심플 히스토리 – 워드프레스 변경 사항 추적, 기록 및 감사

설명

Trusted by 300,000+ WordPress sites, rated 4.9 stars with 430+ five-star reviews, actively developed for 10+ years, and translated into 15+ languages.

Simple History is the complete audit log for WordPress. It tracks every meaningful change — content edits, user logins, plugin updates, security events, and more — so site owners, teams, agencies, and developers always know who did what and when. Just install and activate; no configuration required.

🔍 심플 히스토리가 실제 상황에서 도움이 되는 방법

사이트에서 일어나는 일을 추적하세요 “오늘 누가 무슨 일을 했을까? 아, 사라가 새 보도자료를 업로드하고 관련 기사를 작성했네. 좋았어 — 이제 내가 할 필요가 없겠군.”

문제를 식별하고 더 빠르게 디버깅하세요 “어제부터 사이트가 느리게 느껴지네요. 누군가 특별한 작업을 했나요? … 아, 스티븐이 ‘나쁜 플러그인-x’를 활성화했군요. 그게 문제였을 거예요.”

프리랜서와 에이전시의 책임성을 확보하세요 “사이트 최적화를 위해 개발자를 고용했습니다. 하지만 실제로 무슨 일을 했을까요? Simple History를 간단히 확인하면 그들이 정확히 어떤 작업을 수행했는지 알 수 있습니다.”

Spot suspicious activity early
“I see three failed logins from an unfamiliar IP address overnight. Let me click the IP to check all activity from that address — just those attempts, nothing else. Good to know.”

✨ What Simple History Tracks

Security & Monitoring

  • Failed user logins with IP tracking and filtering by type (wrong password vs. non-existent username)
  • Core file integrity checks against official checksums
  • Forced security auto-updates from WordPress.org
  • Site Health status changes
  • Admin page access denied events

Content & Users

  • Posts, pages, and custom post types — create, edit, delete, and homepage assignment
  • Attachments with image edit details (crop, rotate, flip, scale) and thumbnail previews
  • Taxonomies with detailed diffs of name, slug, description, and parent
  • Comments, menus (with item-level detail), and widgets
  • User profiles, logins, logouts, and role changes
  • Notes — the collaboration feature in WordPress 6.9

System & Updates

  • Plugin lifecycle: install, update, activate, deactivate, delete, and auto-update toggle
  • Theme install, update, activate, switch, and delete
  • WordPress core updates (manual and automatic)
  • Translation and language pack updates
  • Available update notifications
  • Settings and option screen changes

Privacy & Compliance

  • Privacy data export and user data erasure requests
  • Privacy page changes
  • IP addresses anonymized by default — no cookies, no external fonts

🔌 Built-in Third-Party Plugin Support

Simple History includes built-in logging for:

  • Jetpack – Module activations and deactivations
  • Advanced Custom Fields (ACF) – Field group and field changes
  • User Switching – User switch events
  • WP Crontrol – Cron event and schedule changes
  • Enable Media Replace – File replacement details
  • Limit Login Attempts – Login attempts, lockouts, and config changes
  • Redirection – Redirect and group changes, global settings
  • Duplicate Post – Post and page cloning
  • Beaver Builder – Layout, template, and settings saves

플러그인이 누락되었나요? 플러그인 작성자는 로깅 API를 사용하여 지원을 추가할 수 있습니다.

💬 사용자들의 이야기

430+ five-star reviews on WordPress.org:

  • “지금까지 가장 훌륭하고 포괄적인 로깅 플러그인”@herrschuessler
  • “내가 찾은 최고의 기록 플러그인”Rich Mehta
  • “모든 사이트에서 사용하는 환상적인 플러그인”던컨 마이클-맥그리거
  • “이것은 저희 모든 사이트에 적용되는 표준 플러그인입니다”Mr Tibbs

🚀 View Your Log Everywhere

Simple History starts tracking instantly after activation — no setup needed. It even imports recent activity so your log isn’t empty on day one. Access your log from:

  • Dashboard widget – Activity stats summary and recent events
  • Admin bar quick view – Dropdown with latest events on any admin page
  • Command palette – Type “Simple History” to jump to the log for the current post
  • Dedicated admin page – Full log with search, filters, and insights sidebar
  • Email reports – Weekly summary delivered to your inbox
  • RSS feed – Password-protected feed for your favorite reader
  • WP-CLI – Command-line access for automation and scripting
  • REST API – Programmatic access for custom integrations

📧 주간 이메일 보고서 – 로그인 없이도 최신 정보 받기

Weekly email reports deliver a summary of your site’s activity every Monday morning — total activity, daily breakdown, key metrics (logins, content updates, plugin changes), and direct links to the full log.

Perfect for site owners, agencies managing client sites, and teams who need regular updates without logging in. Enable it in settings and see what the email looks like before turning it on.

🛠️ For Developers & Power Users

  • WP-CLIList, search, and export events from the command line — perfect for automation and managing multiple sites
  • REST API – Full programmatic access to query the log and add custom events. See the documentation
  • Logging APILog your own events from themes and plugins with a single line of code
  • RSS feed – Subscribe to changes using any feed reader
  • AI & agent-friendly – The REST API and RSS feed make Simple History accessible to AI agents and automated workflows like Claude Code
  • Stealth Mode – Run Simple History completely hidden from the admin interface via code; Premium adds a GUI. Ideal for agencies and client sites

🔆 애드온으로 확장

Simple History Premium

Alerts & Notifications – Get notified instantly via Email, Slack, Discord, or Telegram when important events occur. Start quickly with preset rules for common scenarios or build custom rules filtered by event type, user, role, and log level.

Log Forwarding – Stream events to external destinations: local log files, syslog servers (UDP/TCP/TLS), Datadog, Splunk, webhooks, or external MySQL/MariaDB databases. Perfect for centralized logging, compliance, and backup.

Enhanced Controls – Custom retention periods (or keep logs forever), CSV/JSON export of filtered search results, post activity panel in the block editor, custom log entries for team decisions, stealth mode GUI, logger control to fine-tune which events are recorded, and an ad-free experience.

WooCommerce Logger

Track WooCommerce activity: orders, refunds, stock changes, product updates, pricing adjustments, settings modifications, and coupon usage.

Debug and Monitor

Monitor outgoing HTTP requests and emails, debug API calls, and see what’s happening under the hood. Essential for developers and support teams.

💚 이 프로젝트 후원하기

이 플러그인이 마음에 드신다면 무료 플러그인 개발을 후원해 주시기 바랍니다. 이 플러그인은 10년 이상 무료로 제공되어 왔으며 앞으로도 계속 무료로 제공될 예정입니다.

스크린샷

FAQ

플러그인은 무료인가요?

예! 심플 히스토리는 10년 넘게 무료로 제공되어 왔으며 앞으로도 계속 무료로 제공될 것입니다. 개발을 지원하고 추가 기능을 잠금 해제하려면 프리미엄 애드온을 구매하면 됩니다. 프리미엄 기능 보기.

로그를 보려면 어떻게 해야 하나요?

여러 가지 방법으로 로그에 액세스할 수 있습니다:

  • The dashboard widget with activity stats summary
  • A dedicated log page in the WordPress admin area
  • The admin bar quick view dropdown on
  • The WordPress command palette – type “Simple History” to jump to the log for the current post

Can I change where the History menu appears in WordPress admin?

Yes! You can customize the menu position in the plugin settings. Choose between showing Simple History at the top or bottom of the main menu, or inside the dashboard menu or tools menu.

플러그인을 사용하려면 코딩 기술이 필요한가요?

No! Just install and activate the plugin, and it will start collecting activity logs automatically.

로그는 어디에 저장되나요?

The log is stored in your WordPress database.

로그를 내보낼 수 있나요?

Yes, you can export logs in CSV or JSON format for further analysis.

다른 플러그인과 호환되나요?

Yes! Simple History supports many popular plugins out of the box. Additionally, developers can integrate it with any plugin using the Logging API.

이 플러그인으로 인해 웹사이트 속도가 느려지나요?

No, Simple History is lightweight and optimized for performance. Most logging occurs in the WordPress admin area when a WordPress user performs an action.

By default, nothing is logged on the front end, ensuring visitors experience no impact on performance.

누가 로그를 볼 수 있나요?

Access to the log depends on the user’s role:

  • Administrators can view all logged events.
  • Editors can see events related to posts and pages.

Can I exclude certain users from being logged?

Yes, you can exclude users based on role or email using the simple_history/log/do_log filter.

For more details, check the hooks documentation.

How long is the history kept?

By default, logs are stored for 60 days.

Upgrade to Simple History Premium to change this using a GUI.

특정 사용자의 변경 사항을 추적할 수 있나요?

Yes! You can filter logs by username, making it easy to track individual activity.

이 플러그인은 GDPR을 준수합니까?

GDPR compliance depends on how you use the plugin and how you handle collected data. WordPress guidelines prohibit plugins from making legal compliance claims, so you should review your site’s data policies to ensure compliance.

That said, Simple History follows privacy-friendly practices:

  • ❌ Google 글꼴 없음
  • ❌ 쿠키 없음
  • ❌ 로컬 저장소 없음
  • ✅ IP 주소는 기본적으로 익명화됩니다.

Since the plugin logs events (which may contain personal data), it’s your responsibility to ensure GDPR compliance based on your site’s usage.

For more information, see our support page GDPR and Privacy: How Your Data is Stored in Simple History.

후기

2026년 7월 30일 답글 1개
This plugin has helped us quite a bit with extensive history for WP events. Find out who broke what! lol
2026년 7월 28일 답글 1개
I’ve used it for years on client sites and while I usually don’t need to check things, when i do, the plugin is invaluable.
2026년 7월 14일 답글 1개
This is one of the first plugins I install on any site that content editors who don’t understand WordPress or code will need to edit. We can lock down a lot, but not everything they can break, so it really helps to be able to trace what’s happened. I do prefer not to show it in the admin menu or upper bar, so I was relieved when they rolled that option back. (I do wish the default wasn’t to show it all over the place, because now I have to go into the Settings on every site and turn those off and put it in the Tools menu, which luckily most of my users are scared of!)
모든 485 평가 읽기

기여자 & 개발자

“심플 히스토리 – 워드프레스 변경 사항 추적, 기록 및 감사”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다.

기여자

“심플 히스토리 – 워드프레스 변경 사항 추적, 기록 및 감사”(이)가 18 개 언어로 번역되었습니다. 기여해 주셔서 번역자님께 감사드립니다.

자국어로 “심플 히스토리 – 워드프레스 변경 사항 추적, 기록 및 감사”(을)를 번역하세요.

개발에 관심이 있으십니까?

코드 탐색하기는, SVN 저장소를 확인하시거나, 개발 기록RSS로 구독하세요.

변경이력

심플 히스토리가 유용하다면 ✨

Experimental entries are gated behind the experimental features setting (Settings Simple History Experimental). Enable it to try them, then share feedback so we know what to ship for everyone.

5.30.0 (August 2026)

👍 Two experimental features graduate in this release: event reactions and the header status bar, which shows the status of your current settings at a glance — how long history is kept, whether email reports and alerts are on, and where logs are forwarded. This release also includes a round of security hardening and some miscellaneous fixes.
Read more about all changes in the release post

추가

  • “Plugin info” action link on plugin update-available events, so you can quickly check what an unfamiliar plugin is without leaving the log.
  • “Find events from the same IP address” in an event’s actions menu, alongside the existing user and event-type filters.
  • Changes to more Simple History settings are now logged: Email Reports, the Experimental features toggle, and add-on license keys (key values are never stored in the log). (And yes – it was a bit funny that the plugin that logs changes to other plugins didn’t log its own settings changes!)
  • WP-CLI: --metadata_search and --ai_only options on wp simple-history list, matching the metadata search and AI filter in the GUI.
  • WP-CLI: AI attribution columns (ai_agent, ai_detected_via, ai_application) on wp simple-history list, showing which AI tool made a change and how it was detected.
  • Header now shows “Stealth mode: on” while stealth mode is hiding Simple History from other users, including other administrators.

변경

  • Reactions graduated from experimental and are now on by default — react to events with a 👍 (disable in Settings General). Premium adds ❤️ 🎉 🚀 and more reaction types.
  • Header settings/info bar is graduated from experimental and now shows for all admins — a glance at how long history is kept, whether email reports and alerts are on, and where logs are forwarded, with each one linking straight to its setting.
  • Checkbox settings now show as On/Off (instead of 1/0) in the “Modified settings” log details.
  • Settings changes are now detected across all save mechanisms (Settings API, direct option updates, and REST) and recorded as a single event.
  • Large or structured settings are now logged as “changed” without storing their full value, keeping the log readable.
  • Developers: simple_history/user_can_clear_log now defaults to whether the user can manage settings, instead of always allowing it. The “Clear log” button is unaffected for administrators.

사용되지 않음

  • WP-CLI: wp simple-history event search — use wp simple-history event list --search=<term> instead. The old command still works but will be removed in a future version.

수정

  • WP-CLI: wp simple-history event search always returned zero results.
  • WP-CLI: --fields on wp simple-history list ignored column names written with a space after the comma.
  • PHP 8 fatal error when a setting was changed by a request without a referrer, such as from the REST API or WP-CLI. #649
  • Untranslatable strings in the statistics view and the weekly email report. #672
  • Invalid date or month filter values now return a clear error (HTTP 400 in the REST API, a friendly message in WP-CLI) instead of a server error.
  • RSS feed no longer breaks when its address contains a date filter it can’t read — for example an older feed URL saved in a feed reader. It now returns an empty feed instead of an error.
  • Removed an unnecessary database query on every admin page load (a leftover from the one-time history backfill check).
  • Dashboard widget now shows an error message with details when the log can’t be loaded (for example when the REST API is blocked), instead of loading placeholders forever.
  • Fatal error on WordPress 6.3 when saving a post that creates a revision.
  • Post update events now link to the revision they created. (The link had been missing since the feature was added in 5.16.0!)
  • PHP warning when logging a comment whose post has been deleted. Such events now read “a comment to (deleted)” instead of showing an empty title.
  • “Filter events: This IP” in the IP address popover did nothing when used from the dashboard widget — it now opens the event log filtered to that address.
  • Filtering by IP address now finds events by any address recorded for them, not just the one the web server saw. On sites behind a proxy or load balancer the visitor’s real address is read from a forwarding header, and filtering by it previously returned nothing.
  • Experimental — Failed XML-RPC logins no longer create a duplicate “failed application password” entry alongside the regular failed-login entry.

Security

  • Looking up a person’s username, email address and roles from the user card now follows WordPress’s own rule and requires permission to list users. Who performed an event is still shown to everyone who can read that event.
  • REST API endpoints now require the same permission as opening the history page.
  • Detective Mode masks more field names — passwords, tokens, secrets and card numbers — and now also covers nested values, query strings and command line arguments.
  • Clearing the log, exporting it and regenerating the RSS feed address now also require permission to manage settings.
  • Event text escaping is now consistent across the media, categories, user and comments loggers, and in exported HTML files.

5.29.0 (June 2026)

🔒 This release brings Simple History together with WordPress’s built-in privacy tools: a person’s activity log is now included in personal-data exports (Tools Export Personal Data), and a new “Privacy & Data” settings tab explains how it works. Plus: overview action links across user, plugin, post, and media events, and action links on core update and privacy events for quicker navigation.
Read more about all changes in the release post

추가

  • Overview action links (“All users”, “All plugins”, “All posts”, “All media”) on user, plugin, post, and media events.
  • “About this version” and “WordPress X.Y release notes” links on core update events for major-version bumps.
  • Action links on privacy events linking to the matching WordPress tool page (Tools Export / Erase Personal Data, Settings Privacy).
  • Activity log is now included in WordPress’s personal-data export (Tools Export Personal Data).
  • New “Privacy & Data” settings tab (Settings Simple History) explaining how Simple History works with WordPress’s personal-data tools.
  • Experimental — Exports also include activity about a person performed by others, with other people’s names and emails redacted.
  • Experimental — Running a WordPress personal-data erasure (Tools Erase Personal Data) anonymizes the person’s data in matching log entries while keeping the entries as audit records.

변경

  • Action link labels dropped the “View” prefix (“View plugin info” “Plugin info”).
  • External action links now show an “open in new tab” icon and open in a new tab.
  • Dashboard widget action links are now more compact, so the event message stays the visual anchor.
  • License reminder for missing add-on license keys moved from a full-width banner to a dismissible card in the History Insights sidebar.
  • Experimental — Role and capability events show a count (“Added 40 capabilities to role Editor”) instead of dumping every capability slug into the headline; the full list stays in the event details.

수정

  • Alt-text changes to media made via direct meta updates are now logged.
  • Removed custom fields on post updates are now counted in the event details.
  • The UTC publish date no longer appears as a duplicate row in post update details.

5.28.0 (May 2026)

Ready for WordPress 7.0! This version is tested and confirmed working on the latest WordPress version. It also adds logging for the new AI Connectors Screen. Plus: WP-CLI and REST API coverage for content and settings changes. And the usual round of UI improvements and bug fixes.
Read more about all changes in the release post

추가

  • WordPress 7.0 AI Connectors screen changes are now logged.
  • Built-in WordPress settings changed via the REST API (POST /wp/v2/settings) or WP-CLI (wp option update) are now logged. Previously the Options Logger only captured changes made through Settings General/Writing/Reading/Discussion/Media/Permalinks, so automation, scripts, and AI agents could change the site tagline, title, default category, permalinks, and similar settings invisibly.
  • Post, user, media, menu, widget, and privacy page changes made via WP-CLI or the REST API are now logged. Previously these loggers only captured changes from inside wp-admin, so commands like wp post create, wp post update, wp user update, wp menu item add, and REST-driven edits from external tools or AI agents were not recorded.
  • Post update events now expose status, publish date, comment status, author, and page template as structured data in the REST API, “Copy as JSON”, and “Copy as Markdown” outputs — previously these fields were only available as prerendered HTML, so external clients had to parse the markup.
  • Action link on Options Logger events for quick navigation back to the Settings page where the option lives.
  • “How are AI agents detected?” link in the AI agent attribution tooltip, pointing to a docs article that explains the detection signals.
  • System Information page, wp simple-history db stats, and the /wp-json/simple-history/v1/support-info REST endpoint now report the charset and collation of each Simple History table — useful when diagnosing emoji-related context-drop issues.
  • Reminder card on Simple History pages when an add-on is installed without a license key entered, so users notice that updates won’t arrive until the key is added. Links directly to the license entry field.

변경

  • wp simple-history info now shows “Experimental features: enabled” when experimental features are active.
  • Options Logger event details show the change inline as a single row (new value strike-through old value) labeled with the setting name (e.g. “Site Title”, “Tagline”), instead of stacked “New value” / “Old value” rows.
  • Admin display for post update status, publish date, comment status, author, and page template switches from a stacked table row (“Changed from draft to publish”) to an inline pill style (“Status: draft publish”), matching how user profile changes already render. Title, content, custom field, term, and featured-image diffs still render in the existing table layout.

수정

  • “Copy as JSON” and “Copy as Markdown” now include the full event context (request URI, method, user agent, error codes, etc.), making copied payloads self-contained for triage and bug reports.
  • IP addresses are now included in failed application password authentication events, matching how wp-login failures already worked.
  • New installs create history tables as utf8mb4 (using $wpdb->get_charset_collate()), so emoji and other 4-byte UTF-8 characters in events are preserved.
  • Support info page no longer prints a “no such table: dbstat” database error when WP_DEBUG is on and SQLite’s optional dbstat virtual table isn’t available (notably on WordPress Playground).
  • “Most active users” widget no longer shows nameless entries for users without a display name.
  • Redirect loops in wp-admin for low-privilege users. A legacy-URL redirect intended only for the old /wp-admin/index.php?page=simple_history_page bookmark was also firing for unrelated access-denied events on the dashboard, which could send users in circles. #639
  • Experimental — Brute-force attempts against xmlrpc.php now show which account is being targeted instead of logging an empty username.

5.27.0 (May 2026)

🤖 This release adds AI agent attribution to log events, so you can see when an action was triggered through Claude Code, ChatGPT, or other AI tools. Also, Action links are now front-and-center for media, plugins, users, menus, and failed plugin installs.
Read more about all changes in the release post

추가

  • Plugin active/inactive status is now recorded when plugins are updated, shown in event details when the plugin was inactive at update time.
  • Success confirmation and automatic log refresh after manually adding a log entry.
  • Action links for media attachments (Edit, View), plugins (“View changelog”), user profiles (“Edit user”), menu edits (“Edit menu” and “Manage menu locations”.
  • “Show error message” action link on plugin install/update failure events — opens the event details modal where the underlying error message and diagnostic context are shown.
  • wp simple-history info WP-CLI command — prints the installed version, premium add-on status, and a list of useful subcommands.
  • New opt-in columns for wp simple-history list via --fields=: date_relative (“5 minutes ago” style timestamps), site (blog name and host, useful when comparing output across installs), and ai_agent (detected AI tool name when an event was initiated through an AI agent).
  • AI agent attribution on event log rows: when an event is triggered by an AI tool (Claude Code, ChatGPT, MCP clients, the Abilities API, etc.), a sparkle icon and the agent name appear next to the user who initiated the event. The signed-in user remains the actual initiator — this is additional audit context, not an authentication signal.
  • “AI-initiated events only” filter in the expanded filters panel — quickly narrow the log to actions triggered via AI tools.
  • New “Copy as JSON” menu item for each event, that copies the full event payload — including all context data — for scripting and debugging.
  • Experimental — “History” column on post and page list tables showing recent activity at a glance, with “View history” row action links.
  • Experimental — Failed application password authentication on REST API and XML-RPC requests is now logged as a warning, with the attempted user, error code and message, request URI, request method, and user agent. Closes a visibility gap where wrong app password attempts left no trace in the log, while wp-login failures already did. Can also be toggled directly via the new simple_history/log_failed_app_password_auth filter.

변경

  • Event details for 12 loggers are now more consistent across the UI and structured in the REST API (migrated from manual HTML output to the Event Details API).
  • Navigational links in comment and plugin events (e.g. “Edit comment”, “View plugin info”) moved from event details to the action links bar for better discoverability.
  • Date filter dropdown reorganized: “All dates” moved to the top as the reset option, presets grouped under “Recent” (Today through Last 60 days, plus “Custom range…”), and specific months grouped under “By month” — easier to scan and matches how users think about date ranges.
  • “Copy detailed event message” action menu item renamed to “Copy as Markdown” with a richer Markdown layout (heading + properties table + structured details + context table) suitable for pasting into a ticket, Slack, or notes app. The Details section reflects what the event row shows (e.g. plugin description / version / author for plugin install events).
  • Stats page “Events overview” chart and sidebar “History Insights” daily activity chart switched from line charts to bar charts, with today highlighted in a contrasting accent color for at-a-glance recency.

Security

  • Event reaction endpoints now enforce per-event read permissions to prevent logged in users to be able to read events they shouldn’t have access to. Reactions are experimental and off by default. Many thanks to Ly Hoang at Wordfence for responsibly disclosing this vulnerability.
  • Password reset request events no longer store the full reset email body, which contained the activation URL. User, email, and origin are still logged.
  • Removed the simple_history/comments_logger/log_failed_password and simple_history/comments_logger/log_not_existing_user_password filters, which could log plaintext passwords from failed logins. Both defaulted to off.

수정

  • Retention upsell message showing “deleted in 0 days” when event deletion is imminent. Now shows “scheduled for deletion” instead.
  • Menu logger flagging unrelated items as “Renamed” on every menu save. Items with HTML in their label, and items inheriting their label from a linked page, are no longer reported as renamed when nothing was actually changed.
  • Menu logger not surfacing renames of the menu itself — the previous and new menu name are now shown in the event details when the “Menu Name” field is changed.

5.26.0 (April 2026)

This version makes the log actions more discoverable by moving them out of the dropdown menu and into inline buttons. It also contains a new experimental feature: reactions!

Read more about it in the release post

추가

  • Media, Comments, and Themes sections to the weekly email summary report. Comments section only appears when comments are enabled on the site.
  • --fields support for wp simple-history list WP-CLI command, including a reactions field showing reaction counts.
  • Experimental — Event reactions: react to log events with a thumbs up emoji, with a Slack-style emoji picker in the actions bar.

변경

  • Control bar actions are now inline buttons instead of a dropdown menu, making Export, Create Alert, Create Log Entry, and Share View more visible and accessible.
  • Expanded filters panel: reordered filters with Users first, moved “Hide my own events” into the Users row, replaced initiators help link with an icon, and trimmed helper text for a cleaner layout.

수정

  • Memory exhaustion when exporting large event logs by reducing batch size and eliminating redundant database queries.
  • Layout shift in control bar action buttons while search options are loading.
  • Oversized file type icon for non-image attachments (e.g. DOCX, PDF) in the event log.

5.25.0 (March 2026)

This release focuses on keeping your database lean. Three features that reduce log storage size are now active for all users: smarter default retention for new installs, failed login rate limiting, and compact diff storage for post content changes.
Read more about it in the release post

추가

  • Failed login rate limiting is now active for all users, capping logging at 100 consecutive failed attempts to prevent database bloat from brute force attacks.
  • Compact diff storage for post content changes is now active for all users, storing only a compact diff instead of full old+new content (up to 99% smaller for typical edits) with automatic fallback when the diff would be larger.
  • Search is now faster and more accurate for all users: queries skip occasion grouping for speed and only search relevant context keys from registered loggers instead of scanning all metadata. Previously this was an experimental opt-in feature. Use the “Event metadata” search field in the advanced filters to search all metadata (similar to the old behavior).
  • Hover-reveal quick action button on event rows for faster access to event details.
  • List of current experimental features shown near the enable toggle in settings.
  • “/” keyboard shortcut to focus the search input, with a visual hint badge. Pressing Escape returns focus to the previously focused element.
  • Settings and Premium/Get Premium buttons in the top-right header, replacing the Add-ons link.
  • Email Reports settings moved to their own sub-tab under Settings for better discoverability.
  • New installs default to 30-day retention (existing installs keep 60 days), keeping your database lean from day one.
  • Experimental — Feature discovery bar in the page header showing active features and settings status with dot indicators. Each item links directly to its settings section for quick access.

변경

  • Search and filters redesigned into a single compact row with search input, date selector, and action buttons — replacing the previous multi-line layout.
  • Expanded filters panel now stacks labels above inputs on smaller screens for better usability.
  • History Insights sidebar: today’s data point is now highlighted with a visible dot and the end date shows “(today)” for clarity.
  • History Insights sidebar: reduced y-axis clutter on the activity chart for a cleaner look.
  • History Insights sidebar: database stats section is now visually separated as footer content with cache freshness info moved into the tooltip.

수정

  • Dashboard widget corners not matching the new rounded style in WordPress 7.0.
  • PHP notice on the widget editor screen (widgets.php) caused by the command palette script loading wp-editor on non-post-editor screens.
  • Occasion counts in the RSS feed were always zero and never rendered.
  • Inverted condition in the GitHub plugin info handler that caused it to always fail.
  • “No matching events” empty state text and icon too light to meet WCAG AA contrast requirements.
  • Deprecation notice when using Yoast Duplicate Post 4.6, which replaced the dp_duplicate_post and dp_duplicate_page hooks with duplicate_post_after_duplicated.

Security

  • Nonce verification added to the GitHub plugin info AJAX handler to prevent CSRF.

5.24.1 (March 2026)

Security

  • RSS feed error response no longer exposes the feed secret token in the self-referencing link.

변경

  • Capabilities added to roles are now logged at “notice” level instead of “warning” to reduce unnecessary alarm during routine plugin activations.

수정

  • Role Capability Logger no longer spams the log when plugins (e.g. Astra/Spectra) toggle capabilities on every page load. Changes are now batched per request and only net differences are logged.

추가

  • User ID displayed as an inline suffix on the name in the user card popover, making it easier to identify users when debugging.

5.24.0 (March 2026)

A redesigned dashboard widget that takes up less space, user details card on click, and much better logging of menus, categories, and image edits.
Read more about it in the release post

추가

  • User card on avatar and name click, showing name, role, and email with a link to the user profile. The Premium add-on extends the card with login history and recent activity.
  • “Copy as image” action in the event menu that captures an event as a shareable image, ready to paste into Slack, social media, or bug reports.
  • Site Health Logger that tracks WordPress Site Health test status changes, logging when issues are detected, resolved, or change severity.
  • Menu change logging now shows item names, types, renames, moves, order changes, and display location updates instead of just item counts.
  • Parent category changes and diff details (name, slug, description, parent) when viewing edited category and tag events.
  • Logging when a page is set as the homepage or posts page from the block editor, including the name of the previously assigned page.
  • Image edit logging (crop, rotate, flip, scale) in the media logger, including a thumbnail preview.
  • Command palette command to view event history for the current post or page.
  • “Event metadata” search field in the advanced filters for searching all event data including IP addresses and emails.
  • “Clear filters” button to reset all search filters to their default values.
  • Rotating tips in the sidebar to help users discover features like RSS feeds, WP-CLI, export, and sticky events.
  • User creation and profile update counts in the email digest report, displayed alongside login statistics in the Users section.
  • REST API skip_count_query parameter to skip the total count query when pagination info is not needed, improving response time for clients that don’t require total counts.
  • Multisite uninstall support, removing tables, options, and cron events across all subsites in the network.
  • Compact storage for post content changes (used for creating a diff between the old and new content), reducing database size for large posts (experimental).
  • Failed login throttling to protect the database from brute-force attacks — logs the first 100 failed attempts, then automatically skips the rest. Includes an informational notice on both the main event log and the dashboard widget (experimental).
  • Role & Capability Logger that tracks when roles are created, deleted, or have their capabilities modified, including which plugin triggered the change (experimental).

변경

  • WP-CLI --user argument renamed to --userid and --exclude_user to --exclude_userid to avoid conflict with WP-CLI’s global --user argument, which caused warnings on newer WP-CLI versions. #629
  • Dashboard widget redesigned with an activity stats summary showing event counts for today and last 7 days, and a more compact event list. Loads significantly faster by limiting queries to the last 7 days and skipping the total count query.
  • Search now only searches the visible event message text by default, making results more relevant and dramatically faster on sites with large activity logs. Previously, search also scanned all hidden metadata which was slow and returned unexpected matches (experimental).
  • Multi-word search now matches each word independently across all searchable fields. For example, “api request 400” now finds events where “api” and “request” appear in the message text and “400” appears in event metadata, instead of requiring all words to exist in the same field (experimental).
  • “Show filters” / “Hide filters” toggle replaces “Show search options” / “Collapse search options”.
  • Action links (Edit, View, Preview, Revisions) now appear below post events.
  • IP address popover redesigned with prominent IP display, AS number links, map service links (Google Maps and OpenStreetMap), and subnet filtering.
  • Core file integrity restored log entry now shows how many files are still modified.
  • Auto backfill runs on the first admin page load instead of WP-Cron, ensuring it works in more environments.
  • Admin bar JavaScript reduced by removing the wp-components dependency, saving ~919 KB on every page load.
  • Object caching added to stats queries, preventing duplicate database queries within the same request.

수정

  • False-positive core file integrity warnings on localized WordPress installs (e.g. sv_SE) caused by hardcoded en_US checksums.
  • Term names showing backslash before apostrophes when editing categories and tags.
  • Incomplete option cleanup on plugin uninstall, leaving orphaned options in the database.
  • Three scheduled cron events not cleared during uninstall (database purge, core file integrity check, log file cleanup).
  • Missing icon for “Other” initiator type.
  • Manual backfill memory error on sites with many users, now processed in batches.

5.23.1 (February 2026)

수정

  • PHP 클래스 5.21–5.23에 대한 하위 호환성 스텁을 추가하여 해당 버전에서 업데이트 시 발생하는 충돌을 방지할 수 있기를 바랍니다. 🤞

5.23.0 (February 2026)

추가

  • WordPress.org에서 강제 보안 업데이트 감지; 플러그인 업데이트 세부 정보에서 “업데이트 방법: 보안 자동 업데이트”로 표시됨.
  • 플러그인 업데이트 세부 정보에서 WordPress.org API의 업그레이드 알림
  • 경고 규칙에서 더 나은 필터링을 위해 11개 로거(비버 빌더, 중복 게시물, 미디어 교체 활성화, 제트팩, 로그인 시도 제한, 리디렉션, 사용자 전환, WP 크론트롤, 프라이버시, 심플 히스토리, 번역)의 레이블을 검색하세요.
  • 세분화된 로그인 실패 필터: 기존 “사용자 로그인 실패” 옵션과 함께, 알려진 사용자에 대해서는 “로그인 실패 (잘못된 비밀번호)”, 존재하지 않는 사용자명에 대해서는 “로그인 실패 (알려지지 않은 사용자)”로 구분됩니다.
  • 디버깅을 위한 이벤트 컨텍스트 내 사용자 역할(_user_role)로, 특정 사용자 역할에 대한 규칙을 추가할 수 있도록 알림에서 사용됩니다.
  • 알림 기능 통계 (WordPress 6.9 이상):
    • 주간 이메일 보고서 내 통계 (추가 및 해결된 노트).
    • 블록 편집기 노트 활동에 대한 역사 통찰력 통계.
    • /wp-json/simple-history/v1/stats/notes의 REST API.
  • 알림 설정 페이지에 프리미엄 알림 미리보기 기능 추가 (프리미엄 플랜의 사전 설정 및 사용자 정의 규칙 참조: 프리미엄).

변경

  • 일부 로거 메시지를 능동태로 수정했습니다: 예시 “접근이 거부되었습니다” “제한된 영역에 접근을 시도했습니다”, “자동으로 비활성화되었습니다” “자동 비활성화됨”, “~ 때문에 잠겼습니다” “~ 후 잠김”, “업데이트되었습니다” “업데이트됨”.
  • 디버그 탭이 도움말 및 지원으로 통합되었습니다; 시스템 정보는 지원 링크 바로 아래에 위치합니다.
  • 도움말 및 지원 상태 표시줄에 플러그인 버전, 이벤트 수, 유지율을 한눈에 확인할 수 있습니다.
  • 시스템 정보에 PHP 최대 입력 변수, WP 메모리 제한, 자식 테마, 테마 제작자, 사용자 에이전트를 추가하여 디버깅을 지원합니다.
  • 강제 보안 플러그인 업데이트의 로그 수준이 “정보”에서 “알림”으로 변경되어 자동 업데이트가 눈에 띄게 표시됩니다.
  • 사용 가능한 업데이트 로거 옵션에 대한 자동 로드를 비활성화하여 필요할 때만 로드되도록 합니다.
  • 좁은 화면에서는 하위 탐색 탭이 줄바꿈되지 않고 가로로 스크롤됩니다.
  • 플러그인 로딩은 더 이상 시작 시 파일 시스템을 스캔하지 않습니다. 로거와 확장 기능은 정적 클래스 목록을 통해 등록되어 더 빠르고 안정적인 초기화를 제공합니다.
  • 사이드바 통계 및 데이터베이스 정리 쿼리를 날짜 인덱스 사용으로 재작성(대용량 테이블에서 더 빠른 성능).
  • Log_Query에는 이제 페이지네이션 메타데이터가 필요하지 않을 때 총 행 수를 생략하는 skip_count_query 옵션이 추가되었습니다.
  • RSS 피드는 이제 성능 향상을 위해 기본적으로 최근 7일간의 콘텐츠를 제공하며 카운트 쿼리를 생략합니다. 또한 날짜 필터링을 위한 dates 매개변수를 지원합니다(예: &dates=lastdays:30).

수정

See CHANGELOG.md for the full changelog, including all releases from 2025 and earlier.