WebOsmotic Diagnostics Dashboard

Description

WebOsmotic Diagnostics Dashboard is a WordPress diagnostics toolkit that goes beyond the default Site Health screen. It runs a collection of checks across your WordPress environment and presents the findings through a dedicated dashboard with a health score and prioritised recommendations.

The plugin helps identify issues related to:

• PHP version compatibility
• WordPress core version and pending updates
• Plugin health, including pending updates and inactive plugins
• Theme health, including pending updates and unused themes
• REST API availability
• File permissions on critical paths
• WP-Cron and scheduled tasks
• Server configuration, including memory, execution time, upload limits, and PHP extensions
• Security hardening, including HTTPS, debug output, the file editor, and the default „admin“ user
• Database and performance, including object cache, autoloaded options, transients, and post revisions
• Debug log issues
• WordPress core file integrity
• Deprecated and incompatible code
• Known vulnerabilities, when WPScan integration is configured

WebOsmotic Diagnostics Dashboard provides a dedicated dashboard where scan results are grouped by severity and accompanied by explanations and recommendations.

The plugin also integrates its checks with the native WordPress Site Health screen.

Background scans can be scheduled, and scan results are stored so previous results can be reviewed and compared.

Features

• Dedicated WebOsmotic Diagnostics Dashboard dashboard
• Health score from 0-100
• Categorised diagnostic checks
• Critical, recommended, and passing statuses
• Background scheduled scans
• Scan history and reports
• Markdown, JSON, and printable HTML report exports
• Selected one-click remediation actions
• Configuration snippets and relevant admin links
• Optional email and webhook alerts for new critical issues
• Optional WPScan vulnerability checking
• WordPress.org core file integrity checking
• Individual check enable/disable controls
• Developer filters for extending the check system

One-click fixes

Where supported, WebOsmotic Diagnostics Dashboard provides one-click remediation actions for issues such as:

• Clearing expired transients
• Flushing the object cache
• Regenerating rewrite rules
• Deleting unused themes
• Deleting inactive plugins

Destructive actions require explicit confirmation before they are performed.

Extending

The plugin provides a filter for registering custom checks.

Example:

add_filter( 'wodd_registered_checks', function ( $checks ) {
    $checks[] = 'My_Custom_Check';
    return $checks;
} );

Custom checks can extend the built-in WODD_Check class and use the plugin’s standard result helpers.

Configuration

WebOsmotic Diagnostics Dashboard → Settings provides configuration options for:

• Background scan schedule
• Scan history retention
• Alert email
• Alert webhook
• WPScan API token
• Individual check enable/disable settings

For locked-down or version-controlled environments, the following values can also be defined in wp-config.php:

define( 'WODD_VULN_API_KEY', 'your-token' );

define( 'WODD_ALERT_EMAIL', 'ops@example.com' );

define( 'WODD_ALERT_WEBHOOK', 'https://hooks.slack.com/services/XXX' );

When configured through constants, the corresponding settings are treated as locked values.

Available filters include:

• wodd_vuln_api_key
• wodd_alert_email
• wodd_alert_webhook
• wodd_registered_checks

External Services

WebOsmotic Diagnostics Dashboard can communicate with the following external services when the related functionality is used.

1. WPScan Vulnerability Database API

Service: https://wpscan.com/api

The optional Known Vulnerabilities check uses the WPScan API to look up installed WordPress plugins, themes, and WordPress core against its vulnerability database.

The service is contacted only when a WPScan API token has been configured.

The plugin sends component slugs and version numbers required for the vulnerability lookup.

Terms: https://wpscan.com/terms/

Privacy: https://automattic.com/privacy/

1. WordPress.org Checksums API

Service: https://api.wordpress.org

The Core File Integrity check uses the WordPress.org API to obtain official checksums for the installed WordPress version and locale.

The request uses the WordPress version and locale required to retrieve the appropriate checksums.

Privacy: https://wordpress.org/about/privacy/

1. Alert Webhook

If you configure an alert webhook, WebOsmotic Diagnostics Dashboard sends alert information to the exact endpoint you provide when a new critical issue is detected.

The webhook destination is controlled by the site administrator.

Documentation

Full documentation:

https://webosmotic.com/webosmotic-diagnostics-dashboard/documentation/

Plugin website:

https://webosmotic.com/webosmotic-diagnostics-dashboard/