Upgrade to version 1.0.1 for live database role counts in settings, dynamic email subject preview lines, and persistent IP access tracking.<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3648222,"resolution":"1","location":"assets","locale":"","width":660,"height":453},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3648222,"resolution":"2","location":"assets","locale":"","width":715,"height":160},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3648222,"resolution":"3","location":"assets","locale":"","width":896,"height":332},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3648222,"resolution":"4","location":"assets","locale":"","width":755,"height":325},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3648222,"resolution":"5","location":"assets","locale":"","width":497,"height":196}},"screenshots":{"1":"Current Role Status: Live database audit table showing user counts per role and detected active admin user IDs.","2":"Manual Audit & Email Trigger: Instant on-demand audit trigger button and email dispatch status notice.","3":"Configuration Settings: Notification email recipients, maximum expected admins baseline, and alert option checkboxes.","4":"Setup Email Report: Sample security audit report email received with live user role summary and subject line count preview.","5":"Admin IP Access Alert: Security email intimation received when an administrator accesses the dashboard from a new IP address."}},"plugin_section":[],"plugin_tags":[83,8533,153,1915,600],"plugin_category":[54],"plugin_contributors":[272158],"plugin_business_model":[],"class_list":["post-352428","plugin","type-plugin","status-publish","hentry","plugin_tags-admin","plugin_tags-audit","plugin_tags-database","plugin_tags-roles","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-sanmathiraj","plugin_committers-sanmathiraj"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/ethwebs-role-auditor.svg","icon_2x":false,"generated":true},"screenshots":[{"src":"https:\/\/ps.w.org\/ethwebs-role-auditor\/assets\/screenshot-1.png?rev=3648222","caption":"Current Role Status: Live database audit table showing user counts per role and detected active admin user IDs."},{"src":"https:\/\/ps.w.org\/ethwebs-role-auditor\/assets\/screenshot-2.png?rev=3648222","caption":"Manual Audit & Email Trigger: Instant on-demand audit trigger button and email dispatch status notice."},{"src":"https:\/\/ps.w.org\/ethwebs-role-auditor\/assets\/screenshot-3.png?rev=3648222","caption":"Configuration Settings: Notification email recipients, maximum expected admins baseline, and alert option checkboxes."},{"src":"https:\/\/ps.w.org\/ethwebs-role-auditor\/assets\/screenshot-4.png?rev=3648222","caption":"Setup Email Report: Sample security audit report email received with live user role summary and subject line count preview."},{"src":"https:\/\/ps.w.org\/ethwebs-role-auditor\/assets\/screenshot-5.png?rev=3648222","caption":"Admin IP Access Alert: Security email intimation received when an administrator accesses the dashboard from a new IP address."}],"raw_content":"\n
Ethwebs Role Auditor<\/strong> is an ultra-lightweight, zero-bloat security tool specifically built to catch privilege escalation and unauthorized administrator account creations\u2014even when performed via direct database SQL injection attacks that bypass standard security plugins.<\/p>\n\n Most security logging plugins create heavy custom database tables and rely strictly on standard WordPress hooks ( Ethwebs Role Auditor addresses this by running direct, prefix-aware SQL database queries during scheduled background audits to count and identify every single user account holding administrator capabilities.<\/p>\n\n No. While email reports are sent out in the background, the settings page inside the WordPress dashboard always displays the full, real-time audit table (including user role counts and active admin user IDs) directly on screen.<\/p><\/dd>\n Most security plugins rely strictly on standard WordPress action hooks (like Ethwebs Role Auditor features an Attacker Exclusion Safeguard. When an instant role elevation alert fires, the plugin checks the promoted user's email address against your notification list and strips out the attacker's email, ensuring they never receive security warnings about their own activity.<\/p><\/dd>\n Yes. You can enter multiple comma-separated email addresses (e.g. No. Unlike standard activity log plugins that write thousands of rows to your database every time a page is loaded, Ethwebs Role Auditor is zero-bloat. It creates zero custom database tables. Cron checks run lightly in the background once per day, and temporary session IP tracking uses standard auto-expiring WordPress transients.<\/p><\/dd>\n\n<\/dl>\n\n\nwp_login<\/code>, user_register<\/code>). When attackers exploit database vulnerabilities, they insert rows directly into wp_users<\/code> and wp_usermeta<\/code>, bypassing WordPress hooks entirely.<\/p>\n\nKey Features:<\/h3>\n\n
\n
\n
ethwebs-role-auditor<\/code> folder to the \/wp-content\/plugins\/<\/code> directory.<\/li>\n\n
Do I need an SMTP plugin configured for this plugin to work?<\/h3><\/dt>\n
How does this plugin detect attacks that bypass standard security plugins?<\/h3><\/dt>\n
wp_login<\/code>). When attackers use SQL injection vulnerabilities, they write administrative users directly into database tables (wp_users<\/code> and wp_usermeta<\/code>), completely bypassing the WordPress hook layer. Ethwebs Role Auditor executes a direct SQL database query against your actual database table prefix to count and identify every single user account holding administrator<\/code> capabilities, catching silent database modifications instantly.<\/p><\/dd>\nWhat happens if an attacker creates an admin account with their own email address?<\/h3><\/dt>\n
Can I send alerts to multiple team members?<\/h3><\/dt>\n
admin@site.com, security@site.com<\/code>) in the Notification Email field under Settings > Ethwebs Role Auditor<\/strong>.<\/p><\/dd>\nWill this plugin slow down my site or bloat my database?<\/h3><\/dt>\n
1.0.1<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n