Title: CyberNote Security Checker Author: teeeda1129 Published: July 3, 2026 Last modified: July 3, 2026 --- Search plugins ![](https://ps.w.org/cybernote-security-checker/assets/banner-772x250.png?rev=3595246) ![](https://ps.w.org/cybernote-security-checker/assets/icon.svg?rev=3595243) # CyberNote Security Checker By [teeeda1129](https://profiles.wordpress.org/teeeda1129/) [Download](https://downloads.wordpress.org/plugin/cybernote-security-checker.1.0.0.zip) * [Details](https://wordpress.org/plugins/cybernote-security-checker/#description) * [Reviews](https://wordpress.org/plugins/cybernote-security-checker/#reviews) * [Installation](https://wordpress.org/plugins/cybernote-security-checker/#installation) * [Development](https://wordpress.org/plugins/cybernote-security-checker/#developers) [Support](https://wordpress.org/support/plugin/cybernote-security-checker/) ## Description CyberNote Security Checker is a lightweight plugin that audits your WordPress site’s security posture without sending any data to external servers. Many security plugins are powerful but heavy, English-only, and full of technical jargon. CyberNote Security Checker takes the opposite approach: it targets Japanese individual bloggers and small business owners who need to understand exactly what to do — delivered quickly and without specialist knowledge. **12 diagnostic checks. Zero external requests.** A widget appears on the WordPress dashboard showing results in three levels: good( no action needed) / attention (improvement recommended) / recommended (priority action required). Each item includes a plain-Japanese explanation of the risk and step-by-step remediation guidance. #### Category A: Version Freshness (3 checks) * **WordPress core** — Detects whether security-only maintenance releases are unapplied. Distinguishes urgency between security patches and feature updates. * **PHP version** — Evaluated against official PHP support status. End-of-life versions flagged as “priority action”; security-only branches as “attention”. * **Plugin and theme updates** — Displays the count and names of pending updates. A direct link opens the standard WordPress update screen; the plugin never performs updates itself. #### Category B: Hardening Settings (9 checks) * **Debug display** — WP_DEBUG with screen output on a production site is flagged as “priority action”; log-only mode as “attention”. * **File editing** — If the theme and plugin code editor is enabled in the admin panel, flagged as “priority action”. * **Admin username** — If a user named admin or administrator exists, flagged as“ attention” (changing it carries migration risk, so no urgent push). * **HTTPS** — Sites running on plain HTTP are flagged as “priority action”. * **Database table prefix** — Default wp_ prefix flagged as “attention” (live-site changes carry risk, so no urgent push). * **XML-RPC** — Enabled XML-RPC is flagged as “attention”; use-case guidance included before recommending disablement. * **REST API user enumeration** — If anonymous requests to /wp/v2/users return user data, flagged as “attention”. * **Security keys (salts)** — Checks whether the wp-config.php authentication unique keys and salts are set and not left at the default placeholder. Missing or default keys are flagged as “priority action” (login cookies could be forged). Key values are never read out or displayed. * **Unused plugins and themes** — Inactive plugins and unused themes still ship files on the server that can be exploited if vulnerable. Their presence is flagged as “attention” with removal guidance (keeping one fallback theme is fine). #### Design Principles * **Read-only** — The plugin only presents diagnostic results. It never automatically changes site settings or files. * **No external requests** — Every check reads WordPress built-in APIs and site configuration only. Nothing leaves your server. * **Lightweight** — No real-time file scanning, no custom WAF, no resident processes. Diagnostics run once when the admin page loads. * **Plain language** — Technical terms are avoided. Each check explains why it matters and what to do in everyday language. #### Vulnerability alerts (separate external service) This plugin is free and fully functional on its own. Matching your installed plugins and themes against external vulnerability databases (CVE) requires server-side processing that cannot be done locally, so it is offered separately as an external service called CyberNote, not bundled in this plugin. See https://www.cybernote.click/wp- security-checker-guide/ for details. ## Screenshots [⌊Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout.⌉⌊Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout.⌉[ Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout. [⌊Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items.⌉⌊Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items.⌉[ Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items. ## Installation #### Automatic installation 1. Go to Dashboard > Plugins > Add New 2. Search for “CyberNote Security Checker” 3. Click Install Now, then Activate #### Manual installation 1. Download the ZIP file from this page 2. Go to Dashboard > Plugins > Add New > Upload Plugin 3. Select the ZIP file and click Install Now, then Activate 4. After activation, the diagnostic widget appears on your WordPress dashboard ## FAQ ### Does this plugin send any data to external servers? No. All diagnostics run entirely within your WordPress installation. No data is sent anywhere. ### Will running the diagnostics slow down my site? No. Diagnostics only run when you open the plugin’s admin page or dashboard widget, and there is no continuous background scanning. ### Does clicking “Open update screen” automatically update my plugins? No. It navigates to the standard WordPress update screen. The decision to update is yours. ### How do I get the latest results without reloading the page? Click the “Re-diagnose” button inside the widget or admin page to refresh results via AJAX without a full page reload. ### PHP 8.1 is detected. Do I need to upgrade immediately? PHP 8.1 reached end-of-life in late 2025, so the plugin flags it as “priority action”. However, upgrading PHP can break some plugins or themes. Take a backup, test in a staging environment if possible, then upgrade. ### Is it safe to leave XML-RPC enabled? If you use Jetpack or a mobile app that relies on XML-RPC, leaving it enabled is fine. If you have no services depending on it, consider disabling it. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “CyberNote Security Checker” is open source software. The following people have contributed to this plugin. Contributors * [ teeeda1129 ](https://profiles.wordpress.org/teeeda1129/) [Translate “CyberNote Security Checker” into your language.](https://translate.wordpress.org/projects/wp-plugins/cybernote-security-checker) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/cybernote-security-checker/), check out the [SVN repository](https://plugins.svn.wordpress.org/cybernote-security-checker/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/cybernote-security-checker/) by [RSS](https://plugins.trac.wordpress.org/log/cybernote-security-checker/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * Initial release * Category A (version freshness): 3 diagnostic checks * Category B (hardening settings): 9 diagnostic checks * WordPress dashboard widget with AJAX refresh * Dedicated admin panel with diagnostic sub-pages * Full Japanese language support ## Meta * Version **1.0.0** * Last updated **9 hours ago** * Active installations **Fewer than 10** * WordPress version ** 5.9 or higher ** * Tested up to **7.0** * PHP version ** 7.4 or higher ** * Tags * [audit](https://wordpress.org/plugins/tags/audit/)[diagnostic](https://wordpress.org/plugins/tags/diagnostic/) [hardening](https://wordpress.org/plugins/tags/hardening/)[maintenance](https://wordpress.org/plugins/tags/maintenance/) [security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/cybernote-security-checker/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/cybernote-security-checker/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/cybernote-security-checker/reviews/) ## Contributors * [ teeeda1129 ](https://profiles.wordpress.org/teeeda1129/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/cybernote-security-checker/)