WP Manifestindependent plugin directory
manifest / developer / wordpress-plugin-reporter

Plugin Reporter WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Report plugin iinformation

★ 0stars
v1.2.0latest · 27d ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/kobalt-digital/wordpress-plugin-reporter/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

A WordPress plugin that automatically sends plugin information to a remote endpoint once per day and provides a secure REST endpoint for on-demand reporting.

Features

  • Automated Daily Reporting: Automatically collects and sends plugin information once per day
  • Secure REST Endpoint: Provides a secure REST API endpoint (/wp-json/plugin-reporter/v1/send) for on-demand plugin information
  • Customizable Configuration: Configure custom endpoint URL and secret key via settings page
  • Test Connection: Built-in test functionality to verify endpoint connectivity
  • Plugin Information Collected:
    • Plugin slug
    • Plugin name
    • Version
    • Active/inactive status
    • Available updates
    • WordPress and PHP versions
    • Wordfence 2FA coverage and alert settings (when Wordfence is installed)
    • Administrator accounts with an @kobaltdigital.nl email (username and email)

Installation

  1. Upload the plugin files to /wp-content/plugins/plugin-reporter/
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Navigate to Settings → Plugin Reporter to configure

Configuration

Access the settings page via:

  • Settings → Plugin Reporter, or
  • Plugins → Plugin Reporter → Settings (from plugins overview page)

Settings

  • Endpoint URL: The API endpoint where plugin information will be sent (default: https://plugin-reporter.kobaltdigital.nl/api/data)
  • Secret Key: The secret key used for Bearer token authentication (required)

Usage

Automated Reporting

Once activated, the plugin automatically sends plugin information daily via WordPress cron. The next scheduled run is displayed on the settings page.

Manual Testing

Use the "Test Connection" button on the settings page to manually send plugin information and verify connectivity.

REST API Endpoint

Send a POST request to /wp-json/plugin-reporter/v1/send with the following header:

X-Reporter-Key: your-secret-key

The endpoint returns plugin information in JSON format:

{
  "status": "ok",
  "sent_at": "2024-01-01 12:00:00",
  "plugin_count": 25
}

Data Format

The plugin sends the following data structure:

{
  "site_url": "https://example.com",
  "plugins": [
    {
      "slug": "plugin-name",
      "title": "Plugin Name",
      "version": "1.0.0",
      "status": "active",
      "update": false
    }
  ],
  "themes": [
    {
      "slug": "theme-name",
      "name": "Theme Name",
      "version": "1.0.0",
      "active": 1,
      "update": false
    }
  ]
}

Requirements

  • WordPress 5.0 or higher
  • PHP 7.4 or higher

Author

Arne van Hoorn

Version

1.0.9

Releases

11 releases.

Tag
Published
v1.2.0 latest
Sep 25, 2026 27d ago
Sep 8, 2026 1mo ago
Aug 18, 2026 2mo ago
May 21, 2026 5mo ago
Apr 30, 2026 5mo ago
Jan 29, 2026 8mo ago
Jan 28, 2026 8mo ago
Dec 9, 2025 10mo ago
Dec 2, 2025 10mo ago
Dec 2, 2025 10mo ago
Dec 2, 2025 10mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

Plugin Reporter 1.0.8 · audited by WP Registry

No security issues found.

Audited release
1.0.8
Findings
none
Worst severity
—
Content hash
c24250988671b50c5acbf0f5…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.