#560 by installs
Stream – Activity Log & Audit Trail
Real-time activity log and audit log for WordPress. Track every user action — logins, edits, plugin & settings changes — and get alerts.
- Installs
- 70,000+
- Rating
- 4.3 (76)
- Updated
- 2 months ago
Activity Log – Monitor User and Agent Changes
Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audit trail and stronger security.
- Active installs
- 200,000+
- #220 of 1,000
- Downloads, all time
- 5.3M
- 5,301,944
- Downloads, 30 days
- 391.6K
- 227.8K in the last 7
- Rating
- 4.3 / 5
- 74 reviews
- Last updated
- 3 days ago
- Oct 28, 2026
- Version
- 2.18.0
- 88 releases
Upkeep and compatibility
| Last updated | October 28, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 6.2 or newer |
| Needs PHP | 7.4 or newer |
| First published | May 23, 2013 |
| Support, last two months | 6 of 6 threads resolved (100%) |
Reviews
4.3 / 5 from 74 reviews
| 5 stars | 53 |
|---|---|
| 4 stars | 5 |
| 3 stars | 8 |
| 2 stars | 3 |
| 1 star | 5 |
Downloads, last 30 days
What the author says it does
An easy to use, fully supported WordPress activity log plugin.
Want to know exactly who does what on your WordPress site? Activity Log works like an airplane’s black box: it quietly records every action in the WordPress admin — and now every request made through the REST API, WP-CLI, WP-Cron, and more — so you always know:
- If someone is trying to hack your site
- When a post was published, and who published it
- If a plugin/theme was activated/deactivated
- Suspicious admin activity
The plugin doesn’t require any setup; it works right out of the box, runs on its own database table so it doesn’t slow down your site, and stays out of your way until you need it.
What’s New
- Request Source Tracking – See exactly where each change came from: the WP Admin, the REST API, WP-CLI, WP-Cron, XML-RPC, or the WP Abilities API, including which Application Password was used. Filter the log by source to quickly spot automated or API-driven changes alongside manual admin activity.
- Email Logging – Capture all emails sent from your WordPress site for streamlined debugging and compliance. Especially useful for WooCommerce stores tracking order emails alongside other site events.
- Export to CSV – Export your Activity Log data to CSV, or build support for your own format with our dedicated Export API.
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Questions the author answers
Requirements
Requires PHP 7.4 for list management functionality.
What is the plugin license?
This plugin is released under a GPL license.
Will this slow down my site?
No. Activity Log stores every event in its own dedicated database table instead of mixing into WordPress’ core tables, so logging has minimal impact on your site’s performance, even under heavy traffic.
Can I export logs?
You can easily export logs with Activity Log. We also support exporting filtered results. Filter by the time the action took place, roles, users, options, action type, and more.
Can I see where a change came from?
Yes. Each log entry records its Request Source, so you can tell whether a change was made through the WP Admin, the REST API, WP-CLI, WP-Cron, XML-RPC, or the WP Abilities API. If the request was authenticated with an Application Password, its name is shown as well. Use the Source filter on the log screen to narrow results down to a specific channel.
Can I see exactly what changed?
Yes. For settings, posts, users, user roles, comments, plugin versions, themes, WordPress core version, widgets, and terms, Activity Log stores the old and new value of each changed field and shows them in the log entry details. Secret values such as passwords and API keys are redacted, and long values are truncated to keep the log table small.
Latest changelog entry
- New: Anonymize a user’s activity log entries through the WordPress personal data eraser
- New: Log application password and password reset events
- New: Log theme and plugin file editor changes
- New: Added the wp activity-log WP-CLI command with list, stats and erase subcommands
- New: Incremental log fetching with after_id in the REST API and abilities
- New: Export logs as JSON Lines, also available via wp activity-log list –format=jsonl
- Tweak: Log an entry when all activity logs are erased
- Tweak: Run old logs cleanup hourly instead of daily so large sites catch up faster
Screenshots
The log viewer page 
The settings page 
Screen Options
Tagged
Plugins that share its tags
Smart WordPress security that blocks bots automatically, guides you to what matters, and repairs problems — without drowning you in noise.
- Installs
- 30,000+
- Rating
- 4.8 (1K)
- Updated
- 4 days ago
Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
- Installs
- 5+ million
- Rating
- 4.7 (5K)
- Updated
- 31 days ago
#17 by installs
Jetpack – AI Agents & MCP, Security, Backup & Analytics
Connect ChatGPT, Claude, or another AI agent to your site. Plus backup, malware scan, firewall, stats, CDN, and SEO tools in one plugin.
- Installs
- 3+ million
- Rating
- 3.7 (2.4K)
- Updated
- 4 days ago
Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate.
- Installs
- 3+ million
- Rating
- 4.9 (8.9K)
- Updated
- 5 days ago
#20 by installs
Hostinger Tools
Simplified WordPress management. Manage site info, maintenance, security, & redirects.
- Installs
- 3+ million
- Rating
- 3.5 (40)
- Updated
- 10 days ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin.