Description
ListingCore Diagnostics inspects a WordPress installation and reports what it can directly observe — versions, update state, security and performance configuration, database metadata, error-log activity, and more — without guessing.
Project Philosophy:
ListingCore Diagnostics should report what it can prove, not what it merely suspects.
Current capabilities:
- 32 static, read-only, deterministic diagnostics across core, configuration, security, performance, database, plugins, and themes.
- A factual diagnostic summary (total, severity, and category counts) with no scoring or interpretation.
- Aggregate evidence only — no raw option dumps, credentials, or paths.
- One reversible fix (
fix.site_urls_align) with preview, confirmation, verification, and rollback. - A capability-gated admin page with fully escaped output.
ListingCore Diagnostics deliberately avoids speculative diagnosis, plugin blame, root-cause claims, health scoring, AI/ML, arbitrary filesystem scanning, arbitrary SQL, external HTTP, and telemetry. Diagnostics are read-only; the only mutation path is a single, explicitly confirmed, nonce-protected fix.
Requirements
- WordPress 6.0 or higher
- PHP 7.4 or higher
- MySQL 5.7 or higher (or MariaDB 10.2+)
Security
- Diagnostics are read-only and aggregate-only
- The single fix requires the
manage_optionscapability and a valid nonce - All output is escaped
- No external HTTP, telemetry, or automatic data modification
See docs/SECURITY.md for details.
License
This plugin is licensed under the GPL v2 or later license.
Installation
- Upload the
listingcore-diagnosticsplugin to/wp-content/plugins/ - Activate the plugin through WordPress admin
- Open ListingCore Diagnostics in the admin menu
Reviews
There are no reviews for this plugin.
Contributors & Developers
“ListingCore Diagnostics” is open source software. The following people have contributed to this plugin.
Contributors
Translate “ListingCore Diagnostics” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.2.0
- Rollback outcome correctness: an unchanged write is no longer misreported as a rollback failure.
- Value-bound fix confirmation: approval is now bound to the exact previewed before-state and direction.
- Shared LogFileReader across the debug-log diagnostics, so the bounded log tail is read once per scan.
- Coalesced database metadata queries via a shared read-only DatabaseMetadata provider.
- Four new read-only diagnostics: core.wp_cron, database.upgrade_pending, configuration.upload_limits, security.xmlrpc (32 total).
- Unified site URL comparison semantics shared by configuration.site_urls and fix.site_urls_align.
- Environment-aware suppression for approved environment-sensitive diagnostics; unknown environments never suppress and security-posture/ERROR results are never suppressed.
- Admin UX: “All Diagnostics” is a collapsed native disclosure and the fix confirmation shows trusted Before -> After values.
- Tooling: committed PHPUnit configuration, GitHub Actions CI, and reproducible forward-slash packaging scripts.
- Added the ListingCore Diagnostics translation template (POT) for translations.