DecaLog

Explore DecaLog vulnerabilities across all versions. Currently tracking 2 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all DecaLog vulnerabilities before they are exploited.

Vulnerability Records

2 records
Plugin Profile
Latestv4.6.0
4.8(8)
96/100
Last Updated
2026-03-23 (4mo ago)
Active Installs
1,000+
Downloads
51,712
Requires WP
6.4+
Requires PHP
8.2+
Tested up to
WP 7.0.2
Created
2019-08-26 (7y ago)

Capture and log events, metrics and traces on your site. Make WordPress observable – finally! De-facto standard stack for WordPress observability, DecaLog provides reliable and powerful logging, monitoring and tracing features for WordPress core, PHP, database, plugins and themes. DecaLog captures events generated by WordPress core, PHP, database, plugins and themes, collates metrics and KPIs and follows traces of the full WordPress execution. It has the ability to enrich these events, metrics and traces with many details regarding their triggering, before storing them in WordPress database or passing them to external services. If you don’t want to use external services, DecaLog provides the tools to leverage all the benefits of observability right in the WordPress admin dashboard. It supports multisite logs delegation and contains many features to help to protect personal information (user pseudonymization, IP obfuscation, etc.). For a full list of supported – internal or third-party – services please, jump to the official supported services list. DecaLog can be used in dev/debug phases or on production sites: it has nearly no resource impact on the server. It provides an extensive set of WP-CLI commands to help operations too. DecaLog is part of PerfOps One, a suite of free and open source WordPress plugins dedicated to observability and operations performance. Developers If you’re a plugins / themes developer and want to take advantage of the logging features of DecaLog, there’s a DecaLog SDK for you. Support This plugin is free and provided without warranty of any kind. Use it at your own risk, I’m not responsible for any improper use of this plugin, nor for any damage it might cause to your site. Always backup all your data before installing a new plugin. Anyway, I’ll be glad to help you if you encounter issues when using this plugin. Please read carefully the FAQ at the bottom of this page before requesting support. Privacy This plugin, as any piece of software, is neither compliant nor non-compliant with privacy laws and regulations. It is your responsibility to use it – by activating the corresponding options or services – with respect for the personal data of your users and applicable laws. This plugin doesn’t set any cookie in the user’s browser. This plugin may handle personally identifiable information (PII). If the GDPR or CCPA or similar regulation applies to your case, you must use the anonymization options embedded in the plugin and/or adapt your processes (consent management, security measure, treatment register, etc.). Donation If you like this plugin or find it useful and want to thank me for the work done, please consider making a donation to La Quadrature Du Net or the Electronic Frontier Foundation which are advocacy groups defending the rights and freedoms of citizens on the Internet. By supporting them, you help the daily actions they perform to defend our fundamental freedoms!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C