Update context
Core, plugin, and theme version changes can help explain new browser errors, visual drift, form failures, or checkout issues.
WordPress mode for MetricPoints
Deeper health evidence for the WordPress sites your agency manages.
Find broken client sites before they cost you the account. MetricPoints monitors any website externally. The optional WordPress plugin adds application-side context for agencies that want stronger proof around updates, cron, forms, mail, WooCommerce, browser beacon setup, and safe remote checks.
The plugin is not required. Agencies can start read-only with domains, uptime, TLS, DNS, CSP/header policy, public pages, assets, and visual checks, then install the plugin later when application-confirmed WordPress evidence would help.
Client site
WordPress evidence connected
Plugin and theme changes
Recorded as context for new incidents.
Cron and application health
Reported from WordPress when configured.
Mail and form evidence
Adds proof the browser cannot confirm alone.
Remote action support
Signed, authorized requests for safe checks.
What the plugin adds
Application evidence beside the external checks.
External checks prove what the public website is doing. The WordPress plugin can explain what happened inside the application around the same time.
Beacon and CSP setup
Install the MetricPoints beacon and CSP reporting endpoint from WordPress without editing theme files.
Forms and mail
See form-plugin outcomes and WordPress mail attempts. Configure a separate matching receipt to prove delivery.
Cron and health
Report stale scheduled tasks, runtime warnings, cache health, and bounded application status signals.
WooCommerce readiness
Surface checkout context as evidence without turning MetricPoints into a store-management product.
Authorized remote checks
Support signed, scoped action requests for safe diagnostics when the connector is current and trusted.
Wordfence Intelligence advisory data · early access
Know when a known plugin vulnerability matches what is installed.
When advisory matching is enabled, MetricPoints compares Wordfence Intelligence affected-version ranges with the current, complete active-plugin inventory reported by your connected MetricPoints WordPress plugin. A match becomes a Site Health review finding with the source notice, reported version, and inventory date.
What you need
Install and connect the MetricPoints WordPress plugin on the site. You do not need to install or buy the Wordfence security plugin for this matching feature.
What a match means
The reported version may be exposed and needs review or an update. It does not prove an attack or compromise, and MetricPoints does not apply a firewall rule automatically.
What gets checked
Application checks outside monitors cannot confirm.
A connected plugin sends bounded health snapshots. Findings stay in the same site health and incident views. Snapshots do not include form field values, email bodies, recipients, passwords, or the private connector credential.
WordPress and runtime
- Core, plugin, and theme versions, plus update availability when WordPress reports it.
- PHP branch support compared with dated upstream security dates. A past-support branch is a review finding, not a customer outage.
- Plugin and theme changes, user changes, and fatal fingerprints after updates. Request bodies and debug logs are not collected.
- Cron staleness, cache health, and search-visibility or maintenance states that should not be scored as a broken public funnel.
Forms and mail
- Submission success, failure, and same-request WordPress mail failure for Gravity Forms, WPForms, Fluent Forms, Formidable, and Contact Form 7.
- Contact Form 7 storage when Flamingo, CFDB7, or Advanced CF7 DB is present. Missing storage is coverage, not a site failure.
- Form silence after a previously active form stops storing entries. Maintenance, coming-soon, non-production, and low-volume forms are suppressed.
- Mail attempts grouped by family, including WooCommerce orders with no WooCommerce mail attempt. Inbox delivery is not claimed.
WooCommerce
- Coming-soon and catalog visibility, a no-order add-to-cart or Store API probe, and failed-versus-completed order ratios.
- Public payment-gateway fields without secrets, and shipping-method counts for the store country.
- Cached cart, checkout, or account pages, and checkout scripts removed by optimization plugins.
- On an explicitly enabled staging site, a signed test-order proof of whether WooCommerce recorded and marked the order paid. Customer details and the order key are not saved.
Browser, CSP, and approved actions
- Optional browser beacon for JavaScript errors and performance. Collection stays off until an operator enables it and chooses a consent mode.
- CSP can stay owned outside WordPress, or the plugin can write report-only headers. Enforcing mode is a separate, explicit choice.
- Signed actions the operator enables: send a health snapshot, run a connector self-check, send a mail diagnostic, clear page or object cache, refresh permalinks, trigger WordPress cron, or run the Action Scheduler queue.
- Action results are recorded as evidence. The plugin does not change firewall, DNS, or hosting settings.
Install from the site’s Setup tab. Copy the site key, create the private connector credential there, and paste each value into its own WordPress field. MetricPoints shows the credential once. Create the site in MetricPoints first if this client is not connected yet.
Download WordPress pluginOne product, more confidence
WordPress evidence strengthens the same incident model.
The plugin does not create a separate WordPress dashboard to babysit. It feeds MetricPoints with trusted evidence so site health, activity, notifications, and client-ready reports can show what was observed, where it came from, and why it matters.
External-only site
No software required to start: monitor uptime, domains, DNS, SSL, CSP/header policy, public pages, assets, analytics expectations, visual changes, and forms where configured.
WordPress-connected site
Adds application-confirmed context for changes, cron, mail, form plugins, WooCommerce, and remote diagnostics.