Ethwebs Role Auditor

Ethwebs Role Auditor is an ultra-lightweight, zero-bloat security tool specifically built to catch privilege escalation and unauthorized administrator account creations—even when performed via direct database SQL injection attacks that bypass standard security plugins.

Most security logging plugins create heavy custom database tables and rely strictly on standard WordPress hooks (wp_login, user_register). When attackers exploit database vulnerabilities, they insert rows directly into wp_users and wp_usermeta, bypassing WordPress hooks entirely.

Ethwebs Role Auditor addresses this by running direct, prefix-aware SQL database queries during scheduled background audits to count and identify every single user account holding administrator capabilities.

Key Features:

• Direct Database SQL Audit: Queries the database directly to detect unauthorized administrator accounts added via SQL injection.
• Instant Dashboard Status: Displays real-time role counts and active admin IDs immediately upon opening the settings page.
• Smart Subject Line Previews: View current admin and editor counts directly in your email inbox subject line without having to open the message.
• Multiple Recipient Notifications: Enter single or comma-separated email addresses to notify your security team.
• Attacker Exclusion Protection: Intelligently strips newly promoted/attacker email addresses from receiving security alerts.
• Manual “Run Check Now” Audit: Trigger an instant on-demand database scan and email test directly from your settings panel.
• Instant Role Elevation Alerts: Receive email notifications whenever a user is created or promoted to Administrator or Editor.
• New Admin Login IP Detection: Lightweight persistent IP tracking notifies you when an administrator accesses the dashboard from an unrecognized IP address.
• Zero Database Bloat: Creates zero custom database tables and runs cleanly in the background.