Description
Ethwebs Role Auditor is an ultra-lightweight, zero-bloat security tool specifically built to catch privilege escalation and unauthorized administrator account creations—even when performed via direct database SQL injection attacks that bypass standard security plugins.
Most security logging plugins create heavy custom database tables and rely strictly on standard WordPress hooks (wp_login, user_register). When attackers exploit database vulnerabilities, they insert rows directly into wp_users and wp_usermeta, bypassing WordPress hooks entirely.
Ethwebs Role Auditor addresses this by running direct, prefix-aware SQL database queries during scheduled background audits to count and identify every single user account holding administrator capabilities.
Key Features:
- Direct Database SQL Audit: Queries the database directly to detect unauthorized administrator accounts added via SQL injection.
- Instant Dashboard Status: Displays real-time role counts and active admin IDs immediately upon opening the settings page.
- Smart Subject Line Previews: View current admin and editor counts directly in your email inbox subject line without having to open the message.
- Multiple Recipient Notifications: Enter single or comma-separated email addresses to notify your security team.
- Attacker Exclusion Protection: Intelligently strips newly promoted/attacker email addresses from receiving security alerts.
- Manual “Run Check Now” Audit: Trigger an instant on-demand database scan and email test directly from your settings panel.
- Instant Role Elevation Alerts: Receive email notifications whenever a user is created or promoted to Administrator or Editor.
- New Admin Login IP Detection: Lightweight persistent IP tracking notifies you when an administrator accesses the dashboard from an unrecognized IP address.
- Zero Database Bloat: Creates zero custom database tables and runs cleanly in the background.
Screenshots
Installation
- Upload the
ethwebs-role-auditorfolder to the/wp-content/plugins/directory. - Activate the plugin through the Plugins menu in WordPress.
- Navigate to Settings > Ethwebs Role Auditor to configure recipient emails and alert preferences.
- Click Run Check Now & Send Email to send an instant email report copy.
FAQ
-
Do I need an SMTP plugin configured for this plugin to work?
-
No. While email reports are sent out in the background, the settings page inside the WordPress dashboard always displays the full, real-time audit table (including user role counts and active admin user IDs) directly on screen.
-
How does this plugin detect attacks that bypass standard security plugins?
-
Most security plugins rely strictly on standard WordPress action hooks (like
wp_login). When attackers use SQL injection vulnerabilities, they write administrative users directly into database tables (wp_usersandwp_usermeta), completely bypassing the WordPress hook layer. Ethwebs Role Auditor executes a direct SQL database query against your actual database table prefix to count and identify every single user account holdingadministratorcapabilities, catching silent database modifications instantly. -
What happens if an attacker creates an admin account with their own email address?
-
Ethwebs Role Auditor features an Attacker Exclusion Safeguard. When an instant role elevation alert fires, the plugin checks the promoted user’s email address against your notification list and strips out the attacker’s email, ensuring they never receive security warnings about their own activity.
-
Can I send alerts to multiple team members?
-
Yes. You can enter multiple comma-separated email addresses (e.g.
admin@site.com, security@site.com) in the Notification Email field under Settings > Ethwebs Role Auditor. -
Will this plugin slow down my site or bloat my database?
-
No. Unlike standard activity log plugins that write thousands of rows to your database every time a page is loaded, Ethwebs Role Auditor is zero-bloat. It creates zero custom database tables. Cron checks run lightly in the background once per day, and temporary session IP tracking uses standard auto-expiring WordPress transients.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Ethwebs Role Auditor” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Ethwebs Role Auditor” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
- Added dynamic email subject lines showing live admin and editor counts directly in inbox previews.
- Enhanced settings page to display live database role counts and active admin IDs immediately on page load.
- Upgraded IP tracking to persistent user meta whitelisting to catch backdoor dashboard access without email spam on clicks.
- Added detailed UI and email sample screenshots to directory listing.
1.0.0
- Initial release. Features direct database auditing, on-screen dashboard report displays, comma-separated multiple email recipients, attacker exclusion safeguard, manual audit check trigger, and IP tracking.