys.
• Fixed: Fixed a date discrepancy issue in the summary emails where the previous day’s date is shown instead of the correct one.
• Fixed: Connections in multisite installs not appearing after being saved, caused by the get_options_by_prefix function still reading from the old options location after connections were migrated to wp_sitemeta in 5.6.0.
• Fixed: Edge case where a fresh plugin install could cause a fatal error and crash the site during the migration routine, triggered by a null value being passed to count() in the legacy notifications migration class.
• Fixed: Fatal error crashing MainWP dashboard when accessing the plugin, caused by a call to switch_to_blog() in the settings helper, which is a multisite-only function being called in a non-multisite context introduced in 5.6.0.
• Fixed: JavaScript error thrown by the Copy Event Data extension when the activity log contains no events, caused by the script attempting to process an undefined event message on page load.
• Fixed: PHP notices thrown in WordPress 6.9.1 caused by the wsal-event-notes and wsal-copy-event-data scripts declaring darktooltip as a dependency before it was registered.
• Fixed: an edge case fatal error on sites without LearnDash installed, caused by class-notices.php referencing the LearnDash_Helper class unconditionally without first checking whether the LearnDash plugin was active.
• Fixed: HTML entity appearing literally in the Date column of CSV exports instead of rendering as a space before the AM/PM indicator.

5.6.0 (2026-01-29)

NEW: LearnDash support

• WP Activity Log can now keep a log of 100+ user actions and settings changes in LearnDash. Refer to the LearnDash activity log event IDs for the complete list.

Plugin improvements & Enhancements

• User login events now include the login URL as metadata. Mainly event ID’s 1000, 1002, 1003, 1004, 1005.
• Moved all the plugin’s settings into the sitemeta table on multisite installs. Credit to Nico Mollet for the recommended fix.
• Reviewed and improved input sanitization across all user and third-party data handling points.
• Promotional security tip in event IDs (such as event ID 1002) is now excluded from CSV exports, reports, and mirrored logs, ensuring promotional messages only appear in the activity log viewer interface.
• Added a setting in the Syslog exporter for the logs to be compliant with the RFC 5424 syslog format. Setting is disabled by default.
• Suppressed the activity log events generated automatically during the plugin install, to reduce event noise.
• Replaced the “esc_html_e” with the “esc_html__” in some scenarios, as an improvement.
• Updated event ID’s 5032, 5033, 6079 to correctly attribute them to “System” instead of the logged-in user, and changed the IP address to server IP, reflecting that the update checks were run by the system, and that they were not user actions.
• Improved the “View Activity Log” link in the Paid Memberships Pro member area to open a filtered activity log showing only the selected user’s activity.
• Removed the title from the “disable this type of event” hover over tooltip in the activity log viewer for cleaner UI presentation.
• Test email notifications have been updated to use the same HTML format and templates as regular notification emails, allowing users to preview both email deliverability and template appearance instead of receiving plain text test messages.
• Removed obsolete “Modify” button from event IDs 1002, 1003, 6007, and 6023 tooltips.

Security fix

• Fixed a reported XSS. Credits to Steven Julian.

Bug fixes

• Fixed PHP 8.3 TypeError in WooCommerce product editing caused by strpos() receiving a false value instead of string in class-woocommerce-sensor-helper-second.php line 290, which was preventing users from editing products and causing critical failure notices.
• Fixed email validation in periodic reports configuration to accept longer custom domain TLDs, such as .digital.
• Fixed a conflict when WP Activity Log is network-activated on multisite installations alongside SearchWP.
• Fixed the Activity Log menu icon styling on multisite sub-sites by correcting a CSS selector.
• Fixed an issue where the search field resizing on focus caused the search button to shift, sometimes making it unclickable.
• Fixed a number of PHP warnings in the WP 2FA sensor by resolving undefined variable issues in class-wp-2fa-sensor.php that occurred during WP 2FA plugin installation where WP Activity Log was already activated.
• Fixed a fatal PHP TypeError in the IP address normalization module where str_replace() received a boolean false instead of a string during a cron job execution on newer PHP versions.
• Fixed a PHP warning for undefined array key “Network” in class-wp-plugins-themes-sensor.php line 603, that occurred in edge cases during plugin/theme operations on live websites.
• Fixed event ID 5004 (when WP Activity Log plugin is updated) that was not being mirrored to Syslog connections.
• Fixed a number of PHP warnings that occurred when attempting to read properties (ID and post_title) on null objects in the WooCommerce activity log sensor.
• Fixed an edge where false positive event ID 9119 was triggering when WooCommerce product low stock threshold remained unchanged

5.5.4 (2025-11-19)

Plugin & functionality improvements

• Improved error handling in the Notifications module, mainly now reporting user-readable errors for the users.
• Updated the plugin logo in the WordPress admin menu (correct size, colours, and positioning).
• Added the Black Friday / Cyber Monday campaign banners (21 Nov – 1 Dec).
• Improved UI styling for error modal in Notification settings.
• Adjusted the build process to remove duplicated return true statement in class-wsal-freemius-free.

Bug fixes

• Fixed a typo in the description of event ID 5523.
• Fixed additional minor PHP warnings reported in certain environments.

5.5.3 (2025-10-23)

Bug fix

• Fixed an edge case fatal error that could occur on the plugins page due to a null value being passed to strpos() in the plugin and theme activity log sensor, for event ID 5032 – Plugin update available.

5.5.2 (2025-10-22)

New activity log event IDs for Paid Memberships Pro

• ID 9501 – A membership level was created.
• ID 9503 – A membership level was updated.
• ID 9502 – A membership level was permanently deleted.
• ID 9504 – A membership level was assigned to a user.
• ID 9505 – A membership level was removed from a user.
• ID 9606 – An order for a member was created.
• ID 9507 – An order for a member was updated.
• ID 9508 – An order for a member was deleted.
• ID 9509 – A member completed checkout.

New activity log event IDs for WordPress

• ID 5032 – A plugin update available
• ID 5033 – A theme update available
• ID 6079 – WordPress core update available.
• ID 2134 – User accessed a password protected post.
• ID 2135 – Failed attempt to access a password protected post.

New features

• New buttons in the activity log viewer to copy event details to the clipboard.
• Added a Members Activity panel area inside the Members details page in Paid Memberships PRO that allows the admin to view the activity of each user.

Plugin & functionality improvements

• Updated the translations build process so that .po files are now merged with new strings without removing existing translations.
• Organized the Report sections settings in alphabetical order.

Bug fixes

• Fixed a conflict with User Switch plugin which was breaking the process of switching back and forth through users.
• Fixed a number of spelling mistakes in the wizard.
• Fixed an issue where certain Yoast SEO plugin event IDs would not remain enabled after a user enables them and saves the settings.

5.5.1 (2025-09-11)

Plugin & functionality improvements

• Added the option to add notes to activity log events in the archive database.
• Improved the text and the behaviour of the “Add note” modal in the activity log viewer.

Bug fixes

• Fixed: Event ID 5000 was incorrectly reported in the logs in some cases on some particular setups.
• Fixed: Activity log event’s notes not migrated to the archive database during archiving of logs.
• Fixed: “Upload theme” dialog not working when WP Activity Log is installed.

5.5.0 (2025-09-03)

New feature

• Add notes to activity log events – as an administrator, you can add your own notes to events in the activity log (Premium).

New activity log event IDs

• ID 1011 – User was denied access to a page
• ID 6080 – WordPress core translation files updated
• ID 5034 – Translation files for a plugin updated
• ID 5035 – Translation files for a theme updated

Plugin improvements & enhancements

• Improved support for SQLite (allows for live preview of the plugin).
• Added a preview link for the plugin-related event IDs in the activity log, which opens a modal that highlights the plugin’s page on the WordPress repository.
• Improved the help text and hints on the Settings page for the “From” email address and display name email settings.
• Added a dedicated port field in the Connections settings of MySQL (external and archiving database settings).
• Added the number of events purged from the activity log by the plugin in event ID 6034
• Updated the default “From display name” used in plugin emails to wp-activity-log@[your-website-domain].
• Increased the Slack channel name input limit in the Notifications module to 20 characters.
• Improved the wording of event IDs 1002 (failed login) and 1003 (failed logins for non existing user).
• Added the Comment Status metadata to comment-related event IDs, mainly from 2090 up to 2097, and 2099.

Bug fixes

• Fixed a number of edge case JavaScript errors that could prevent saving changes on the Notifications page.
• Resolved an issue in the search module that hindered searches for event IDs that are longer than five digits.
• Improved the handling of plugin changes via ManageWP. Event ID 5000 (new plugin installed) and event ID 5005 (new theme installed) now report correctly.
• Corrected a bug that prevented event ID 6005 from being logged when permalinks were altered.
• Fixed the CSV export of search results that previously exported fewer rows than actually found.
• Addressed a cron-related issue that prevented clearing expired user sessions.
• Expanded the TLD length limit in the setup wizard from 4 to 20 characters to support longer email domains.
• Resolved a background PHP fatal error: TypeError: call_user_func_array() callback mismatch.
• Fixed a number of display issues where inline CSS in the plugin affected SVG rendering in third-party plugins.
• Fixed a bug which could cause malfunctions in streaming the logs to an external database or during mirroring when the cron job method via Action Scheduler was used.

5.4.2 (2025-07-02)

New activity log event ID

• ID 1011- user tried to access a page for which they did not have access to.

Plugin improvements

• Added more help text and updated existing text and URLs across multiple plugin pages.
• Included a notice for the new users on fresh installations to better assist then in setting up the Notifications module.
• Remove the Admin bar notification setting preview (Premium feature) from the Free edition.

Bug fixes

• Resolved an issue in which the default **sender “From Email” address and name were used instead of the user-configured ones in email notifications.
• Fixed several WP 2FA plugin related event IDs that were not triggering or lacked complete metadata. Event IDs 7804, 7805, 7806, 7607, 7808, 7811, and 7812 are now logged and reported correctly.
• Corrected a visual issue affecting the creation of Slack mirroring connections in the UI.
• Addressed an edge case where custom login URLs could prevent event ID 1000 (user logged in) from being recorded.
• Fixed a visual layout bug causing long event descriptions to overflow by adding horizontal scrolling.
• Fixed a bug affecting event ID 2101, where the URL metadata field might not open the relevant post URL.
• Resolved a few user-reported PHP errors that could appear when upgrading from older plugin versions.
• Resolved a user-reported PHP error which could occur in very specific circumstances when using WP Activity Log alongside the Advanced Custom Fields plugin.
• Fixed a user-reported JS error which could occur when saving the “Built-in notifications” after editing certain inputs with invalid data.

5.4.1 (2025-06-03)

Bug fix

• Fixed two PHP errors (related to missing methods) which could occur during migration from older plugin versions.

5.4.0 (2025-06-02)

New feature

• New plugin setting to also keep a log of the Query strings (such as UTM parameters) inside the activity log events metadata.

New activity log event IDs for Rank Math

• ID 10701 – Changed the status of a module in the plugin
• ID 10702 – Modified the “SEO title” of a post
• ID 10703 – Modified the “Meta description” of a post
• ID 10704 – Modified the “Focus keyword” of a post
• ID 10705 – Changed the status of the SEO setting “Pillar Content” in a post
• ID 10706 – Changed the status of the “ROBOTS META Index” setting in a post
• ID 10707 – Changed the status of the “ROBOTS META Nofollow” setting in a post
• ID 10708 – Changed the status of the “ROBOTS META No Archive” setting in a post
• ID 10709 – Changed the status of the “ROBOTS META No Image Index” setting in a post
• ID 10710 – Changed the status of the “ROBOTS META No Snippet” setting in a post
• ID 10711 – Changed the status of the “ADVANCED ROBOTS META Max Snippet” setting in a post
• ID 10712 – Changed the status of the “ADVANCED ROBOTS META Max Video Preview” setting in a post
• ID 10713 – Changed the status of the “ADVANCED ROBOTS META Max Image Preview” setting in a post
• ID 10714 – Changed the Canonical URL of a post

New activity log event IDs for Termly plugin

• ID 10901 – Disconnected the site from the Termly account
• ID 10902 – Changed the status of the Scheduled Automatic Scans
• ID 10903 – Changed the status of the setting Add Termly Scanner to robotx.txt Allow list
• ID 10904 – Changed the status of the Consent banner
• ID 10905 – Changed the status of the Auto Blocker in the Banner settings
• ID 10911 – Activated a new API key and connected the site to a Termly account

New activity log event IDs for WooCommerce

• ID 9169 – Changed the status of the Manage Stock store setting
• ID 9170 – Changed the value of the Hold stock (minutes)
• ID 9171 – Changed the status of the low stock notification
• ID 9172 – Changed the status of the out of stock notification
• ID 9173 – Changed the Notifications recipient(s) email address
• ID 9174 – Changed the value of the Low stock threshold
• ID 9175 – Changed the value of the Out of stock threshold
• ID 9176 – Changed the status of the Out of stock visibility
• ID 9177 – Changed the Out of stock threshold setting
• ID 9178 – Changed the status of a Woocommerce webhook

New activity log event IDs for MainWP

• ID 7718 – A new client was created
• ID 7719 – Changed the email address of the client
• ID 7720 – Changed the status of the client
• ID 7721 – Deleted the client
• ID 7722 – Added a site to the client
• ID 7723 – Removed a site from the client

Plugin Improvements

• Improved the sensors to keep a log of activities and site changes performed via site management platforms such as WP Umbrella, ManageWP, ModularDS, InfiniteWP, and WPRemote.
• Improved event tracking of third-party plugins on multisite networks. Events are now captured even when the supported third-party plugin is not network active.
• Improved layout of daily and weekly summary emails for better clarity and reduced redundancy.
• Enhanced the UX in the Custom Notification Builder for when no default recipient is configured or when multiple default recipients are set.
• Added confirmation feedback when users save changes on the Notification settings page.
• Revised and improved the help text in the Notification page.
• Standardized the default “From” email address used in notifications to match plugin branding and domain, while also improving email deliverability.
• Event ID 4000 (new user was created) now includes the user’s email address in the event description.
• Updated the help text for the “Hide Plugin” setting for clarity.
• Added a check in Event ID 2065 (post content modified) to advise admin if the WordPress revisions are not enabled.
• Updated the install wizard to highlight the default From and Recipient email addresses used in notifications.
• Adjusted several plugin URLs to ensure they open in a new window.
• Disabled the event IDs 8825, 8845, and 8847, as they are no longer applicable to the latest version of Yoast SEO.
• Added user email, first name, and last name columns to relevant Statistics report types.
• Improved translation compatibility with third-party plugins (e.g. Loco Translate).
• Improved the cleanup hook / process in the plugin to better handle large multisite setups with high activity volumes.
• Updated links and UTM parameters across plugin pages and emails.
• Updated plugin branding with a new logo across plugin pages and emails.

Bug fixes

• Fixed various PHP notices and warnings triggered by WordPress core update version 6.8.1.
• Fixed several text formatting issues in the Weekly Summary email.
• Fixed event IDs 5508, 5510, 5513, 5514, and 5515 because they were not being reported when changes were done in WP Forms due to an outdated sensor.
• WooCommerce event IDs 9120, 9121, and 9122 were incorrectly logged under the object type “WooCommerce Product” instead of “WooCommerce Store.”
• Fixed an issue in the Premium edition preventing admin access to the “Delete Activity Log Data” setting.
• Fixed several user-reported PHP warnings in the Notifications area.
• Fixed JavaScript errors affecting saving or toggling of Weekly Summary notifications.
• Fixed an edge case PHP error that could occur when creating a new sub site on a multisite network.
• Fixed a bug preventing Yoast SEO ID 8803 (“Allow search engines to show post in search results”) from being triggered.
• Fixed an issue with the Report white labeling feature causing logo rendering issues in exported reports.
• Fixed a bug in the Premium edition where premium features were not removed correctly after license expiration.
• Fixed a display issue showing an incorrect message during report generation from archived logs.
• Fixed an issue where the plugin could not detect supported ACF events when ACF PRO was installed.
• Fixed problems with IP address extraction in event ID 1006.
• Fixed a cron job issue preventing archiving of logs when set to a 15-minute interval.
• Fixed an edge case PHP error (Undefined constant “WSAL\Utils\WSAL_OPT_PREFIX”) during plugin migration in certain multisite setups.
• Fixed a WordPress database error (Specified key was too long; max key length is 1000 bytes) which could cause malfunctions on some database setups.
• Fixed a PHP error during plugin migration when archiving was running.
• Fixed a missing asset error causing plugin malfunction.
• Fixed a PHP error (“operator not supported for strings”) that could cause plugin failures.
• Fixed a PHP error generated when deleting a Gravity Forms entry.
• Fixed several errors caused by missing CSS and JS files in the plugin.

5.3.4.1 (2025-04-4)

Bug fix

• Fixed an issue that affected the redirects setup on multisite networks.

5.3.4 (2025-04-3)

New features

• Instant Slack notifications – users can now configure and send instant notifications to a Slack channel in addition to Email and SMS.
• Filters for staging environment -new filters “wsal_enable_notifications” and “wsal_enable_mirroring” to disable instant notifications and mirroring of logs on staging environments.
• Last login time report – added a new report that shows the last login time for each user on the website.

Plugin improvements

• Daily and weekly email summaries – added an option to include all logged events in email summaries.
• Improved the daily / weekly email summary template alignment in certain layouts and browsers.
• Improved the help texts and descriptions across plugin pages, particularly in Reports & Notifications.
• Added the Order ID metadata to all the WooCommerce order-related events.
• Cron job-related event IDs are now disabled by default to prevent log pollution on sites with frequent cron executions.
• Reorganized the items in the custom notification dropdown menu in alphabetical order.
• Event IDs 4000 and 4001 (new user registrations) now display the user’s email address in the metadata area.
• Added new WooCommerce-specific criteria in the custom notifications builder, allowing filtering by Coupon ID, Product ID, Order ID, and Product Status.
• Improved the layout of upgrade notice banners.

Bug fixes

• Fixed a UI issue that caused horizontal scrolling in generated statistic reports.
• The plugin will now correctly notify relevant site users of available updates, even when hidden from the Plugins page.
• Resolved a PHP error triggered under specific edge cases when saving WooCommerce products.
• Fixed an edge case where login-related IDs (e.g., 1000, 1001, 1002, 1003) were not mirrored to third-party services if the login page URL was modified.
• Addressed a number of user-reported PHP warnings related to cron job event IDs.

5.3.3 (2025-03-04)

• Fixed an insecure deserialization issue. Huge thanks to the Patchstack team for their help on this one.

Bug fixes

• Fixed a number of PHP warnings that could occur when certain system-related events were generated (6024, 6025, 6035, 6036, 6037, 6041, 6042, 6001, 6002, 6003, 6005, 6004, 6044, 6040).
• * Fixed an edge case issue in which periodic emails were not sent due to some issues with the cron job.
• * Fixed translation loading errors appearing in the Query Monitor plugin (translation loading too early in some cases).

5.3.2 (2025-02-18)

Improvement

• Updated the upgrade script so the weekly summary email is disabled by default when upgrading from older versions.

5.3.1 (2025-02-13)

Improvement

• Improved some of the WP CLI confirmation messages.
• Removed the “red dot” typically associated with plugin upgrades when the update message is displayed.

Bug fixes

• Fixed: If the plugin is updated to 5.3.0 via composer or WP CLI and no administrator is already (allowing the plugin to set some settings) the message “You do not have sufficient rights to access this page” is displayed on the website login page.
• Fixed: Custom recipient email addresses for weekly notifications was not being saved correctly in the plugin settings.
• Improved the database sensor to ensure that Event IDs 5010, 5011, and 5012 are now accurately reported.

5.3.0 (2025-02-11)

New features

• Weekly activity log email summary in the free edition.
• Completely rewritten the Emails and SMS notifications module featuring a new notifications trigger module, and many new notifications options and criteria.

New activity log event IDs (improved coverage)

Generic activity

• ID 6319 – Changed the status of the Weekly activity log summary email.
• ID 6328 – Modified the recipients of Weekly activity log summary email.
• ID 5030 – A plugin failed to install.

New event IDs for WooCommerce

• ID 9157 – Enabled the setting to limit the purchase of a product to 1 item per order.
• ID 9158 – Disabled the setting to limit the purchase of a product to 1 item per order.
• ID 9159 – Changed the Store visibility status.
• ID 9160 – A new review was posted.
• ID 9161 – A product review was unapproved.
• ID 9162 – A product review was approved.
• ID 9163 – A product review was marked as spam.
• ID 9164 – A product review was moved to trash.
• ID 9165 – A product review was restored from trash.
• ID 9166 – A product review was permanently deleted.
• ID 9167 – A product review was edited.

New event IDs for Yoast SEO

• ID 8871 – Changed the “User” in the Organization/Person settings.
• ID 8872 – Changed the “Personal logo” in the Organization/Person setting.
• ID 8859 – Enabled / disabled a site feature in the plugin settings (this ID replaces 8815, 8817, 8819, 8844, 8846, and 8828, which remain part of the plugin to ensure backward compatibility).
• ID 8860 – Changed the status of the crawl optimization settings in the plugin settings.

Plugin & functionality improvements

• Improved the “Reverse proxy / WAF support” feature by adding more HTTP headers to choose from, and allowing users to specify custom HTTP headers.
• “Super Admin” is now available as a “role” criteria in the custom notifications trigger builder, enabling one to set up notifications based on this user role.
• Updated the default SMS template to improve SMS deliverability and reduce message length.
• Updated the metadata description for event ID 9042 to cater for WooCommerce’s latest changes related to product visibility changes.
• Improved the cron jobs loaded by the Free edition by removing some redundant ones.
• Created a new category in the “Enable/Disable events” page called “Activity Log” and moved a number of events from the “WordPress & System”.
• Updated the event ID 6048 metadata to cater for the improved Reverse Proxy / Firewall Option.
• Standardised the text format across the plugin pages.
• Removed the “Activate Free edition” link in the license key prompt (Premium edition).
• Increased the limit of subsites displayed on multisite networks from 15 to 150 for a better handling and filtering of logs on larger multisite networks.
• Removed the check and notice for the obsolete WP Activity Log extensions for third party plugins.
• Added a new filtering option in Reports – “Post ID”.
• Updated the first-time configuration wizard and also included a new step for enabling weekly summary notifications.
• Adjusted the loading of translation files to adapt the plugin to a change introduced in WordPress 6.7.
• Added a new filter (wsal_message_before_mirror) to customize logs mirrored to third parties.
• Extended the list of supported WP CLI commands for WP Activity Log. < LINK
• Improved the WP_Log_In_Out_Sensor to accommodate recent updates in the wp_login_failed action.
• WooCommerce event ID 9133 now reports when fee values inside an order are modified.
• WooCommerce event ID 9076 now logs enabling or disabling of a payment method.
• WooCommerce event ID 9072 is no longer redundantly appearing when a new product (ID 9001) is published.
• WooCommerce event ID 9155 metadata now clearly states that notes were added to an order instead of “comments”.
• Event IDs 8806, 8813, 8814, 8822, 8824, 8828, 8830, 8831, 8832, 8836, 8837, 8863, 8864, 8865, 8868, 8869, and 8870 in Yoast SEO were updated and are now compatible with the latest versions of the plugin.
• Merged several Yoast SEO event IDs into the new ID 8859 to track plugin settings modifications while maintaining backward compatibility.

Security fix

• Fixed a XSS vulnerability reported by zer0gh0st (D.Sim).

Bug fixes

• Fixed duplicated Event IDs (10000 and 10010) generated when creating new post types using ACF.
• Fixed a bug preventing ID 9138 from being reported when a new WooCommerce product was copied to a draft.
• Fixed intermittent fatal errors when resetting plugin settings or purging logs when WP Activity Log is installed on MainWP.
• Resolved issues with WooCommerce ID 9086 and ID 9040 not being properly reported.
• Fixed PHP errors when WooCommerce orders contain products with no ID.
• Improved support for UTF-8 characters in custom notifications.
• Fixed issues with events always showing “CRITICAL” severity when mirrored to Papertrail.
• Fixed a bug preventing ID 5003 (User deleted a plugin) to not be reported on newer WordPress core versions.
• Fixed WooCommerce event 9105 not reporting Order name correctly when the order contains different products.
• Fixed a PHP error that occurs during plugin updates when the Shield Security plugin is active simultaneously with WP Activity Log.
• Fixed a bug causing some WP Activity Log Events to be disabled from monitoring after some time.
• Fixed a bug causing the Action Scheduler library to not work properly during the mirroring of events to third parties.
• Fixed a bug in the Woocommerce sensor causing strange behavior when WP Activity Log is enabled along with Woocommerce + HPOS order mode + Deposits – Partial Payments Plugin.
• Fixed a PHP error that could occur when a new WooCommerce order is placed containing products with no ID.
• Fixed a PHP Warning related to the WP Activity Log widget in the dashboard.

5.2.3 (2025-01-27) – Premium edition only

Improvements and enhancements

• Improved handling of IP addresses under various header types (Reverse proxy / WAF support feature).
• Suppressed a PHP notice related to translation files loading.
• Updated Freemius SDK to 2.11.0, including fixes for the excessive rescheduling of the Freemius cron job in some cases (fs_install_sync_wp-security-audit-log).
• Added logic checks in the integration module (Connections tab – Syslog) to ensure correct handling of all valid hostname formats.

Bug fixes

• Fixed a PHP warning when an Ultimate Member user profile was removed.
• Resolved an issue causing some Event IDs to deactivate during plugin migration.
• Addressed an edge-case PHP error triggered when a WooCommerce order with products IDs missing was placed.
• Fixed a rare issue causing duplicate orders when the HPOS feature in WooCommerce High-Performance Order Storage (HPOS) was enabled alongside the plugin.
• Corrected the display of the Woocommerce order number in the metadata description of Event ID 9105.
• Fixed a PHP error caused by a conflict between WP Activity Log and Shield Security plugin.
• Fixed a bug preventing the legacy Starter license plan users from exporting search results.

5.2.2 (2024-11-12)

New feature

• New setting in the users’ sessions module to enable a check for existing sessions when a logged in user accesses the login page directly.

Plugin & functionality improvements

• Bumped up the minimum WordPress version to 5.5.
• Updated the Freemius SDK to the latest version.
• Addressed a number of spelling mistakes in the code notes etc.
• Reviewed again all possible activity log inputs and improved sanitization.
• Improved WooCommerce coverage: plugin now reports correct variable product SKU in the event IDs instead of the parent product SKU.
• Improved the loading order of the text domain etc (reported on the forums).

Security fix

• Fixed an unauthenticated stored XSS reported by Mikemyers.

Bug fixes

• Fixed a conflict with GiveWP plugin (reported on the forums).
• Fixed: main dashboard events widget failed to load on a multisite network.
• Fixed a fatal error in class-reports-entity.php which occurs when duplicating reports with numbers in the title.
• Fixed: fatal error reported when updating to 5.2.1 using WordPress core5.5 and MainWP.
• Fixed: Enable / disable events ID page not loading on PHP 7.2 or lower.
• Fixed: some specific scheduled events are returning errors (reported on the forums).
• Fixed an Action Scheduler fatal error reported during migration / upgrade.
• “Send now” option for periodic emails now working in some edge cases.
• Fixed: Fatal error in class-alert-manager.php during upgrade to 5.2.1 on some specific multisite networks.
• Fixed: some plugin settings pages cannot be accessed from the header navigation bar on a multisite network.
• Fixed: periodic emails are triggered for all sub-sites even when filter is for one sub-site.

5.2.1 (2024-09-12)

Bug fixes

• Fixed a crash in the WooCommerce sensor which happens when a new WooCommerce user is registered.
• Addressed problem with Redirection sensor when Rest API endpoint is checked.
• Fixed a crash and a number of PHP notices which are triggered when the Redirects plugin and Elementor are installed on the website.
• Addressed problem with system sensor when cron job is checked.

5.2.0 (2024-09-12)

New event IDs for the Redirections plugin

In this update we are introducing out-of-the-box activity logging for changes done in the configuration of the Redirections plugin.

• Event ID 10501: A new redirection was created.
• Event ID 10502: Activated a redirection.
• Event ID 10503: Deactivated a redirection.
• Event ID 10504: Changed the source URL of a redirection.
• Event ID 10505: Changed the query parameter of a redirection.
• Event ID 10506: Changed the target URL of a redirection.
• Event ID 10507: Changed the redirection group of a redirection.
• Event ID 10508: Deleted a redirection.
• Event ID 10509: Created a new redirection group.
• Event ID 10510: Activated a redirection group.
• Event ID 10511: Deactivated a redirection group.
• Event ID 10512: Renamed a redirection group.
• Event ID 10513: Changed the module type of a redirection group.
• Event ID 10514: Deleted a redirection group.

New event IDs for WordPress Cron

In this update we are introducing coverage of changes in the WordPress cron and the cron jobs / tasks.

• Event ID 6066: A new one-time task has been scheduled in the cron.
• Event ID 6067: A new recurring task has been scheduled in the cron.
• Event ID 6068: The schedule of a recurring cron task has changed.
• Event ID 6069: A one-time task has been executed by cron.
• Event ID 6070: A recurring task has been executed by cron.
• Event ID 6071: A one-time task has been deleted from the cron.
• Event ID 6072: A recurring task has been deleted from the cron.

Other new event IDs

• Event ID 6063: A new website site icon (favicon) has been added.
• Event ID 6064: The website site icon (favicon) was removed.
• Event ID 7013: Updated WordPress on the network subsites.
• Event ID 5720: Activated or deactivated a GravityForms form.
• Event ID 9155: A comment was added to a WooCommerce order.
• Event ID 9156: A comment was deleted from a WooCommerce order.

Plugin & functionality improvements

• Plugin checks for existing session cookie when user navigates directly to the login page so new users sessions are not created unnecessarily and no users are locked out when session management features are enabled.
• Set the default activity log retention policy to 3 months if not configured by the user.
• Added a notification message for when scheduled reports are ran manually and there are no events that meet the criteria.
• User is redirected to the activity log viewer page upon installing the plugin.
• Added some padding / improved plugin’s activity log view in MainWP.
• Added new top floating menu and a banner + footer links in the Free edition of the plugin.
• Added two new “filter names” in the reports; archived data only, archive data included, archive data not included.
• Improved the text of event ID 6063.
• Removed redundant code that was used to count the number of failed login attempts from an IP address. Now plugin reports every failed login attempt as an individual event in the log.
• Removed redundant code that was used to enable early plugin loading (was typically used on websites that use admin blocking plugins).
• Removed redundant “Save” button in the Import/Export plugin settings view.
• Optimized the WooCommerce sensor to properly report the changes that take place when an order is place in WooCommerce – previously reported too many events which might be confusing.
• Improved support for custom WooCommerce order names (YITH).
• Event ID 1005 (user logged in from a different device) now counts towards the total number of logins when generating user login / activity reports.
• Added the “Settings” node in the MainWP menu (previously only available on the WordPress native dashboard, even when installed on MainWP).
• Applied several recognition updates to the detection of reverse proxy and WAF IP addresses feature.
• Added some minor UI tweaks to the HTML reports.

Bug fixes

• Adjusted the queries for some of the statistics reports (about post views) to report more accurate numbers.
• Fixed a number of fatal errors in the WooCommerce sensor which were caused in some edge cases.
• Fixed: Redirect group is now reported in event ID 10501. Previously “null” was reported.
• Fixed an issue in which “no users found” were reported in reports for some WooCommerce event ID instead of system.
• Fixed: Incorrect time was being reported in the Retention policies settings for the purging of old data in the activity log.
• Fixed: plugin settings not removed when option to delete settings upon uninstall is enabled on a multisite network.
• Fixed: event ID 9156 (changed note in WooCommerce order) reported instead of event ID 9155 (added note to a WooCommerce order).
• Form URL was not reported in some event IDs which report changes in Gravity Forms form changes.
• Fixed: Fatal error when editing WooCommerce products prices in bulk with Advanced Bulk Edit plugin.
• Fixed: Event ID 6064 reported instead of ID 6065 when switching the favicon.
• Fixed: Event ID 9156 was reported twice in the activity log when a WooCommerce order was placed by a non-logged in user.
• Fixed a number of PHP Notices, warnings and deprecated code messages by improving the code for better support of more recent PHP versions.
• Fixed: Plugin was not reporting the change when when the price of a WooCommerce product is changed to NULL via the REST API.
• Fixed a warning about an undefined array key “zapier_integration_active” when saving changes in the Yoast SEO plugin.

5.1.0 (2024-07-04)

New features

• A setting in the reports to include / not include the events’ metadata in CSV reports.
• A setting to also include the reports as attachment in emails when they are automatically generated.

Plugin & functionality improvements

• Updated / improved the help text of some of the plugin’s settings.
• Added an update notice so people can easily see what is new and improved when they upgrade.
• Updated the text of event ID 1002 and 1003 (failed logins).
• Standardized UTM parameters used in the plugin links.
• Updated the text of some of the events listed in the Enabled/Disable events section.

Bug fixes

• The “Import/export settings” was only being loaded in the Enterprise plan – now it is also available in the Premium plan.
• Fixed a number of PHP warnings – improving compatibility with several versions of PHP.
• Fixed a PHP fatal error in Reports which occurs when upgrading.
• Fixed a PHP fatal error which occurs when specific custom notifications are set on a MainWP dashboard for events on child sites.
• Fixed a PHP fatal error in the Advanced Custom Field sensor which occurs in some specific setups.

5.0.0 (2024-05-22)

New activity log event IDs

List of event IDs to report changes in settings and configuration of Advanced Custom Fields:

• Event ID 10000 – A post type was created
• Event ID 10001 – A post type was activated/deactivated
• Event ID 10002 – A post type was renamed
• Event ID 10003 – A post-type singular name was renamed
• Event ID 10004 – A post-type key was modified
• Event ID 10005 – A post types Taxonomies was modified
• Event ID 10007 – A post type was moved to trash
• Event ID 10008 – A post type was restored from trash
• Event ID 10010 – A Taxonomy was created
• Event ID 10011 – A Taxonomy was activated / deactivated
• Event ID 10012 – A Taxonomy was renamed
• Event ID 10013 – A Taxonomy singular label was renamed
• Event ID 10014 – A Taxonomy key was modified
• Event ID 10015 – A Taxonomies post type was modified
• Event ID 10017 – A Taxonomy was moved to trash
• Event ID 10018 – A Taxonomy was restored from trash
• Event ID 10019 – A Taxonomy was deleted
• Event ID 10020 – A Taxonomy term was created
• Event ID 10021 – A Taxonomy term was renamed
• Event ID 10022 – A Taxonomy term was deleted
• Event ID 10023 – A Taxonomy terms slug was modified
• Event ID 10024 – A posts taxonomy terms were modified

List of event IDs to keep a log of WP 2FA plugin settings and configuration changes, and also user 2FA setup:

• Event ID 7800 – WP 2FA Enforcement policy updated
• Event ID 7801 – WP 2FA enforcement policies have been disabled
• Event ID 7802 – WP 2FA enforcement list was modified
• Event ID 7803 – WP 2FA exclusion list was modified
• Event ID 7804 – WP 2FA Enforcement policy updated
• Event ID 7805 – WP 2FA Trusted device was enabled / disabled
• Event ID 7806 – WP 2FA trusted device remember length modified
• Event ID 7807 – WP 2FA require password resets on unblock was enabled / disabled
• Event ID 7808 – A user configured 2FA
• Event ID 7809 – A WP 2FA user policy was enabled / disabled a method
• Event ID 7810 – A user removed the 2FA setup
• Event ID 7811 – A user has been locked for not configuring 2FA
• Event ID 7812 – A blocked user has been unblocked

New features

• All new reporting module with a new UI and better user experience, featuring many more new filters, reports criteria, tags for reports, and options.
• New HTML report template with a new more modern design.
• Setting to generate reports solely from archived logs in an external database.
• Added bulk action options in the Activity Log viewer, allowing admins to disable specific event IDs, or exclude users and IP addresses from the logs using bulk actions.
• Setting to exclude posts by Post Status in the activity log.

Plugin and features improvements

• Integrated the Activity Log extension for MainWP into the core plugin.
• Resolved multiple MainWP-related issues, improved log extraction, report generation, and overall performance.
• Moved the Report settings in the new Reports section.
• Improved metadata layout for Event ID 2016, which is reported when a user changes categories on a post.
• The plugin now stores both user_id and username in the database for all alerts.
• Improved periodic email triggers by creating a cron job for each type of report.
• Every failed login attempt is logged as an individual event in the activity log.
• Default ‘From’ email address matches the user’s site domain to improve email deliverability.
• The version of both the previous and new plugin version is now logged in event ID 5004, which is used to keep a log of plugin updates.
• Fixed a number broken URLs in the free edition of the plugin.
• Updated and optimized imagery in the free edition for better size and quality.
• Replaced outdated branding references throughout the plugin.
• Updated the logo for the Melapress File Monitor plugin in the Settings page.
• Applied several minor UI and UX tweaks inside the activity log viewer – adjusted width / hight and alignment of some elements.
• Improved the logic of retrieving user’s data from database for better performance.
• Implemented various minor code tweaks to improve overall plugin speed, performance, and stability.

Bug fixes

• Corrected the logic and info messages when disabling Event IDs directly from the Activity Log Viewer.
• Resolved an edge case where WP Engine Smart Plugin Manager was returning random usernames as actors when updating plugins on the site.
• Fixed instances in which the Statistic Reports for ‘unique IPs that accessed the site’ were being split into multiple rows for the same day.
• Addressed missing metadata for ‘username’ in the Custom Email Notification template triggered by failed login attempts.
• Fixed a bug causing the system info file to display the same title for both Free and Premium editions when both were installed.
• Resolved an issue where WooCommerce Event ID 9105 was not captured if the user placing the order was not logged in.
• Corrected class references within the plugin’s core (widget sensor).
• Fixed the built-in notification for failed login attempts to properly show the user’s IP address (there were edge cases in which it wasn’t).
• Resolved a bug with the ‘hide plugin from other admins’ setting that allowed some users to still see the plugin as installed.
• Fixed numerous PHP warnings generated by the WooCommerce sensor.
• Addressed a bug in WhiteLabellingSettings.php that could cause a PHP fatal error when accessing site admin pages.
• Fixed WordPress database errors generated by the plugin when creating custom notifications.
• Resolved an issue causing some Event IDs not to trigger custom notifications if the activity occurred on the site frontend.
• Fixed a bug that could prevent the Daily Email Summary from being triggered.
• Corrected the year not being replaced correctly in the main plugin PHP file.
• Fixed a number of PHP warnings that could be generated by the plugin when WooCommerce orders were placed.
• Addressed PHP warnings generated by the GravityForms built-in sensor.
• Fixed a bug which was causing wsal_cleanup cron to not be fired correctly therefore old logs and expired sessions could not have been removed properly.

Previous versions changelog:

Version 4 | Version 3 | Version 2 | Version 1