WP Manifestindependent plugin directory
manifest / security / 9m2pju-litesoc-wp-plugin

9M2PJU LiteSOC WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

WordPress security plugin that integrates the power of LiteSOC real-time threat detection into your WordPress site.

★ 2stars
13release downloads
v1.3.5latest · 7mo ago

Install

Download 9m2pju-litesoc.zip From the v1.3.5 release on GitHub, Mar 18, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/9m2pju/9m2pju-litesoc-wp-plugin/releases/download/v1.3.5/9m2pju-litesoc.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

9M2PJU LiteSOC - WordPress Security Plugin

9M2PJU LiteSOC is a WordPress security plugin that integrates the power of LiteSOC real-time threat detection, Behavioral AI, and Geo-IP Intelligence into your WordPress site.

Settings Page

🚨 LiteSOC In Action

LiteSOC Dashboard

🚀 Key Features

  • Real-time Event Ingestion: Automatically tracks authentication, user management, and admin activities.
  • Source & Environment Tracking: (New) Tag every security event with its origin (e.g., "my-store") and environment (production/staging) for granular monitoring.
  • Compact & Premium UI: (New) Sleek, space-saving admin interface with a modern aesthetic and real-time security logs.
  • Behavioral AI & Geo-IP Intelligence: Identifies Geo-Anomalies, Impossible Travel, and Advanced Brute-force attacks using integrated AI models.
  • Hardened Security: Includes IP validation (X-Forwarded-For support) and input sanitization.
  • Standardized Schema: Uses the official LiteSOC event schema for maximum compatibility.

🏗 Architecture

graph TD
    subgraph WordPress ["WordPress Instance"]
        Hooks[WP Actions & Hooks]
        Tracker[LiteSOC Tracker]
        Admin[Admin Dashboard]
        API[LiteSOC API Wrapper]
    end

    subgraph LiteSOC_Cloud ["LiteSOC Cloud"]
        Ingest[Collect Endpoint]
        AI[Behavioral AI Engine]
        Dash[LiteSOC Dashboard]
    end

    Hooks -->|Triggers| Tracker
    Tracker -->|Normalizes| API
    API -->|HTTPS/JSON| Injest
    Injest -->|Processes| AI
    AI -->|Alerts/Logs| Dash
    Admin -->|Fetches| API

📊 Security Insights

The plugin provides granular insights into your site's security posture:

  • Auth Events: Successful logins, failures, and logouts.
  • Admin Activity: Plugin changes, settings updates, and privilege escalations.
  • User Activity: New registrations and profile modifications.

🛠 Installation

Via WordPress Dashboard (Recommended)

  1. Go to Plugins > Add New Plugin > Upload Plugin.
  2. Click Choose File and select the 9m2pju-litesoc.zip package.
  3. Click Install Now and then Activate.

Via FTP

  1. Upload the 9m2pju-litesoc folder to your /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins menu in WordPress.

Setup

Navigate to the 9M2PJU LiteSOC menu and enter your API Key from the LiteSOC Dashboard.

📈 Statistics & Verification

Verified via brute-force simulation tests:

  • Throughput: ~5 events/sec (unbatched).
  • Latency: <200ms avg response from api.litesoc.io.
  • Success Rate: 100% on valid payload delivery.

☕ Support

If you find this plugin useful, you can support its development by buying me a coffee:

Buy Me A Coffee

📄 License

This project is licensed under the GPLv3 - see the LICENSE file for details.

Releases

Newest 25 of 29 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.3.5 latest
Mar 18, 2026 7mo ago
9m2pju-litesoc.zip
3
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
5
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
2
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 17, 2026 7mo ago
tag only
—
Mar 17, 2026 7mo ago
tag only
—
Mar 17, 2026 7mo ago
tag only
—
Mar 17, 2026 7mo ago
tag only
—
Mar 17, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
tag only
—
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
3
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
0
Mar 16, 2026 7mo ago
9m2pju-litesoc.zip
0
All releases on GitHub →
B grade

Security

9M2PJU LiteSOC 1.3.5 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.3.5
Findings
2
Worst severity
medium
Content hash
0b679be4327ca455d84f9949…

Findings

  • medium Hardcoded LiteSOC live API key in shipped test scripts

    hardcoded_credentials

    Multiple files under tests/ hardcode the live-format API key lsoc_live_98540dd48f70b2edaa247c629bf9a4b0 in mock get_option() helpers. These scripts are included in the release zip. Anyone with plugin filesystem access (or direct PHP execution of plugin paths) obtains a production credential. Key should be revoked and tests must not ship secrets.

    tests/brute-force-test.php:8-14

  • low Standalone test/harness PHP scripts shipped in production package

    dev_tool_in_production

    tests/*.php redefine ABSPATH and call curl_exec against the LiteSOC API. They are not gated behind WP admin and expand attack/ops surface if the web server executes plugin PHP directly. Dev tools should not ship in production releases.

    tests/:1-40

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.