Title: CyberNote Security Checker Author: teeeda1129 Published: 3 juillet 2026 Last modified: 3 juillet 2026 --- Recherche d’extensions ![](https://ps.w.org/cybernote-security-checker/assets/banner-772x250.png?rev=3595246) ![](https://ps.w.org/cybernote-security-checker/assets/icon.svg?rev=3595243) # CyberNote Security Checker Par [teeeda1129](https://profiles.wordpress.org/teeeda1129/) [Télécharger](https://downloads.wordpress.org/plugin/cybernote-security-checker.1.0.0.zip) * [Détails](https://fr.wordpress.org/plugins/cybernote-security-checker/#description) * [Avis](https://fr.wordpress.org/plugins/cybernote-security-checker/#reviews) * [Installation](https://fr.wordpress.org/plugins/cybernote-security-checker/#installation) * [Développement](https://fr.wordpress.org/plugins/cybernote-security-checker/#developers) [Support](https://wordpress.org/support/plugin/cybernote-security-checker/) ## Description CyberNote Security Checker is a lightweight plugin that audits your WordPress site’s security posture without sending any data to external servers. Many security plugins are powerful but heavy, English-only, and full of technical jargon. CyberNote Security Checker takes the opposite approach: it targets Japanese individual bloggers and small business owners who need to understand exactly what to do — delivered quickly and without specialist knowledge. **12 diagnostic checks. Zero external requests.** A widget appears on the WordPress dashboard showing results in three levels: good( no action needed) / attention (improvement recommended) / recommended (priority action required). Each item includes a plain-Japanese explanation of the risk and step-by-step remediation guidance. #### Category A: Version Freshness (3 checks) * **WordPress core** — Detects whether security-only maintenance releases are unapplied. Distinguishes urgency between security patches and feature updates. * **PHP version** — Evaluated against official PHP support status. End-of-life versions flagged as « priority action »; security-only branches as « attention». * **Plugin and theme updates** — Displays the count and names of pending updates. A direct link opens the standard WordPress update screen; the plugin never performs updates itself. #### Category B: Hardening Settings (9 checks) * **Debug display** — WP_DEBUG with screen output on a production site is flagged as « priority action »; log-only mode as « attention ». * **File editing** — If the theme and plugin code editor is enabled in the admin panel, flagged as « priority action ». * **Admin username** — If a user named admin or administrator exists, flagged as« attention » (changing it carries migration risk, so no urgent push). * **HTTPS** — Sites running on plain HTTP are flagged as « priority action ». * **Database table prefix** — Default wp_ prefix flagged as « attention » (live- site changes carry risk, so no urgent push). * **XML-RPC** — Enabled XML-RPC is flagged as « attention »; use-case guidance included before recommending disablement. * **REST API user enumeration** — If anonymous requests to /wp/v2/users return user data, flagged as « attention ». * **Security keys (salts)** — Checks whether the wp-config.php authentication unique keys and salts are set and not left at the default placeholder. Missing or default keys are flagged as « priority action » (login cookies could be forged). Key values are never read out or displayed. * **Unused plugins and themes** — Inactive plugins and unused themes still ship files on the server that can be exploited if vulnerable. Their presence is flagged as « attention » with removal guidance (keeping one fallback theme is fine). #### Design Principles * **Read-only** — The plugin only presents diagnostic results. It never automatically changes site settings or files. * **No external requests** — Every check reads WordPress built-in APIs and site configuration only. Nothing leaves your server. * **Lightweight** — No real-time file scanning, no custom WAF, no resident processes. Diagnostics run once when the admin page loads. * **Plain language** — Technical terms are avoided. Each check explains why it matters and what to do in everyday language. #### Vulnerability alerts (separate external service) This plugin is free and fully functional on its own. Matching your installed plugins and themes against external vulnerability databases (CVE) requires server-side processing that cannot be done locally, so it is offered separately as an external service called CyberNote, not bundled in this plugin. See https://www.cybernote.click/wp- security-checker-guide/ for details. ## Captures d’écrans [⌊Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout.⌉⌊Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout.⌉[ Dedicated admin page — all 10 diagnostic results in one view. Priority items and hardening settings displayed in a two-column layout. [⌊Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items.⌉⌊Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items.⌉[ Dashboard widget — compact summary on the standard WordPress dashboard showing issue count and top-priority items. ## Installation #### Automatic installation 1. Go to Dashboard > Plugins > Add New 2. Search for « CyberNote Security Checker » 3. Click Install Now, then Activate #### Manual installation 1. Download the ZIP file from this page 2. Go to Dashboard > Plugins > Add New > Upload Plugin 3. Select the ZIP file and click Install Now, then Activate 4. After activation, the diagnostic widget appears on your WordPress dashboard ## FAQ ### Does this plugin send any data to external servers? No. All diagnostics run entirely within your WordPress installation. No data is sent anywhere. ### Will running the diagnostics slow down my site? No. Diagnostics only run when you open the plugin’s admin page or dashboard widget, and there is no continuous background scanning. ### Does clicking « Open update screen » automatically update my plugins? No. It navigates to the standard WordPress update screen. The decision to update is yours. ### How do I get the latest results without reloading the page? Click the « Re-diagnose » button inside the widget or admin page to refresh results via AJAX without a full page reload. ### PHP 8.1 is detected. Do I need to upgrade immediately? PHP 8.1 reached end-of-life in late 2025, so the plugin flags it as « priority action». However, upgrading PHP can break some plugins or themes. Take a backup, test in a staging environment if possible, then upgrade. ### Is it safe to leave XML-RPC enabled? If you use Jetpack or a mobile app that relies on XML-RPC, leaving it enabled is fine. If you have no services depending on it, consider disabling it. ## Avis Il n’y a aucun avis pour cette extension. ## Contributeurs/contributrices & développeurs/développeuses « CyberNote Security Checker » est un logiciel libre. Les personnes suivantes ont contribué à cette extension. Contributeurs * [ teeeda1129 ](https://profiles.wordpress.org/teeeda1129/) [Traduisez « CyberNote Security Checker » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/cybernote-security-checker) ### Le développement vous intéresse ? [Parcourir le code](https://plugins.trac.wordpress.org/browser/cybernote-security-checker/), consulter le [SVN dépôt](https://plugins.svn.wordpress.org/cybernote-security-checker/), ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/cybernote-security-checker/) par [RSS](https://plugins.trac.wordpress.org/log/cybernote-security-checker/?limit=100&mode=stop_on_copy&format=rss). ## Journal des modifications #### 1.0.0 * Initial release * Category A (version freshness): 3 diagnostic checks * Category B (hardening settings): 9 diagnostic checks * WordPress dashboard widget with AJAX refresh * Dedicated admin panel with diagnostic sub-pages * Full Japanese language support ## Méta * Version **1.0.0** * Dernière mise à jour **il y a 2 mois** * Installations actives **Moins de 10** * Version de WordPress ** 5.9 ou plus ** * Testé jusqu’à **7.0.4** * Version de PHP ** 7.4 ou plus ** * Langue * [English (US)](https://wordpress.org/plugins/cybernote-security-checker/) * Étiquettes * [audit](https://fr.wordpress.org/plugins/tags/audit/)[diagnostic](https://fr.wordpress.org/plugins/tags/diagnostic/) [hardening](https://fr.wordpress.org/plugins/tags/hardening/)[maintenance](https://fr.wordpress.org/plugins/tags/maintenance/) [security](https://fr.wordpress.org/plugins/tags/security/) * [Vue avancée](https://fr.wordpress.org/plugins/cybernote-security-checker/advanced/) ## Évaluations Aucun avis n’a encore été envoyé. [Votre avis](https://wordpress.org/support/plugin/cybernote-security-checker/reviews/#new-post) [Tout voir](https://wordpress.org/support/plugin/cybernote-security-checker/reviews/) ## Contributeurs * [ teeeda1129 ](https://profiles.wordpress.org/teeeda1129/) ## Support Quelque chose à dire ? Besoin d’aide ? [Voir le forum de support](https://wordpress.org/support/plugin/cybernote-security-checker/)