{"id":319977,"date":"2026-06-20T05:25:50","date_gmt":"2026-06-20T05:25:50","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/avenixr-security-and-risk-monitor\/"},"modified":"2026-06-20T05:25:22","modified_gmt":"2026-06-20T05:25:22","slug":"avenixr-security-and-risk-monitor","status":"publish","type":"plugin","link":"https:\/\/bs.wordpress.org\/plugins\/avenixr-security-and-risk-monitor\/","author":23501757,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.1","stable_tag":"1.0.1","tested":"7.0.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"Avenixr - Security and Risk Monitor","header_author":"avenixr","header_description":"Monitor installed plugins for known vulnerabilities, update gaps, and compatibility signals using public metadata sources.","assets_banners_color":"071522","last_updated":"2026-06-20 05:25:22","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/avenixr.com\/avenixr-security-risk-monitor\/","header_author_uri":"https:\/\/avenixr.com\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":129,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"avenixr","date":"2026-06-20 05:25:22"}},"upgrade_notice":{"1.0.1":"<p>Initial release of Avenixr - Security and Risk Monitor.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3579461,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3579461,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3579461,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3579461,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3579461,"resolution":"1","location":"assets","locale":"","width":1708,"height":753}},"screenshots":{"1":"Plugins Monitor dashboard showing summary cards, version gaps, compatibility signals, vulnerability status, and plugin risk scores."}},"plugin_section":[],"plugin_tags":[265442,23916,600,268037,1173],"plugin_category":[54],"plugin_contributors":[268038],"plugin_business_model":[],"class_list":["post-319977","plugin","type-plugin","status-publish","hentry","plugin_tags-plugin-monitor","plugin_tags-plugin-security","plugin_tags-security","plugin_tags-vulnerability-monitoring","plugin_tags-wordpress-security","plugin_category-security-and-spam-protection","plugin_contributors-avenixr","plugin_committers-avenixr"],"banners":{"banner":"https:\/\/ps.w.org\/avenixr-security-and-risk-monitor\/assets\/banner-772x250.png?rev=3579461","banner_2x":"https:\/\/ps.w.org\/avenixr-security-and-risk-monitor\/assets\/banner-1544x500.png?rev=3579461","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/avenixr-security-and-risk-monitor\/assets\/icon-128x128.png?rev=3579461","icon_2x":"https:\/\/ps.w.org\/avenixr-security-and-risk-monitor\/assets\/icon-256x256.png?rev=3579461","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/avenixr-security-and-risk-monitor\/assets\/screenshot-1.png?rev=3579461","caption":"Plugins Monitor dashboard showing summary cards, version gaps, compatibility signals, vulnerability status, and plugin risk scores."}],"raw_content":"<!--section=description-->\n<p>Avenixr - Security and Risk Monitor helps administrators review the security posture of installed WordPress plugins from a single dashboard.<\/p>\n\n<p>The plugin analyzes installed plugins by matching them with WordPress.org metadata and publicly available vulnerability intelligence. It presents the results in an easy-to-review admin dashboard table with risk indicators and update context.<\/p>\n\n<p>This plugin does not perform code-level scanning. It is designed as an informational monitoring tool to support better decision-making.<\/p>\n\n<h4>Features<\/h4>\n\n<ul>\n<li>Detects installed plugins and their active or inactive status.<\/li>\n<li>Matches plugins with official WordPress.org metadata when available.<\/li>\n<li>Displays installed version, latest version, and version gap.<\/li>\n<li>Shows WordPress compatibility signals such as \"tested up to\" values.<\/li>\n<li>Identifies known vulnerabilities associated with plugin versions.<\/li>\n<li>Displays vulnerability details in a dedicated admin modal.<\/li>\n<li>Calculates a heuristic security risk score based on available public data.<\/li>\n<li>Includes summary cards for total, high-risk, critical, and safe plugins.<\/li>\n<li>Uses caching to reduce repeated external requests.<\/li>\n<li>Provides a manual cache purge option from the admin screen.<\/li>\n<\/ul>\n\n<h4>Current Scope<\/h4>\n\n<p>Version 1.0.1 focuses on plugin monitoring only. WordPress core, themes, and PHP environment checks are not included in this release.<\/p>\n\n<h4>External Services<\/h4>\n\n<p>This plugin connects to external services to retrieve plugin metadata and vulnerability intelligence. These requests are made from the WordPress admin area when an administrator opens the plugin monitor dashboard or uses the cache purge option and the dashboard data is refreshed. The plugin caches responses to reduce repeated requests.<\/p>\n\n<ol>\n<li><p>WordPress.org Plugin Information API<br \/>\nService provider: WordPress.org<br \/>\nWhat the service is used for: Retrieve official WordPress.org plugin metadata, including latest version, tested-up-to value, minimum WordPress requirement, and last updated date.<br \/>\nWhat data is sent and when: The plugin sends the installed plugin slug to WordPress.org when the monitor dashboard refreshes data for that plugin. No personal data, site URL, usernames, email addresses, passwords, or license keys are intentionally sent by this plugin.<br \/>\nService URL: https:\/\/api.wordpress.org\/plugins\/info\/1.2\/<br \/>\nPrivacy policy: https:\/\/wordpress.org\/about\/privacy\/<br \/>\nTerms\/license information: https:\/\/wordpress.org\/about\/license\/<\/p><\/li>\n<li><p>WPVulnerability (public data source)<br \/>\nService provider: WPVulnerability, by ROBOTSTXT<br \/>\nWhat the service is used for: Retrieve public vulnerability intelligence for installed plugin slugs so the dashboard can show known vulnerability information and risk indicators.<br \/>\nWhat data is sent and when: The plugin sends the installed plugin slug to WPVulnerability when the monitor dashboard refreshes data for that plugin. No personal data, site URL, usernames, email addresses, passwords, or license keys are intentionally sent by this plugin.<br \/>\nService URL used by this plugin: https:\/\/www.wpvulnerability.net\/plugin\/{plugin-slug}\/<br \/>\nProject website: https:\/\/www.wpvulnerability.com\/<br \/>\nPrivacy policy: https:\/\/www.wpvulnerability.com\/privacy\/<br \/>\nTerms and conditions: https:\/\/www.robotstxt.es\/legal\/<\/p><\/li>\n<\/ol>\n\n<p>These external requests are used only to enrich plugin information displayed in the admin dashboard.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>avenixr-security-and-risk-monitor<\/code> folder to the <code>\/wp-content\/plugins\/<\/code> directory, or install the plugin through the WordPress plugins screen.<\/li>\n<li>Activate the plugin through the <code>Plugins<\/code> screen in WordPress.<\/li>\n<li>Open <code>Plugins Monitor<\/code> from the <code>Tools<\/code> menu in WordPress admin.<\/li>\n<li>Review plugin status, update gaps, compatibility data, vulnerabilities, and risk indicators.<\/li>\n<li>Use the <code>Purge Cache<\/code> button to refresh cached data manually.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"what%20does%20this%20plugin%20analyze%3F\"><h3>What does this plugin analyze?<\/h3><\/dt>\n<dd><p>This version analyzes installed plugins only.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20modify%20or%20update%20plugins%20automatically%3F\"><h3>Does the plugin modify or update plugins automatically?<\/h3><\/dt>\n<dd><p>No. The plugin is read-only and does not make any changes to installed plugins.<\/p><\/dd>\n<dt id=\"what%20happens%20if%20a%20plugin%20does%20not%20have%20wordpress.org%20metadata%3F\"><h3>What happens if a plugin does not have WordPress.org metadata?<\/h3><\/dt>\n<dd><p>The dashboard will indicate that no official metadata or compatibility information is available.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20contact%20external%20services%3F\"><h3>Does the plugin contact external services?<\/h3><\/dt>\n<dd><p>Yes. It requests plugin metadata from WordPress.org and vulnerability intelligence from WPVulnerability. See the External Services section for details.<\/p><\/dd>\n<dt id=\"does%20a%20higher%20risk%20score%20mean%20the%20plugin%20is%20vulnerable%3F\"><h3>Does a higher risk score mean the plugin is vulnerable?<\/h3><\/dt>\n<dd><p>Not necessarily. The risk score is a heuristic indicator based on multiple signals such as known vulnerabilities, update status, and metadata context. It should not be considered a definitive security assessment.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Initial public release.<\/li>\n<li>Added plugin monitoring dashboard.<\/li>\n<li>Added WordPress.org metadata matching.<\/li>\n<li>Added vulnerability intelligence integration.<\/li>\n<li>Added version gap and compatibility display.<\/li>\n<li>Added vulnerability details modal.<\/li>\n<li>Added heuristic risk scoring and summary cards.<\/li>\n<li>Added caching with manual purge option.<\/li>\n<\/ul>","raw_excerpt":"Monitor installed plugins for known vulnerabilities, update gaps, compatibility signals, and security risk indicators.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/319977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=319977"}],"author":[{"embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/avenixr"}],"wp:attachment":[{"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=319977"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=319977"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=319977"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=319977"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=319977"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bs.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=319977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}