WP beheerders
Site-local wp-load · allowlist · known-bad auto-delete · geen password dumps
Grenzen (eerlijk): dit vangt typische malware die admins aanmaakt (root / [email protected] / wpcron* / lege e-mail)
en laat unknown allowlist-misses zien. Pure SQL INSERT of RCE kan mu-plugins uitzetten — dit is geen vervanging voor het dichten van RCE/DB-deuren.
OK
12
Fail
1
Known-bad
0
Unknown
0
Allowlisted
21
Rapport: 2026-10-14T12:25:35+02:00 · mode audit
anngalland.com
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator | 2012-06-07 19:27:10 |
| allowlisted | 2 | ann | [email protected] | administrator | 2012-06-07 19:57:37 |
bluesalt
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator | 2025-11-04 13:28:39 |
| allowlisted | 2 | nathalie | [email protected] | administrator | 2025-11-04 13:30:55 |
| allowlisted | 3 | Sophie | [email protected] | administrator | 2025-11-04 22:50:54 |
daunadefraye.dog
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator, wpml_manage_translation_management, wpml_manage_languages, wpml_manage_theme_and_plugin_localization, wpml_manage_support, wpml_manage_woocommerce_multilingual, wpml_operate_woocommerce_multilingual, wpml_manage_media_translation, wpml_manage_navigation, wpml_manage_sticky_links, wpml_manage_string_translation, wpml_manage_translation_analytics, wpml_manage_wp_menus_sync, wpml_manage_taxonomy_translation, wpml_manage_troubleshooting, wpml_manage_translation_options, manage_translations, translate | 2019-11-01 16:35:25 |
| allowlisted | 3 | nathan | [email protected] | administrator, wpml_manage_translation_management, wpml_manage_languages, wpml_manage_theme_and_plugin_localization, wpml_manage_support, wpml_manage_woocommerce_multilingual, wpml_operate_woocommerce_multilingual, wpml_manage_media_translation, wpml_manage_navigation, wpml_manage_sticky_links, wpml_manage_string_translation, wpml_manage_translation_analytics, wpml_manage_wp_menus_sync, wpml_manage_taxonomy_translation, wpml_manage_troubleshooting, wpml_manage_translation_options, manage_translations, translate | 2019-11-01 16:52:10 |
elidesc.com
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 2 | geert | [email protected] | administrator, wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others, ddl_create_layout, ddl_assign_layout_to_content, ddl_edit_layout, ddl_delete_layout, ddl_create_content_layout, ddl_edit_content_layout, ddl_delete_content_layout | 2012-02-28 21:25:05 |
| allowlisted | 3 | elidesc | [email protected] | wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others, administrator | 2012-02-28 21:28:08 |
galland.be
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | Geert | [email protected] | administrator, wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others | 2010-11-09 15:53:03 |
| allowlisted | 2 | Ann | [email protected] | administrator, wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others | 2010-11-09 17:22:47 |
gtje.be
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 2 | gtje | [email protected] | administrator | 2013-05-11 18:07:01 |
hillsiderebel.com
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator | 2018-11-25 18:09:07 |
| allowlisted | 2 | koen | [email protected] | administrator | 2018-11-25 18:13:07 |
| allowlisted | 3 | hillsiderebel | [email protected] | administrator | 2018-12-25 16:56:27 |
idelco.be
Site zelf kan online zijn; audit faalt als DB-grants/credentials op deze host niet werken (bv. CloudDB ACL) of als het publieke domein elders host.
imageert.be
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator, wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others | 2015-02-20 20:39:41 |
kinglun.ch
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | geert | [email protected] | administrator, wpcf_custom_post_type_view, wpcf_custom_post_type_edit, wpcf_custom_post_type_edit_others, wpcf_custom_taxonomy_view, wpcf_custom_taxonomy_edit, wpcf_custom_taxonomy_edit_others, wpcf_custom_field_view, wpcf_custom_field_edit, wpcf_custom_field_edit_others, wpcf_user_meta_field_view, wpcf_user_meta_field_edit, wpcf_user_meta_field_edit_others | 2019-12-07 17:36:27 |
kleirrr.be
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 1 | nathalie | [email protected] | administrator | 2021-01-13 22:02:56 |
| allowlisted | 2 | geert | [email protected] | administrator | 2021-01-13 22:04:31 |
vancouteren.com
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 2 | geert | [email protected] | administrator | 2012-03-05 20:54:08 |
www
| Status | ID | Login | Roles | Registered | |
|---|---|---|---|---|---|
| allowlisted | 2 | geert | [email protected] | administrator | 0000-00-00 00:00:00 |
Mu-plugin (optioneel)
Template: tools/admin-audit/templates/mu-plugin-rogue-admin-guard.php — kopieer naar wp-content/mu-plugins/ per site.
Verwijdert known-bad admins bij init/cron. RCE kan dit uitschakelen; het verhoogt wel de lat voor mass-admin scripts.