/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ WP Activity Log

WP Activity Log

By Melapress

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

WP Activity Log Review - In-Depth Analysis

The #1 user-rated activity log plugin for event logging, activity monitoring and change tracking.

Performance Overview

WPS Score

7.24/10

User Rating

4.7/5 (based on 488+ reviews)

Active Installations

300,000+

Update Frequency

Average It is calculated using the weighted average of same category plugins.

Security Score

7.15 / 10 (High Risk) It is calculated using the weighted average of all versions.

What It Does

Monitor activity on your WordPress sites and get clear insights into what is happening with detailed user and event logging.

Keep WordPress logs of everything that happens on your sites and multisite networks with WP Activity Log instantly, without writing a line of code.

Easily detect suspicious activity on your WordPress site before it escalates. Record failed login attempts to detect potential security breaches and strengthen site protection. Track user logins and logouts to ensure SLAs are consistently met. Monitor user activity and productivity to boost accountability. Know exactly what all your users are doing in real time. Know what happened before an outage for faster, easier troubleshooting. Ensure compliance with regulations and standards like GDPR and PCI DSS. Better manage and organize your site and users for smoother operations.

WP Activity Log is a complete logging solution, helping hundreds of thousands of administrators and security professionals track changes on their websites thanks to real-time user activity monitoring.

Need more extensive features? Unlock advanced reporting, exports/mirroring, session management, and real-time alerts with WP Activity Log premium or enterprise.

A website activity log is important for improving troubleshooting, compliance, user management, and security. Get WP Activity Log and keep track of events on your site. The log not only tells you that a post, a user profile, or an object was updated, it also lets you know exactly what changed, when, and includes a user log, so you always have the information you need.

Detailed event logging ensures that for every event that the plugin records, it reports the date and time of when it happened, the user and role of the user who did the change, the source IP address from where the change happened, and the object on which the change has taken place.

All WP Activity Log editions include activity tracking for third-party plugins, including WooCommerce, Yoast SEO, RankMath, WPForms, Gravity Forms, and more. The premium edition of WP Activity Log takes WordPress user activity tracking to the next level, offering additional features such as log mirroring, enterprise-grade support, and user session management.

Comparing to Alternatives

WP Activity Log sits among a crowded field of activity logging and login monitoring tools, ranging from lightweight notification plugins to more comprehensive audit solutions. It stands out for its depth of tracked events and long-standing reputation, though several simpler alternatives exist for users who only need basic login alerts or file change monitoring.

Top alternatives

Strengths

Extensive event tracking covering users, content, plugins, and database changes
Strong integration with multisite and management tools like MainWP
Highly rated, fast-responding support team
Mature plugin with years of active development and a large user base

Weaknesses

Notable history of security vulnerabilities requiring frequent patching
Some competitors offer simpler, lighter-weight solutions for basic needs
Occasional compatibility issues with third-party plugins like Gravity Forms

User Sentiment Analysis

With a 4.7/5 average from 488 ratings and nearly 89% five-star reviews, sentiment toward WP Activity Log is overwhelmingly positive. The 7.6% share of 1-2 star reviews is relatively low, and most negative feedback appears tied to isolated technical issues rather than core functionality complaints.

Positive highlights

"Their turnaround time was impressive — they identified the root cause quickly... and provided a patched build the same day" — alexandrecafe
"New WordPress 7.1 upgrade wasn't compatible... 5 mins later reply from Lucien including patch" — mrewbie65812
"Its integration with MainWP is by far crucial for controlling, auditing, and securing our network of websites" — Pablo Savigne
"I couldn't stress enough how essential this plugin is, especially for wp sites that have multiple users" — mvsx4
"I wouldn't be able to manage all my sites without this plugin. Lots of configuration options and fast support" — villekautto

Common complaints

PHP 8+ compatibility issue causing a fatal error when used alongside Gravity Forms, due to a null value passed to trim() in the Gravity Forms Sensor class

Weaknesses

A long track record of 17 known vulnerabilities, including high and critical severity issues, though all have been patched
Recent medium and high severity XSS and object injection flaws suggest ongoing security scrutiny is needed
Compatibility hiccups with major WordPress core updates and third-party plugins have occasionally caused fatal errors

Who Should Use This?

Best for

Site administrators, agencies, and freelancers managing multiple WordPress sites who need detailed, granular activity logging for accountability, troubleshooting, and compliance purposes. It's especially well-suited to those already using MainWP or needing enterprise integrations like Cloudwatch.

Not ideal for

Users seeking a minimal, low-maintenance logging tool, or those wary of plugins with an extensive history of patched vulnerabilities, may prefer a simpler alternative. Sites running Gravity Forms on PHP 8+ should verify compatibility before relying on this plugin in production.

Pricing & Value

Free version includes

The free version offers robust activity logging covering user actions, content changes, and system events, which many reviewers say is sufficient on its own and praise as feature-rich even without upgrading.

Pro version (99 - 199 USD / year)

The premium version adds features like Composer support, Cloudwatch integration, extended reporting, and enterprise-focused capabilities aimed at larger or more complex WordPress environments.

Final Verdict

WP Activity Log earns its strong reputation through comprehensive logging capabilities and consistently praised, fast customer support — reviewers repeatedly highlight same-day fixes and responsive communication, even for free-tier users. The overwhelmingly positive rating distribution reflects genuine satisfaction with both functionality and service quality.

That said, its lengthy history of security vulnerabilities, including several high and critical severity issues over the years, is worth weighing carefully, even though all have been resolved promptly. For users who need deep, reliable auditing and don't mind staying current with updates, this plugin remains a strong choice; those wanting a lighter footprint or fewer historical security concerns might explore simpler alternatives instead.

Other Notable Features

Here are a few other notable features of this free WP Activity Log plugin.

Activity Log

Event Log

User Tracking

Screenshots

FAQ

No, the free edition does not limit the data the plugin collects whatsoever. All events logged by the premium edition are available in the free edition. The premium edition adds additional features such as extensive log filtering options, external database/log management service integration, user session management, and much more.