Title: IGW Security History
Author: Francisco GP (crishnakh)
Published: <strong>10 rugsėjo, 2026</strong>
Last modified: 10 rugsėjo, 2026

---

Ieškoti įskiepiuose

![](https://ps.w.org/igw-security-history/assets/banner-772x250.png?rev=3690535)

![](https://ps.w.org/igw-security-history/assets/icon-256x256.png?rev=3690535)

# IGW Security History

 Autorius [Francisco GP (crishnakh)](https://profiles.wordpress.org/crishnakh/)

[Parsisiųsti](https://downloads.wordpress.org/plugin/igw-security-history.0.1.0.zip)

 * [Informacija](https://lt.wordpress.org/plugins/igw-security-history/#description)
 * [Atsiliepimai](https://lt.wordpress.org/plugins/igw-security-history/#reviews)
 *  [Diegimas](https://lt.wordpress.org/plugins/igw-security-history/#installation)
 * [Kūrimas](https://lt.wordpress.org/plugins/igw-security-history/#developers)

 [Pagalba](https://wordpress.org/support/plugin/igw-security-history/)

## Aprašymas

IGW Security History provides information about the security history of the plugins
installed on your WordPress site.

The plugin builds a local inventory of installed plugins and combines this information
with known vulnerability data.

For each plugin, it can show:

 * Plugin name and installed version.
 * Whether the plugin is active or inactive.
 * Whether the plugin is available on WordPress.org.
 * Whether the plugin appears to be commercial or external.
 * Total number of known historical vulnerabilities.
 * Vulnerabilities grouped by severity: critical, high, medium, low or unknown.
 * Date of the most recently known vulnerability.
 * Whether the currently installed version is affected by known vulnerabilities.

This makes it possible to distinguish between a plugin that has had security issues
in the past and a plugin whose currently installed version is actually affected 
by a known vulnerability.

For example, a plugin may have dozens of historical vulnerabilities while its current
version has no known vulnerabilities affecting it.

#### Plugin inventory

IGW Security History maintains a local inventory containing information about the
plugins detected on the WordPress installation.

The inventory includes information such as the plugin slug, main file, installed
version, activation status, detected source and the dates when the plugin was first
and last detected.

This information is stored in custom WordPress database tables.

#### WordPress.org availability

The plugin checks whether installed plugins are currently available from the official
WordPress.org plugin directory.

It can distinguish between plugins found on WordPress.org and plugins detected as
commercial or external.

A plugin not currently found on WordPress.org is reported as unavailable. This does
not necessarily mean that the plugin was removed from the directory, since it may
be a commercial, private or custom plugin that was never hosted there.

#### Vulnerability history

IGW Security History retrieves a summarized vulnerability history for detected plugins.

The information includes:

 * Total known vulnerabilities.
 * Critical vulnerabilities.
 * High severity vulnerabilities.
 * Medium severity vulnerabilities.
 * Low severity vulnerabilities.
 * Vulnerabilities without a known severity.
 * Most recently published known vulnerability.

Historical vulnerability information does not mean that the currently installed 
version is vulnerable.

#### Installed version check

In addition to the historical information, IGW Security History compares the currently
installed plugin version against the affected version ranges contained in the vulnerability
database.

This allows the plugin to report separately whether known vulnerabilities affect
the version currently running on the site.

When no matching vulnerability is found, the plugin reports that there are no known
vulnerabilities affecting that version according to the currently available vulnerability
data.

#### Detailed security history

Each detected plugin can be reviewed individually from the IGW Security History 
administration screen.

The detailed view provides a complete overview of the known vulnerability history
for that plugin, including:

 * Historical vulnerability totals grouped by severity.
 * Security status of the currently installed version.
 * A chronological vulnerability timeline.
 * Individual vulnerability details, including CVE identifiers when available, severity,
   CVSS score, publication date and affected version ranges.
 * Information about patched versions when available.

The vulnerability timeline provides a visual representation of the plugin’s security
history over time. Each point represents a known vulnerability and its position 
indicates its publication date and severity.

Points can be selected to navigate directly to the corresponding vulnerability information.

When an installed version is being evaluated, the detailed view distinguishes vulnerabilities
that affect that specific version from vulnerabilities that only form part of the
plugin’s historical record.

#### Plugins screen integration

Security information is also displayed directly on the standard WordPress Plugins
screen.

Depending on the available information, IGW Security History can display:

 * WordPress.org availability or detected external/commercial origin.
 * Whether the installed version has known vulnerabilities.
 * A summary of the plugin’s historical vulnerabilities.

A security history link provides access to the detailed plugin information directly
from the Plugins screen.

The detailed security history can be displayed in a modal window without leaving
the standard WordPress Plugins screen.

#### Manual updates

The administration screen provides controls to refresh the plugin inventory and 
vulnerability information.

Vulnerability checks are performed in batches to reduce the number of external requests.

### External services

IGW Security History connects to an external API operated by IguannaWeb in order
to retrieve vulnerability information.

The service is required to provide the vulnerability history and installed-version
vulnerability checks offered by the plugin.

When a vulnerability update is requested, the plugin sends information about installed
plugins to:

https://api.iguannawp.com/

The information sent may include:

 * Plugin slugs.
 * Installed plugin versions.

This information is used to identify known vulnerabilities associated with the installed
plugins and to determine whether specific installed versions fall within known affected
version ranges.

The plugin does not need to send WordPress user accounts, passwords, post content
or other site content to perform these checks.

The vulnerability database used by the IGW API is currently built using vulnerability
information from Wordfence Intelligence. WordPress installations using IGW Security
History do not connect directly to the Wordfence Intelligence API and do not require
a Wordfence Intelligence API key.

The external service is operated by IguannaWeb.

 * Service website: https://iguannawp.com/
 * Terms and legal information: https://iguannawp.com/politica-de-privacidad/

Because vulnerability information is provided through an external service, availability
and results depend on the availability and current data of that service.

## Ekrano nuotraukos

[⌊IGW Security History administration screen showing the local plugin inventory,
plugin origin, WordPress.org availability and vulnerability information.⌉⌊IGW Security
History administration screen showing the local plugin inventory, plugin origin,
WordPress.org availability and vulnerability information.⌉[

IGW Security History administration screen showing the local plugin inventory, plugin
origin, WordPress.org availability and vulnerability information.

[⌊Detailed security history for an individual plugin, including vulnerability summaries,
installed-version status and the chronological vulnerability timeline.⌉⌊Detailed
security history for an individual plugin, including vulnerability summaries, installed-
version status and the chronological vulnerability timeline.⌉[

Detailed security history for an individual plugin, including vulnerability summaries,
installed-version status and the chronological vulnerability timeline.

[⌊Security and vulnerability information integrated into the standard WordPress 
Plugins screen.⌉⌊Security and vulnerability information integrated into the standard
WordPress Plugins screen.⌉[

Security and vulnerability information integrated into the standard WordPress Plugins
screen.

[⌊Detailed plugin security history displayed in a modal window directly from the
standard WordPress Plugins screen.⌉⌊Detailed plugin security history displayed in
a modal window directly from the standard WordPress Plugins screen.⌉[

Detailed plugin security history displayed in a modal window directly from the standard
WordPress Plugins screen.

## Diegimas

 1. Upload the `igw-security-history` folder to the `/wp-content/plugins/` directory,
    or install the plugin through the WordPress Plugins screen.
 2. Activate IGW Security History from the Plugins screen.
 3. Open the IGW Security History administration screen.
 4. Run the plugin analysis to build the local plugin inventory.
 5. Update the vulnerability information to retrieve the current security history.

No external account or API key is required.

## DUK

### Does having historical vulnerabilities mean that my installed plugin is vulnerable?

No.

IGW Security History separates the historical vulnerability count from vulnerabilities
known to affect the version currently installed on your site.

A plugin can have many historical vulnerabilities while the currently installed 
version is not affected by any of them.

### What information is sent to the IGW API?

Vulnerability checks may send plugin slugs and installed plugin versions.

This information is required to identify the plugin and compare its installed version
with known affected version ranges.

### Do I need a Wordfence API key?

No.

The WordPress plugin communicates with the IGW API. It does not communicate directly
with the Wordfence Intelligence API and does not require a Wordfence API key.

### Does the plugin guarantee that my plugins are secure?

No.

IGW Security History reports known vulnerability information available to its data
source. The absence of a known vulnerability does not guarantee that a plugin is
free from security issues.

The plugin is intended to provide additional security information and should not
replace regular updates, backups and other WordPress security practices.

### What does „Not available on WordPress.org” mean?

It means that the plugin was not found in the WordPress.org plugin directory during
the most recent check.

This does not necessarily mean that WordPress.org removed the plugin. Commercial,
private and custom plugins may never have been published in the directory.

### Are vulnerability checks performed automatically?

The current version provides manual controls for refreshing plugin and vulnerability
information from the administration screen.

### What happens to the stored information when the plugin is uninstalled?

IGW Security History deletes its stored data when the plugin is uninstalled.

## Atsiliepimai

Įskiepis neturi atsiliepimų.

## Programuotojai ir komandos nariai

“IGW Security History” yra atviro kodo programa. Prie jos sukūrimo prisidėję žmonės
surašyti toliau.

Autoriai

 *   [ Francisco GP (crishnakh) ](https://profiles.wordpress.org/crishnakh/)

[Išverskite “IGW Security History” į savo kalbą.](https://translate.wordpress.org/projects/wp-plugins/igw-security-history)

### Domina programavimas?

[Peržiūrėkite kodą](https://plugins.trac.wordpress.org/browser/igw-security-history/),
naršykite [SVN repozitorijoje](https://plugins.svn.wordpress.org/igw-security-history/),
arba užsiprenumeruokite [kodo pakeitimų žurnalą](https://plugins.trac.wordpress.org/log/igw-security-history/)
per [RSS](https://plugins.trac.wordpress.org/log/igw-security-history/?limit=100&mode=stop_on_copy&format=rss).

## Pakeitimų istorija

#### 0.1.0

 * Initial release.
 * Added local inventory of installed plugins.
 * Added plugin activation and installation status tracking.
 * Added WordPress.org availability checks.
 * Added detection of WordPress.org, commercial and external plugin sources.
 * Added historical vulnerability information.
 * Added vulnerability severity classification.
 * Added checks against the currently installed plugin version.
 * Added batch vulnerability queries.
 * Added detailed security history for individual plugins.
 * Added chronological vulnerability timeline.
 * Added navigation between timeline events and vulnerability details.
 * Added vulnerability information to the standard WordPress Plugins screen.
 * Added detailed security history modal to the standard WordPress Plugins screen.
 * Added administration interface for reviewing plugin security information.
 * Added cleanup of plugin data on uninstall.

## Metainformacija

 *  Version **0.1.0**
 *  Atnaujinta **prieš 1 d.**
 *  Aktyvių instaliacijų **Mažiau nei 10**
 *  WordPress versija ** 6.2 ar naujesnė **
 *  Ištestuota iki **7.1**
 *  PHP versija ** 7.4 ar naujesnė **
 *  Kalba
 * [English (US)](https://wordpress.org/plugins/igw-security-history/)
 * Žymos
 * [plugin security](https://lt.wordpress.org/plugins/tags/plugin-security/)[security](https://lt.wordpress.org/plugins/tags/security/)
   [vulnerabilities](https://lt.wordpress.org/plugins/tags/vulnerabilities/)[vulnerability scanner](https://lt.wordpress.org/plugins/tags/vulnerability-scanner/)
 *  [Daugiau](https://lt.wordpress.org/plugins/igw-security-history/advanced/)

## Įvertinimai

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/igw-security-history/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/igw-security-history/reviews/)

## Autoriai

 *   [ Francisco GP (crishnakh) ](https://profiles.wordpress.org/crishnakh/)

## Pagalba

Turite pastabų? Reikia pagalbos?

 [Peržiūrėti pagalbos forumą](https://wordpress.org/support/plugin/igw-security-history/)