Skip to content
PluginCanary

Activity Log - Monitor User and Agent Changes

by Elementor · 200,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 2 Sep 2026, fixed in 2.14.0.

92/ 100 Canary Score
Sub-scores for Activity Log - Monitor User and Agent Changes
Ownership100
Maintenance100
Security85
Support100
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 2 Sep 2026, fixed in 2.14.0. Update to version 2.14.0 or later.2 Sep 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
KingYes27 May 2013 to 28 Oct 2026, 226 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
7 days ago
Releases, 24 months
12
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Activity Log - Monitor User and Agent Changes
Q1 20242
Q2 20242
Q3 20241
Q4 20242
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20267
Q4 20263

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 6 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
2 Sep 2026Activity Log – Monitor User and Agent Changes <= 2.13.1 - Cross-Site Request Forgery4.3<= 2.13.12.14.00
20 Nov 2024Activity Log – Monitor & Record User Changes <= 2.11.1 - Unauthenticated Stored Cross-Site Scripting via Event Context7.2<= 2.11.12.11.20
1 Sep 2023Activity Log <= 2.8.7 - IP Address Spoofing5.3<= 2.8.72.8.80
26 Sep 2022Activity Log <= 2.8.3 - CSV Injection8.3<= 2.8.32.8.40
3 May 2021Activity Log 2.3.5 - 2.6.1 - SQL Injection8.82.3.5 to 2.6.12.7.04
8 Mar 2018Activity Log <= 2.4.0 - Multiple Cross-Site Scripting6.1<= 2.4.02.4.11
3 Aug 2016Activity Log < 2.3.3 - Cross-Site Scripting6.1< 2.3.32.3.3n/a
3 Aug 2016Activity Log <= 2.3.2 - Reflected Cross-Site Scripting6.1< 2.3.22.3.3n/a
29 Jul 2016Activity Log <= 2.3.2 - Reflected Cross-Site Scripting6.1< 2.3.32.3.3n/a
27 Feb 2014Activity Log Plugin < 2.0.4 - Fulle Path Disclosure7.5< 2.0.42.0.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Activity Log - Monitor User and Agent Changes
Q4 20235.0
Q1 20245.0
Q4 20245.0

Average rating stayed at 5.0 between Q4 2023 and Q4 2024.

Rating distribution
5 star53
4 star5
3 star8
2 star3
1 star5
Latest low reviews

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Activity Log - Monitor User and Agent Changes
4 May 20261,079
11 May 20262,451
18 May 20262,612
25 May 20262,266
1 Jun 20262,270
8 Jun 20263,257
15 Jun 20262,296
22 Jun 20262,235
29 Jun 20262,173
6 Jul 20262,568
13 Jul 20262,527
20 Jul 20263,401
27 Jul 20262,532
3 Aug 20262,744
10 Aug 20262,484
17 Aug 2026197,179
24 Aug 2026233,710
31 Aug 2026227,895
7 Sep 2026137,919
14 Sep 202630,226
21 Sep 202622,905
28 Sep 202617,094
5 Oct 202615,783
12 Oct 202658,039
19 Oct 2026116,377
26 Oct 2026202,110
2 Nov 20268,193

Weekly downloads over the last 4 weeks are 99% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version2.18.0
AuthorElementor
Added23 May 2013
Last updated28 Oct 2026
Active installs200,000+
Requires WordPress6.2
Tested up to7.1.4
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagssecurity, user log, audit log, email log, Activity Log

Other plugins by this author: Elementor Website Builder - more than just a page builder, Image Optimizer - Compress Images and Convert to WebP or AVIF, Web Accessibility (formally known as Ally) - WCAG Scanning, Guided Fixes, Usability Widget, Email Deliverability - SMTP Replacement, Email API Deliverability & Email Log, Manage - Centralized site maintenance and monitoring, Angie - Agentic AI, Hello Plus, Cookiez - GDPR & CCPA Cookie Banner & Consent Manager, Temporary Login, Elementor Beta (Developer Edition), Elementor Blocks for Gutenberg, Linker - URL shortener & track outbound link clicks

Questions

Is Activity Log - Monitor User and Agent Changes still maintained?

Activity Log - Monitor User and Agent Changes was last updated on 28 Oct 2026. Its Canary status is Healthy.

Is Activity Log - Monitor User and Agent Changes safe?

Activity Log - Monitor User and Agent Changes has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Activity Log - Monitor User and Agent Changes?

The wordpress.org author is Elementor. Recent committers: KingYes, maor, plugin-master. We have recorded no ownership change.

What can I use instead of Activity Log - Monitor User and Agent Changes?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue