Home Knowledge Base WP Activity Log WP Activity Log plugin changelog WP Activity Log version 2 changelog

Search for answers or browse our knowledge base.

Updated on 23 March, 2026

WP Activity Log version 2 changelog

WP Activity Log changelog for all version 2 builds and releases.

2.6.9.1 (20171027)

Bug Fix

  • Fixed a syntax issue in the code that was affecting installs on PHP lower than 5.4.

2.6.9 (20171026)

New Audit Trail Alerts for logging of Tag changes

  • Alert 2119: User added tag to a post
  • Alert 2120: User removed a tag from a post
  • Alert 2121: User added new tag on WordPress
  • Alert 2122: User deleted a tag from WordPress
  • Alert 2123: User renamed a tag
  • Alert 2124: User changed the slug of a tag
  • Alert 2125: User changed the description of a tag

New Audit Trail Alerts for logging of User Profile Changes

  • Alert 4017: Changed the first name of a user
  • Alert 4018: Changed the last name of a user
  • Alert 4019: Changed the nickname of a user
  • Alert 4020: Changed the display name of a user

New Functionality

Improvements

  • Drop down menu to select number of alerts to display in Audit Log Viewer now has only fixed numbers.
  • Renamed first column to Alert ID (standardising text in plugin)
  • New French translation by Denis Moscato

2.6.8 (20170919)

Improvement

  • Improved the sensor for custom post types so posts with NULL value or other temp custom posts are not reported. This was reported in several support tickets; here, here and here.

Bug Fix

  • Add a new check to ensure the object is of WP_Post class (Support Ticket)

2.6.7 (20170909)

Improvements

  • Added a new property in WSAL main class to store the current plugin version.
  • Added a new function in WSAL main class to define constants (to be used throughout the plugin)
  • Improved the code formatting in AuditLog.php

2.6.6 (20170830)

New Audit Trail Alerts

  • Alert 4015 for when a user creates a custom field in a user profile.
  • Alert 4016 for when a user updates a custom field value in a user profile.

New Feature

  • Logging of changes in custom fields (in posts, pages, custom post types, user profiles) created by Advanced Custom Fields (ACF) or similar plugins.
  • New option to show either the Username or Firstname and Lastname of the user in the Audit Trail.

Improvements

  • 404 errors logfiles are now saved in /uploads/wp-security-audit-log/404s/ directory.
  • Changed the 404 errors logfile name format to [alert]_[yyyymmdd].log. Thanks to Enable Security for PoC of vulnerability and advise.
  • Removed link to view post from Alerts about permanently deleted posts (2008, 2009, 2033).
  • Added tooltip for filter via IP address.

Bug Fix

  • Fixed an issue where the viewing of content was not being logged when Yoast SEO is installed.

2.6.5 (20170718)

New Audit Trail Alerts

  • Alert 1007 for when an administrator terminate’s a logged in session using the Users Sessions Management Add-On
  • Alert 6023 to log 404 HTTP errors (requests to non-existing pages) by website visitors (non WordPress users)

Improvements

  • Seggregated the logging of 404 HTTP Errors by who generates them. Alert 6007 for logged in users, 6023 for anonymous website visitors.
  • Improved the logging of Alert 4014 so it is not reported every time a user’s profile page is reloaded with a refresh or when a change is applied.
  • Removed the wsal_wp_session cookie, which was used to store the selected database when archiving of activity log alerts is enabled. Using LocalStorage instead.
  • Replaced mcrypt (deprecated in PHP 7) with OpenSSL. Mcrypt still used temporarily to convert configured password. Will be removed completely in future updates. (Support Ticket)

2.6.4 (20170601)

New Features

  • Added a number of queries in the plugin to support the new version of the Reports Add-On.

2.6.3 (20170503)

Security Update

  • Updated third party session libraries to a more secure version

2.6.2 (20170422)

New alerts to record actions & profile changes

  • 1006: User logged out all other sessions with the same username
  • 4014: User opened the profile page of another user

New alerts to record post and page specific settings changes

  • 2111: Disabled Comments / Trackbacks and Pingbacks on a published post
  • 2112: Enabled Comments / Trackbacks and Pingbacks on a published post
  • 2113: Disabled Comments / Trackbacks and Pingbacks on a draft post
  • 2114: Enabled Comments / Trackbacks and Pingbacks on a draft post
  • 2115: Disabled Comments / Trackbacks and Pingbacks on a published page
  • 2116: Enabled Comments / Trackbacks and Pingbacks on a published page
  • 2117: Disabled Comments / Trackbacks and Pingbacks on a draft page
  • 2118: Enabled Comments / Trackbacks and Pingbacks on a draft page

New alerts to record WordPress site-wide settings changes

  • 6008: User enabled / disabled the option Discourage search engines from indexing this site
  • 6009: User enabled / disabled comments on all the website
  • 6010: User enabled / disabled the option Comment author must fill out name and email
  • 6011: User enabled / disabled the option Users must be logged in and registered to comment
  • 6012: User enabled / disabled the option to automatically close comments after [X] days
  • 6013: User changed the value of the option Automatically close comments from [X] to [X] days
  • 6014: User enabled / disabled the option for comments to be manually approved
  • 6015: User enabled / disabled the option for an author to have previously approved comments for the comments to appear
  • 6016: User changed the number of links from [X] to [X] that a comment must have to be held in the queue
  • 6017: User modified the list of keywords for comments moderation
  • 6018: User modified the list of keywords for comments blacklisting

Plugin Improvements

  • URL of content in alert is no longer truncated. Now it will be reported in full
  • Organised the alerts in Enable/Disable Alerts section in categories and sub categories, thus they are easier to find
  • Plugin no longer links to a non-existing log file when 404 logging is switched off
  • Added additional checks for when using the function wp_Sessions_register_garbage_collection, which was causing a conflict with another plugin

Bug Fixes

  • Fixed an issue in which the plugin was changing the titles of WooCommerce product pages for logged in users (ticket)
  • Fixed an issue in which plugin was unable to handle automated generated content with author 0 (ticket)

2.6.1 (20170309)

Bug Fixes

  • Removed the PHP Session ID cookie created by mistake for non logged in users.

2.6 (20170208)

New Features

New WooCommerce Audit Trail Alerts

Plugin Improvements

  • Improved severity of alerts and added severity description on hover over.
  • Removed all code related to PHP error monitoring, which is no longer used (code spring cleaning).

Bug Fixes

  • Fixed an issue in which 404 logs where still being generated when the logs option was disabled but alert 6007 was enabled.

2.5.9.2 (20170111)

Bug Fix

2.5.9 (20170103)

Support for new features in External DB Add-on:

2.5.8 (20161109)

Plugin Improvement (Standardized all date & time formats and timezone)

  • Plugin now uses the time & date format configured in WordPress (removed the option from plugin that override this).
  • Updated all the Premium Add-Ons to use the time & date format configured in WordPress.
  • Changed the Request Log file extension to php and disabled execution (before it was log, hence users could guess it).

Bug Fixes

  • Fixed a problem with restricting users’ access to the plugin (support ticket).
  • Fixed a bug in the custom alerts – previously custom alerts were overwritten during upgrade. Updated custom alerts documentation as well.

2.5.7 (20161005)

Bug Fix

  • Fixed an issue where a page’s title was not being returned (Support Ticket)

2.5.6 (20160927)

Bug Fix

  • Fixed an issue where previous 404 reports were not being correctly merged. (Support Ticket)

2.5.5 (20160927)

New WordPress Audit Trail Alerts

  • 2100: User opened a post in the editor
  • 2101: User viewed the post
  • 2102: User opened page in editor
  • 2103: User viewed page
  • 2104: User opened custom post type in editor
  • 2105: User viewed the custom post type

New Features

  • New setting to configure the number of 404 requests the plugin should record in a logfile from the same IP address.
  • Ability to download the 404 log file directly from the alert.
  • Added a new setting that disables or enables all of the plugin’s logging. It is disabled by default.

Plugin Improvements

  • Organized the plugin settings under different tabs making it is easier to configure.
  • Updated the Reports add-on to show 404 log file location in the reports.
  • Removed the auto-enabling of 404 requests monitoring (introduced in previous version).
  • When 404s are from localhost, localhost is used in filename and not the IP. (Support Ticket)
  • The Add Functionality node is now automatically disabled when one or more premium add-ons are activated.
  • Changed the location of request log to /wp-content/uploads/wp-security-audit-log/.
  • Changed the extension of the request log file from php to log.
  • Plugin won’t keep a record of newly posted comments that are marked as spam by Akismet.

Bug Fixes

  • Fixed the data inspector that was not working in certain installations.
  • Fixed an issue with custom alerts, which were overwritten during upgrade. Refer to the custom alerts documentation for more information.

2.5.4 (20160914)

Update

  • Updated the Italian translation file with the latest translations.

Bug Fix

  • Fixed a bug related to database collation which was affecting the generation of reports.

2.5.3 (20160816)

Bug Fix

  • Enabled the 404 logging by default during upgrade and new install. Read this FAQ for more information on this functionality.

2.5.2 (20160812)

New Feature

  • Logging of 404 Requests to a Log file. Read this FAQ for more information on this functionality.

Improvements

  • Fixed several alerts / monitoring capabilities that were not working correctly in WordPress 4.6.

2.5.1 (20160726)

Bug fixes

  • Fixed the disabling functionality of Alert 6007 because it was not working.
  • Fixed the disabling functionality for Alerts 1000 and 10001.
  • Merged bug fixes from version 2.4.4 (were not included in 2.5.0).

2.5.0 (20160712)

New Features

  • Plugin now keeps a record in the activity log of changes in WordPress comments. Refer to the list of alerts for WordPress comments for the complete list.
  • Audit log alerts for 404 (page not found) requests.
  • Audit log alerts for pages / posts / custom post types automatically created by plugins.
  • Added wildcard (*) support for when excluding Custom Fields.
  • New setting to customize From email address and display name. The premium edition have been updated to use the configured email address.

New WordPress Audit Trail Alerts for Changes in Comments

  • 2090: User approved a comment
  • 2091: User unapproved a comment
  • 2092: User replied to a comment
  • 2093: User edited a comment
  • 2094: User marked a comment as Spam
  • 2095: User marked a comment as not Spam
  • 2096: User moved a comment to trash
  • 2097: User moved a comment out from the trash
  • 2098: User permanently deleted a comment
  • 2099: Website visitor / User posted a comment (disabled by default. Enable it from the Enable/Disable Alerts node in the plugin menu)

New WordPress Audit Trail Alerts for Plugins Activity

  • 5019: Plugin automatically created a post
  • 5020: Plugin automatically created a page
  • 5021: Plugin automatically created a custom post type
  • 5025: Plugin automatically deleted a post
  • 5026: Plugin automatically deleted a page
  • 5027: Plugin automatically deleted a custom post type

Other New WordPress Audit Trail Alerts

  • 5031: User updated a theme
  • 2089: User moved an object as a sub-object in a menu
  • 6007: User / website visitor requested a non-existing page (404 ERROR)

Improvements

  • Standardized all alerts messages / Improved the text of all of them. Each post / page / custom post type alert has a linkt to the Editor now

2.4.4 (20160627)

Security fix

  • Fixed a cross-site scripting vulnerability in the function AjaxDisableCustomField()

Bug fix

  • Fixed the hide plugin setting which was not working in some scenarios. (Support Ticket)

2.4.3 (20160601)

New Add-On Support

  • Included code to support the new Users Sessions Management module, which allows you to see who is logged in to your WordPress and WordPress multisite networks.

New Alerts in the WordPress Audit Trail

  • 1004: A login attempt was blocked because a session with the same username already exists
  • 1005: Multiple logged-in sessions for the same WordPress username has been detected

Improvement

  • Plugin reports changes when an object is moved as a sub object in a menu.

Bug fixes

  • Fixed a problem where wrong permissions were assigned to the reports directory in the uploads directory for the Reports module. Fixed an issue where multiple incorrect changes were reported when changing the structure of a menu (Support ticket). Fixed a bug in the settings sensor (support ticket).

2.4.2 (20160426)

Improvement

  • Removed hardcoded memory limit in database connector. Now all database connections are done via AJAX calls hence there is no need for such limits.

2.4.1 (20160420)

New Features

New WordPress Security Alerts for Content title changes

  • 2086: User changed the title of a post
  • 2087: User changed the title of a page
  • 2088: User changed the title of a custom post type

Improvements

  • Implemented AJAX calls for when migrating the WordPress Audit Trail between databases with the[External DB module.

2.4 (2016-03-28)

Read the WP Activity Log 2.4 release notes for a detailed overview of what is new.

New Features

  • Monitoring of WordPress menus changes from both admin pages and theme customizer.
  • New hook that allows users to create their own custom alerts. Read the WP Activity Log Custom Alerts documentation for more information.
  • New alerts for when a either a post, a post or a custom post type is scheduled.

New WordPress Security Alerts for Menus

  • 2078: User created a new menu
  • 2079: User added objects to menu
  • 2080: User removed object from menu
  • 2081: User deleted a menu
  • 2082: User changed menu settings
  • 2083: USer modified an object in menu
  • 2084: User renamed a menu
  • 2085: User changed the order of the objects in menu

New WordPress Security Alerts for Scheduled Items

  • 2074: User scheduled a post for publishing
  • 2075: User scheduled a page for publishing
  • 2076: User scheduled a custom post type for publishing

Bug Fixes

  • Fixed an issue where WordPress updated alerts were begin generated repeatedly upon accessing the updates page. (Support Ticket)
  • Fixed an issue where WordPress pruning was not working in an out of the box installation.
  • Fixed a conflict with Migrate DB. (Support Ticket)

2.3.3 (20160216)

Bug Fixes

  • Fixed an issue where automated WordPress updates were not being reported.
  • Improved error handling in database queries.

2.3.2 (20160121)

Bug Fix

  • Fixed an issue with the login/logout sensor reported in this ticket.

2.3.1 (20160116)

Improvement

  • Improved the SQL queries used in the Reports module.

2.3 (20160112)

New Features

Keep track of changes on bbPress forums. For more detailed information read the WP Activity Log 2.3 Release Notes.

New WordPress Security Alerts

  • 8000: User published a new forum
  • 8001: User changed the status of a forum
  • 8002: User changed the visibility of a forum
  • 8003: User changed the URL of a forum
  • 8004: User changed the order of a forum
  • 8005: User moved forum to trash
  • 8006: User permanently deleted a forum
  • 8007: User restored a forum from trash
  • 8008: User changed the parent of a forum
  • 8009: User changed the role of forum auto user role
  • 8010: User changed the option for anonymous posting on forum
  • 8011: User changed the forum type
  • 8012: User changed the time setting to disallow editing of posts
  • 8013: User changed the time setting for post throttling
  • 8014: User created new forum topic
  • 8015: User changed the status of a forum topic
  • 8016: User changed the type of a forum topic
  • 8017: User changed the URL of a forum topic
  • 8018: User changed the forum for a topic
  • 8019: User moved a forum topic to trash
  • 8020: User permanently deleted a forum topic
  • 8021: User restored a forum topic from trash
  • 8022: User changed the visibility of a forum topic

Improvements

  • Improved the performance / queries of the Audit Log Viewer, hence now it is faster when retrieving alerts from bigger databases.
  • Rewritten and improved the reporting engine for the Reports module.

Bug Fix

  • Fixed an issue where administrators of sub domain websites could see the alerts of other websites from the dashboard widget in a multisite installation. (Ticket)
  • Fixed a SQL query error where a NULL value was being saved and it wasn’t accepted. (Ticket)

2.2 (20151110)

New Features

Bug Fixes

  • Fixed an issue where user was allowed to disable all columns in Audit Log Viewer (Support ticket). Fix recommendation by Bates College.

2.1.1 (20151008)

New WordPress Security Alerts

  • 2072: User modifies a post that is submitted for review
  • 2073: Contributor submits a post for review

Improvements

  • Added the functionality to search by Alert ID in the Search module.
  • When a background process is reports, plugin now reports “System” as username and not “unknown”.
  • Improved the connection checks of the External DB module (now it also has a timeout for when incorrect IP / Host is specified).

Bug Fixes

  • Fixed an issue in the Reports module where not all available users were being listed to generate a report
  • Fixed an issue with licensing notifications – now all licensing notifications will be automatically dismissed upon activating a key.
  • Fixed an issue where the user reset passwords were not being recorded (since 4.3). (Ticket)

2.1.0 (20150909)

New Features

  • Introduced the External DB module.
  • Integration with WhatIsMyIPAddress.com (Click an IP addresses in Audit Log viewer to get all information about it).
  • Settings to Include or exclude specific columns from the Audit Log viewer.
  • Ability to exclude an IP address from monitoring
  • New option to disable the reporting of WordPress background tasks (such as deletion of auto draft posts)

Bug Fixes

  • Fixed a problem when trying to customize a widget via the theme customizer (support ticket).
  • Handling an error that was generated when someone logged in to a WordPress via social media channels.
  • Fixed: incorrect alert generated when a widget is moved from the bottom of a container to another.
  • Fixed: incorrect alert generated when a custom filed is deleted from a page.
  • Fixed an issue where post related actions were not reported for users with author and contributor roles.
  • Fixed an issue where in a specific scenario the settings in the options tabel were duplicate.

2.0.1 (2015-08-05)

Minor Change

Launched a new WP Activity Log website and updated all relevant links.

2.0.0 (20150716)

New Features

  • New database connector allowing faster and more efficient plugin to WordPress database communication
  • Added new option to switch the display time of alerts between 24 hour or 12 hour format
  • Sorting functionality in Audit Log Viewer (sort WordPress security alerts by date & time, code or username)

Bug Fixes

Fixed issue where super admin roles was not reported when logging in to “sub sites” in WordPress multisite Fixed several formatting issues in the Audit Log Viewer (UI) Fixed issue where multiple plugins were upgraded via the drop down menu and no alerts were being reported Fixed: When unrestricting plugin access from a single admin was not working properly

Back to latest changelog

Related

Close the CTA
Were you able to find what you were looking for?