List of Audit Trail Events & IDs used by WP Security Audit Log

You are here:
Back

An event is an entry in the WordPress security activity (audit) and monitoring log. For every change the WP Security Audit Log plugin keeps a log of it creates an event with the details of the change, as explained in what are events and event IDs in the WordPress activity log. In this page you can find all the events used by the WP Security Audit Log plugin.

WordPress changes
WooCommerce store and product changes
Yoast SEO plugin settings & SEO metabox changes
bbPress plugin, forums and topics changes
Paid Membeship Pro plugin, memberships, orders & payment changes

WordPress Changes

The list of events the WP Security Audit Log plugin uses in the WordPress activity log to keep a log of all the WordPress changes.

IDSeverityCategoryMessage
2000NOTICEPostCreated a new post and saved it as draft.
2001NOTICEPostPublished a post.
2002NOTICEPostModified a published post.
2008WARNINGPostPermanently deleted a post.
2012WARNINGPostMoved post to trash.
2014HIGHPostRestored post from trash.
2016NOTICEPostChanged the category of a post.
2017NOTICEPostChanged the URL of a post.
2019NOTICEPostChanged the author of a post.
2021NOTICEPostChanged the status of a post.
2023NOTICEPostCreated a new category.
2024WARNINGPostDeleted a category.
2025WARNINGPostChanged the visibility of a post.
2027NOTICEPostChanged the date of a post.
2047NOTICEPostChanged the parent of a page.
2048CRITICALPostChanged the template of a page.
2049NOTICEPostSet a post as sticky.
2050NOTICEPostRemoved post from Sticky.
2052NOTICEPostChanged the parent of a category.
2053CRITICALPostCreated a custom field in a post.
2054CRITICALPostUpdated value of custom field.
2055CRITICALPostDeleted custom field.
2062CRITICALPostUpdated a custom field name.
2065WARNINGPostModified the content of a post.
2073NOTICEPostSubmitted post for review.
2074NOTICEPostScheduled a post.
2086NOTICEPostChanged title of post.
2100NOTICEPostOpened a post in the editor.
2101NOTICEPostViewed a post.
2106NOTICEPostA plugin modified a post.
2111NOTICEPostDisabled comments or trackbacks in a post.
2112NOTICEPostEnabled comments or trackbacks in a post.
2119NOTICEPostAdded tag to a post.
2120NOTICEPostRemoved a tag from a post.
2121NOTICETagsCreated new tag.
2122NOTICETagsDeleted a tag.
2123NOTICETagsRenamed a tag.
2124NOTICETagsChanged the slug of a tag.
2125NOTICETagsChanged tag description.
1000NOTICEUser ActivitySuccessfully logged in.
1001NOTICEUser ActivitySuccessfully logged out.
1002WARNINGUser ActivityFailed Login detected.
1003WARNINGUser ActivityFailed login detected for non-existing WordPress user.
1004WARNINGUser ActivityBlocked from logging.
1005WARNINGUser ActivitySuccessfully logged in. Another session for this user already exists.
2010NOTICEFilesUploaded a file.
2011WARNINGFilesDeleted a file.
1006HIGHUser ActivityLogged out all other sessions with the same user.
1007HIGHUser ActivityLogged out a session.
2090NOTICECommentsApproved a comment.
2091NOTICECommentsUnapproved a comment.
2092NOTICECommentsReplied to a comment.
2093NOTICECommentsEdited a comment.
2094NOTICECommentsMarked a comment as Spam.
2095NOTICECommentsMarked a comment as Not Spam.
2096NOTICECommentsMoved a comment to trash.
2097NOTICECommentsRestored a comment from the trash.
2098NOTICECommentsPermanently deleted a comment.
2099NOTICECommentsPosted a comment.
2042HIGHWidgetsAdded a new widget in a section.
2043WARNINGWidgetsModified a widget.
2044HIGHWidgetsDeleted a widget from a section.
2045NOTICEWidgetsMoved a widget in between sections.
2071NOTICEWidgetsChanged the position of a widget.
2078NOTICEMenusCreated a new menu.
2079WARNINGMenusAdded content to a menu.
2080WARNINGMenusRemoved content from a menu.
2081HIGHMenusDeleted a menu.
2082WARNINGMenusChanged menu settings.
2083NOTICEMenusModified the content in a menu.
2084WARNINGMenusChanged the name of a menu.
2085NOTICEMenusChanged the order of the objects in a menu.
2089NOTICEMenusMoved an object as a sub-item in the menu.
4000HIGHUser ProfileA new user was created.
4001HIGHUser ProfileCreated a new user.
4002HIGHUser ProfileChange the role of a user.
4003HIGHUser ProfileChanged the password.
4004HIGHUser ProfileChanged the password of a user.
4005NOTICEUser ProfileChanged the email address.
4006NOTICEUser ProfileChanged the email address of a user.
4007HIGHUser ProfileDeleted the user.
4014NOTICEUser Profile%Opened the profile page of a user.
4015NOTICEUser ProfileChanged the value of a custom field in user profile.
4016NOTICEUser ProfileCreated the custom field in a user profile.
4017NOTICEUser ProfileChanged the first name of a user.
4018NOTICEUser ProfileChanged the last name of a user %username%.
4019NOTICEUser ProfileChanged the nickname of a user.
4020WARNINGUser ProfileChanged the Display name of a user.
4008HIGHMultisite / User ProfileGranted Super Admin privileges to a user.
4009HIGHMultisite / User ProfileRevoked Super Admin privileges from a user.
4010HIGHMultisite / User ProfileAdded the existing user to the site on the network.
4011HIGHMultisite / User ProfileRemoved a user from a site on the network.
4012HIGHMultisite / User ProfileCreated a new user on the network.
4013HIGHMultisite / User ProfileChange the forum role of the user.
5000HIGHPluginsInstalled a plugin.
5001HIGHPluginsActivated a plugin.
5002HIGHPluginsDeactivated a plugin.
5003HIGHPluginsUninstalled a plugin.
5004WARNINGPluginsUpgraded a plugin.
5010HIGHPluginsPlugin created tables in the database.
5011HIGHPluginsPlugin modified the structure of tables in the database.
5012HIGHPluginsPlugin deleted tables from the database.
5019HIGHPluginsPlugin automatically created post(s).
5020HIGHPluginsPlugin automatically created page(s).
5021HIGHPluginsPlugin automatically created custom post(s).
5025HIGHPluginsPlugin automatically deleted post(s).
5026HIGHPluginsPlugin automatically deleted page(s).
5027HIGHPluginsPlugin automatically deleted custom post(s).
2051HIGHPluginsModified a file with the Plugin Editor.
5005WARNINGThemesInstalled a theme.
5006HIGHThemesActivated a theme.
5007HIGHThemesDeleted a theme.
5008HIGHThemesNetwork activated a theme.
5009HIGHThemesNetwork deactivated a theme.
5013HIGHThemesTheme created tables in the database.
5014HIGHThemesTheme modified the structure of tables in the database.
5015HIGHThemesTheme deleted tables from the database.
5031WARNINGThemesUpdated a theme.
2046HIGHthemesModified a file with the Theme Editor.
5016HIGHDatabaseUnknown component created tables in the database.
5017HIGHDatabaseUnknown component modified the structure of tables in the database.
5018HIGHDatabaseUnknown component deleted tables from the database.
6000NOTICESystem & SettingsSystem automatically deleted X alerts.
6001HIGHSystem & Change the option Anyone can register.
6002HIGHSystem & SettingsChanged the New User Default Role.
6003HIGHSystem & SettingsChanged the WordPress administrator notifications email address.
6004NOTICESystem & SettingsUpdated WordPress.
6005HIGHSystem & SettingsChanged the WordPress permalinks.
6007NOTICEUser ActivityUser has requested a non existing page (404 Error).
6008HIGHSystem & SettingsChanged the option Discourage search engines from indexing this site.
6009HIGHSystem & SettingsEnabled or disabled comments on all the website.
6010HIGHSystem & SettingsChanged the option Comment author must fill out name and email.
6011HIGHSystem & SettingsChanged the option Users must be logged in and registered to comment.
6012HIGHSystem & SettingsChanged the option to automatically close comments after a number of days.
6013NOTICESystem & SettingsChanged the value of the option Automatically close comments.
6014HIGHSystem & SettingsChanged the option for comments to be manually approved.
6015HIGHSystem & SettingsChanged the option for an author to have previously approved comments for the comments to appear.
6016HIGHSystem & SettingsChanged the number of links that a comment must have to be held in the queue.
6017HIGHSystem & SettingsModified the list of keywords for comments moderation.
6018HIGHSystem & SettingsModified the list of keywords for comments blacklisting.
6023NOTICEUser ActivityNon WordPress user has requested a non existing page (404 Error).
7000HIGHMultisite NetworkAdded a site to the network.
7001HIGHMultisite NetworkArchived a site.
7002HIGHMultisite NetworkUnarchived a site.
7003HIGHMultisite NetworkActivated a site.
7004HIGHMultisite NetworkDeactivated a site.
7005HIGHMultisite NetworkDeleted a site.
6024HIGHSystem & SettingsChanged the WordPress address (URL)
6025HIGHSystem & SettingsChanged the site address (URL)
2126NOTICECommmentsWebsite visitor posted a comment.

WooCommerce Changes

The list of events the WP Security Audit Log plugin uses in the WordPress activity log to keep a log of the changes in the WooCommerce store and products.

IDSeverityCategoryMessage
9000NOTICEWooCommerce ProductsCreated a new product and saved it as draft.
9001NOTICEWooCommerce ProductsPublished a product.
9002NOTICEWooCommerce ProductsCreated a new product category.
9003NOTICEWooCommerce ProductsChanged the category of the product.
9004NOTICEWooCommerce ProductsModified the short description of the product.
9005NOTICEWooCommerce ProductsModified the text of the product.
9006NOTICEWooCommerce ProductsChanged the URL of the product.
9007NOTICEWooCommerce ProductsChanged the Product Data of the product.
9008NOTICEWooCommerce ProductsChanged the date of the product.
9009NOTICEWooCommerce ProductsChanged the visibility of the product.
9010NOTICEWooCommerce ProductsModified the published product.
9011NOTICEWooCommerce ProductsModified the draft product.
9012WARNINGWooCommerce ProductsMoved the product to trash.
9013WARNINGWooCommerce ProductsPermanently deleted the product.
9014HIGHWooCommerce ProductsProduct has been restored from trash.
9015NOTICEWooCommerce ProductsChanged the status of the product.
9016WARNINGWooCommerce ProductsChanged the price type and price of the product.
9017WARNINGWooCommerce ProductsChanged the SKU of the product.
9018HIGHWooCommerce ProductsChanged the stock status of the product.
9019WARNINGWooCommerce ProductsChanged the stock quantity of the product.
9020WARNINGWooCommerce ProductsChanged the type of a product.
9021WARNINGWooCommerce ProductsChanged the weight of the product.
9022WARNINGWooCommerce ProductsChanged the dimensions type and dimensions of the product.
9023WARNINGWooCommerce ProductsAdded a downloadable file to the product.
9024WARNINGWooCommerce ProductsRemoved a downloadable file to the product.
9025WARNINGWooCommerce ProductsChanged the name of a downloadable file in the product.
9026WARNINGWooCommerce ProductsChanged the URL of a downloadable file in the product.
9027WARNINGWooCommerce Store SettingsChanged the Weight Unit in the WooCommerce store.
9028WARNINGWooCommerce Store SettingsChanged the Dimensions Unit in the WooCommerce store.
9029HIGHWooCommerce Store SettingsChanged the Base Location in the WooCommerce store.
9030HIGHWooCommerce Store SettingsEnabled or disabled taxes in the WooCommerce store.
9031HIGHWooCommerce Store SettingsChanged the currency in the WooCommerce store.
9032HIGHWooCommerce Store SettingsEnabled or disabled the use of coupons in the WooCommerce store.
9033HIGHWooCommerce Store SettingsEnabled or disabled guest checkout in the WooCommerce store.
9034HIGHWooCommerce Store SettingsEnabled or Disabled the Cash on Delivery option in the WooCommerce Store.

Yoast SEO plugin & SEO metabox Changes

The list of events the WP Security Audit Log plugin uses in the WordPress activity log to keep a log of the changes users make in the posts’ SEO metabox and in the Yoast SEO plugin settings.

IDSeverityCategoryMessage
8801NOTICESEO metaboxChanged title of a SEO post
8802NOTICESEO metaboxChanged the meta description of a SEO post
8803NOTICESEO metaboxChanged setting to allow search engines to show post in search results of a SEO post
8804NOTICESEO metaboxChanged the option for search engine to follow links of a SEO post
8805NOTICESEO metaboxChanged the meta robots advanced setting of a SEO post
8806NOTICESEO metaboxChanged the canonical URL of a SEO post
8807NOTICESEO metaboxChanged the focus keyword of a SEO post
8808NOTICESEO metaboxChanged the option Cornerstone Content of a SEO post
8809WARNINGPlugin settingsChanged the Title Separator setting
8810WARNINGPlugin settingsChanged the Homepage Title
8811WARNINGPlugin settingsChanged the Homepage Meta description
8812WARNINGPlugin settingsChanged the Company or Person setting
8813WARNINGPlugin settingsChanged the option Show Posts/Pages in Search Results
8814WARNINGPlugin settingsChanged the Posts/Pages title template
8815WARNINGPlugin settingsEnabled/Disabled SEO analysis
8816WARNINGPlugin settingsEnabled/Disabled readability analysis
8817WARNINGPlugin settingsEnabled/Disabled cornerstone content
8818WARNINGPlugin settingsEnabled/Disabled the text link counter
8819WARNINGPlugin settingsEnabled/Disabled XML sitemaps
8820WARNINGPlugin settingsEnabled/Disabled ryte integration
8821WARNINGPlugin settingsEnabled/Disabled the admin bar menu
8822WARNINGPlugin settingsChanged the Posts/Pages meta description template
8823WARNINGPlugin settingsChanged the option Date in Snippet Preview for Posts/Pages
8824WARNINGPlugin settingsChanged the option Yoast SEO Meta Box for Posts/Pages
8825WARNINGPlugin settingsChanged the advanced settings for authors

bbPress Changes

The list of events the WP Security Audit Log plugin uses in the WordPress activity log to keep a log of the changes in the bbPress plugin, forums and topics.

IDSeverityCategoryMessage
8000HIGHbbPress ForumsCreated a new forum.
8001NOTICEbbPress ForumsChanged the status of the forum.
8002NOTICEbbPress ForumsChanged the visibility of the forum.
8003HIGHbbPress ForumsChanged the URL of the forum.
8004NOTICEbbPress ForumsChanged the order of the forum.
8005HIGHbbPress ForumsMoved the forum to trash.
8006WARNINGbbPress ForumsPermanently deleted the forum.
8007WARNINGbbPress ForumsRestored the forum from trash.
8008NOTICEbbPress ForumsChanged the parent of the forum.
8011NOTICEbbPress ForumsChanged the type of the forum.
8009WARNINGbbPress SettingsChanged the forum's auto role.
8010WARNINGbbPress SettingsChanged the option for anonymous posting on the forum.
8012NOTICEbbPress SettingsChanged the time to disallow post editing in the forums.
8013WARNINGbbPress SettingsChanged the posting throttle time in the forums.
8014NOTICEbbPress TopicsCreated a new topic.
8015NOTICEbbPress TopicsChanged the status of the topic.
8016NOTICEbbPress TopicsChanged the type of the topic.
8017HIGHbbPress TopicsChanged the URL of the topic.
8018NOTICEbbPress TopicsChanged the forum of the topic.
8019HIGHbbPress TopicsMoved the topic to trash.
8020WARNINGbbPress TopicsPermanently deleted the topic.
8021WARNINGbbPress TopicsRestored the topic from trash.
8022NOTICEbbPress TopicsChanged the visibility of the topic.

Paid Membership Pro Changes

The list of events the WP Security Audit Log plugin uses in the WordPress activity log to keep a log of the changes that happen on your Paid Membership Pro memberships, users, orders, payments and payment gateways. Monitoring of such changes is provided by a third party plugin WP Security Audit Log addon for Paid Memberships Pro.

IDSeverityCategoryMessage
8501PMPro / User MetaCreated a new meta field for a member user.
8502PMPro / User MetaChanged the name of the meta field for a member user.
8503PMPro / User MetaModified the value of a meta field for a member user.
8504PMPro / User MetaDeleted a meta field that was in a member user profile.
8601PMPro / OrdersNew PMPro order has been added to a user.
8602PMPro / OrdersPMPro order has been deleted.
8603PMPro / OrdersPMPro order has been changed.
8604PMPro / MembershipsUser's PMPro Level changed.
8605PMPro / MembershipsUser completed PMPro checkout process.
8618PMPro / MembershipsA PMPro level associated with a user was canceled.
8606PMPro / Discount CodesPMPro discount code is deleted.
8607PMPro / Discount CodesPMPro discount code is Updated.
8608PMPro / Discount CodesPMPro discount code level is updated.
8609PMPro / MembershipsPMPro Membership Level is saved.
8610PMPro / MembershipsPMPro Membership Level is deleted.
8611PMPro / Payments & GatewaysPMPro Payment Subscription is canceled.
8612PMPro / Payments & GatewaysPMPro Payment Subscription is expired.
8613PMPro / Payments & GatewaysA PMPro Paypal IPN Payment is processed.
8614PMPro / Payments & GatewaysA PMPro Payment Subscription is completed.
8615PMPro / Payments & GatewaysA PMPro Payment Subscription failed.
8616PMPro / Payments & GatewaysA PMPro Payment Subscription is past due.
8617PMPro / Discount CodesA PMPro discount code is Added.